{"grype_matches":[{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-6732","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6732","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-6732","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"risk":0.47400000000000003,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-6732"},"relatedVulnerabilities":[{"id":"CVE-2026-6732","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"urls":["https://access.redhat.com/errata/RHSA-2026:11503","https://access.redhat.com/security/cve/CVE-2026-6732","https://bugzilla.redhat.com/show_bug.cgi?id=2461300","https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097","https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6732","description":"A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6732","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-6732","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"risk":0.47400000000000003,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-6732"},"relatedVulnerabilities":[{"id":"CVE-2026-6732","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"urls":["https://access.redhat.com/errata/RHSA-2026:11503","https://access.redhat.com/security/cve/CVE-2026-6732","https://bugzilla.redhat.com/show_bug.cgi?id=2461300","https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097","https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6732","description":"A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6732","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-6732","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"risk":0.47400000000000003,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-6732"},"relatedVulnerabilities":[{"id":"CVE-2026-6732","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"urls":["https://access.redhat.com/errata/RHSA-2026:11503","https://access.redhat.com/security/cve/CVE-2026-6732","https://bugzilla.redhat.com/show_bug.cgi?id=2461300","https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097","https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6732","description":"A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6732","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-6732","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"risk":0.47400000000000003,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-6732"},"relatedVulnerabilities":[{"id":"CVE-2026-6732","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"urls":["https://access.redhat.com/errata/RHSA-2026:11503","https://access.redhat.com/security/cve/CVE-2026-6732","https://bugzilla.redhat.com/show_bug.cgi?id=2461300","https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097","https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6732","description":"A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6732","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-6732","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"risk":0.47400000000000003,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-6732"},"relatedVulnerabilities":[{"id":"CVE-2026-6732","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"urls":["https://access.redhat.com/errata/RHSA-2026:11503","https://access.redhat.com/security/cve/CVE-2026-6732","https://bugzilla.redhat.com/show_bug.cgi?id=2461300","https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097","https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6732","description":"A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6732","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-6732","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"risk":0.47400000000000003,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-6732"},"relatedVulnerabilities":[{"id":"CVE-2026-6732","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"urls":["https://access.redhat.com/errata/RHSA-2026:11503","https://access.redhat.com/security/cve/CVE-2026-6732","https://bugzilla.redhat.com/show_bug.cgi?id=2461300","https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097","https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6732","description":"A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6732","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-6732","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"risk":0.47400000000000003,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-6732"},"relatedVulnerabilities":[{"id":"CVE-2026-6732","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"urls":["https://access.redhat.com/errata/RHSA-2026:11503","https://access.redhat.com/security/cve/CVE-2026-6732","https://bugzilla.redhat.com/show_bug.cgi?id=2461300","https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097","https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6732","description":"A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable."}]},{"artifact":{"id":"413fe1dc3f1ee045","cpes":["cpe:2.3:a:jonathan-hedley:jsoup:1.23.1:*:*:*:*:*:*:*","cpe:2.3:a:jonathan_hedley:jsoup:1.23.1:*:*:*:*:*:*:*","cpe:2.3:a:org.jsoup:jsoup:1.23.1:*:*:*:*:*:*:*","cpe:2.3:a:jsoup:jsoup:1.23.1:*:*:*:*:*:*:*"],"name":"jsoup","purl":"pkg:maven/org.jsoup/jsoup@1.23.1","type":"java-archive","version":"1.23.1","language":"java","licenses":["https://jsoup.org/license"],"metadata":{"pomGroupID":"org.jsoup","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.96.5-05.jar:BOOT-INF/lib/jsoup-1.23.1.jar","manifestName":"","pomArtifactID":"jsoup","archiveDigests":[{"value":"0c0350bb325da274f0508349109516a7855d01ab","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.96.5-05.jar","layerID":"sha256:ca8d74ab56b1b5a881eaaf7d2dd185cecb6f55e11cd0670d1f835f3c69a0d19f","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.96.5-05.jar:BOOT-INF/lib/jsoup-1.23.1.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.23.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-65r4-943x-97jj","versionConstraint":"<1.23.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jsoup:jsoup","version":"1.23.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-65r4-943x-97jj","fix":{"state":"fixed","versions":["1.23.2"],"available":[{"date":"2026-10-06","kind":"first-observed","version":"1.23.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75140","cwe":"CWE-770","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-75140","date":"2026-11-12","epss":0.00525,"percentile":0.45022}],"risk":0.40950000000000003,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-75140","https://github.com/jhy/jsoup/pull/2556","https://github.com/jhy/jsoup/commit/862ba2f1d48ee95609183dbcfc848c9fd7afc76a","https://www.vulncheck.com/advisories/jsoup-uncontrolled-resource-consumption-in-xmltreebuilder","https://github.com/jhy/jsoup/releases/tag/jsoup-1.23.2"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-65r4-943x-97jj","description":"jsoup XmlTreeBuilder vulnerable to memory exhaustion through deeply nested namespace declarations"},"relatedVulnerabilities":[{"id":"CVE-2026-75140","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75140","cwe":"CWE-770","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-75140","date":"2026-11-12","epss":0.00525,"percentile":0.45022}],"urls":["https://github.com/jhy/jsoup/commit/862ba2f1d48ee95609183dbcfc848c9fd7afc76a","https://github.com/jhy/jsoup/pull/2556","https://www.vulncheck.com/advisories/jsoup-uncontrolled-resource-consumption-in-xmltreebuilder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75140","description":"jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited namespace map on every start element, causing quadratic time and memory complexity, which attackers can exploit to trigger an OutOfMemoryError and terminate the application."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91403","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91403","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91403","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"risk":0.339375,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91403"},"relatedVulnerabilities":[{"id":"CVE-2026-91403","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-91403.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91403","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and  21.0.13; Oracle GraalVM Enterprise Edition: 21.3.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91403","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91403","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"risk":0.339375,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91403"},"relatedVulnerabilities":[{"id":"CVE-2026-91403","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-91403.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91403","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and  21.0.13; Oracle GraalVM Enterprise Edition: 21.3.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91403","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91403","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"risk":0.339375,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91403"},"relatedVulnerabilities":[{"id":"CVE-2026-91403","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-91403.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91403","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and  21.0.13; Oracle GraalVM Enterprise Edition: 21.3.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91403","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91403","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"risk":0.339375,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91403"},"relatedVulnerabilities":[{"id":"CVE-2026-91403","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-91403.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91403","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and  21.0.13; Oracle GraalVM Enterprise Edition: 21.3.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91403","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91403","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"risk":0.339375,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91403"},"relatedVulnerabilities":[{"id":"CVE-2026-91403","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-91403.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91403","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and  21.0.13; Oracle GraalVM Enterprise Edition: 21.3.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91403","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91403","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"risk":0.339375,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91403"},"relatedVulnerabilities":[{"id":"CVE-2026-91403","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-91403.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91403","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and  21.0.13; Oracle GraalVM Enterprise Edition: 21.3.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91403","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91403","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"risk":0.339375,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91403"},"relatedVulnerabilities":[{"id":"CVE-2026-91403","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-91403.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91403","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and  21.0.13; Oracle GraalVM Enterprise Edition: 21.3.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"52bcd174c7a74665","cpes":["cpe:2.3:a:org.sonatype.oss:json:20231013:*:*:*:*:*:*:*","cpe:2.3:a:org.json:json:20231013:*:*:*:*:*:*:*","cpe:2.3:a:sonatype:json:20231013:*:*:*:*:*:*:*","cpe:2.3:a:json:json:20231013:*:*:*:*:*:*:*","cpe:2.3:a:oss:json:20231013:*:*:*:*:*:*:*"],"name":"json","purl":"pkg:maven/org.json/json@20231013","type":"java-archive","version":"20231013","language":"java","licenses":["https://github.com/stleary/JSON-java/blob/master/LICENSE"],"metadata":{"pomGroupID":"org.json","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.96.5-05.jar:BOOT-INF/lib/json-20231013.jar","manifestName":"","pomArtifactID":"json","archiveDigests":[{"value":"e22e0c040fe16f04ffdb85d851d77b07fc05ea52","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.96.5-05.jar","layerID":"sha256:ca8d74ab56b1b5a881eaaf7d2dd185cecb6f55e11cd0670d1f835f3c69a0d19f","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.96.5-05.jar:BOOT-INF/lib/json-20231013.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"20260719"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-ghc9-756g-vrcv","versionConstraint":">=20150729,<20260719 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.json:json","version":"20231013"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-ghc9-756g-vrcv","fix":{"state":"fixed","versions":["20260719"],"available":[{"date":"2026-11-10","kind":"first-observed","version":"20260719"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59171","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59171","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59171","date":"2026-11-12","epss":0.00552,"percentile":0.46656}],"risk":0.30084,"urls":["https://github.com/stleary/JSON-java/security/advisories/GHSA-ghc9-756g-vrcv","https://nvd.nist.gov/vuln/detail/CVE-2026-59171","https://github.com/stleary/JSON-java/pull/1065","https://github.com/stleary/JSON-java/pull/1067","https://github.com/stleary/JSON-java/commit/703ac34a55400f9c50889e3d0c778b6d7962e81c","https://github.com/stleary/JSON-java/commit/ab92bb9088a37f9e346cd1dda66f6a3c40a201e0","https://github.com/stleary/JSON-java/commit/fce83c91bb229dde472283dea648a9a8955237fd","https://github.com/stleary/JSON-java/releases/tag/20260719"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-ghc9-756g-vrcv","description":"JSON-java: JSONTokener Has Unbounded Numeric String Resource-Exhaustion DoS"},"relatedVulnerabilities":[{"id":"CVE-2026-59171","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59171","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59171","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59171","date":"2026-11-12","epss":0.00552,"percentile":0.46656}],"urls":["https://github.com/stleary/JSON-java/commit/703ac34a55400f9c50889e3d0c778b6d7962e81c","https://github.com/stleary/JSON-java/commit/ab92bb9088a37f9e346cd1dda66f6a3c40a201e0","https://github.com/stleary/JSON-java/commit/fce83c91bb229dde472283dea648a9a8955237fd","https://github.com/stleary/JSON-java/pull/1065","https://github.com/stleary/JSON-java/pull/1067","https://github.com/stleary/JSON-java/releases/tag/20260719","https://github.com/stleary/JSON-java/security/advisories/GHSA-ghc9-756g-vrcv"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59171","description":"JSON-java is a reference implementation of a JSON package in Java. From version 20150729 through 20260522, JSONTokener.nextSimpleValue can accumulate unbounded numeric tokens before JSONObject.stringToNumber passes them to BigInteger or BigDecimal conversion without a length limit. An application that parses attacker-controlled JSON or XML through JSONObject, JSONArray, or XML.toJSONObject can spend super-linear CPU time converting a sufficiently long numeric literal, blocking request-handling threads and causing denial of service. Strict mode and keep-strings settings in JSONParserConfiguration do not prevent the affected conversion path. Version 20260719 limits numeric conversion length."}]},{"artifact":{"id":"c345859806cdea03","cpes":["cpe:2.3:a:com.google.guava:guava:33.4.8-jre:*:*:*:*:*:*:*","cpe:2.3:a:google:guava:33.4.8-jre:*:*:*:*:*:*:*","cpe:2.3:a:guava:guava:33.4.8-jre:*:*:*:*:*:*:*"],"name":"guava","purl":"pkg:maven/com.google.guava/guava@33.4.8-jre","type":"java-archive","version":"33.4.8-jre","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.google.guava","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.96.5-05.jar:BOOT-INF/lib/guava-33.4.8-jre.jar","manifestName":"","pomArtifactID":"guava","archiveDigests":[{"value":"e70a3268e6cd3e7d458aa15787ce6811c34e96ae","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.96.5-05.jar","layerID":"sha256:ca8d74ab56b1b5a881eaaf7d2dd185cecb6f55e11cd0670d1f835f3c69a0d19f","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.96.5-05.jar:BOOT-INF/lib/guava-33.4.8-jre.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"33.7.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-xxph-c9ww-hj94","versionConstraint":">=4.0,<=33.7.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.google.guava:guava","version":"33.4.8-jre"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-xxph-c9ww-hj94","fix":{"state":"fixed","versions":["33.7.2"],"available":[{"date":"2026-10-27","kind":"first-observed","version":"33.7.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102554","cwe":"CWE-502","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2026-102554","cwe":"CWE-770","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2026-102554","date":"2026-11-12","epss":0.00352,"percentile":0.29279}],"risk":0.25608000000000003,"urls":["https://github.com/google/guava/security/advisories/GHSA-xxph-c9ww-hj94","https://nvd.nist.gov/vuln/detail/CVE-2026-102554","https://github.com/google/guava/commit/b931fe9d6d5cf00bc55714ad3308d086f71850fe","https://github.com/google/guava/releases/tag/v33.7.2"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-xxph-c9ww-hj94","description":"Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocation"},"relatedVulnerabilities":[{"id":"CVE-2026-102554","cvss":[{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102554","cwe":"CWE-502","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2026-102554","cwe":"CWE-770","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2026-102554","date":"2026-11-12","epss":0.00352,"percentile":0.29279}],"urls":["https://github.com/google/guava/commit/b931fe9d6d5cf00bc55714ad3308d086f71850fe","https://github.com/google/guava/releases/tag/v33.7.2","https://github.com/google/guava/security/advisories/GHSA-xxph-c9ww-hj94"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102554","description":"Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances, Guava eagerly allocates an array based on a caller-specified size parameter without throttling, permitting memory exhaustion from crafted serialization streams."}]},{"artifact":{"id":"193eb40fb65beba6","cpes":["cpe:2.3:a:zlib:zlib:1.3.2-r1:*:*:*:*:*:*:*"],"name":"zlib","purl":"pkg:apk/alpine/zlib@1.3.2-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.3.2-r1","language":"","licenses":["Zlib"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libz.so.1"},{"path":"/usr/lib/libz.so.1.3.2"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"zlib"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.4-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-4738","versionConstraint":"< 1.4-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"zlib","version":"1.3.2-r1"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"1.4-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-4738","versionConstraint":"< 1.4-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"zlib","version":"1.3.2-r1"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-4738","fix":{"state":"fixed","versions":["1.4-r0"],"available":[{"date":"2026-11-07","kind":"first-observed","version":"1.4-r0"}]},"cvss":[{"type":"Secondary","source":"cve_disclosure@tech.gov.sg","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:U/V:C/RE:L/U:Amber","metrics":{"baseScore":9.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4738","cwe":"CWE-119","type":"Secondary","source":"cve_disclosure@tech.gov.sg"}],"epss":[{"cve":"CVE-2026-4738","date":"2026-11-12","epss":0.00269,"percentile":0.19241}],"risk":0.24748,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-4738"},"relatedVulnerabilities":[{"id":"CVE-2026-4738","cvss":[{"type":"Secondary","source":"cve_disclosure@tech.gov.sg","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:U/V:C/RE:L/U:Amber","metrics":{"baseScore":9.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4738","cwe":"CWE-119","type":"Secondary","source":"cve_disclosure@tech.gov.sg"}],"epss":[{"cve":"CVE-2026-4738","date":"2026-11-12","epss":0.00269,"percentile":0.19241}],"urls":["https://github.com/OSGeo/gdal/pull/12244"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4738","description":"Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal (frmts/zlib/contrib/infback9 modules). This vulnerability is associated with program files inftree9.C‎.\n\nThis issue affects gdal: before 3.11.0."}]},{"artifact":{"id":"db0be20435ff9026","cpes":["cpe:2.3:a:gnu:tar:1.35-r5:*:*:*:*:*:*:*","cpe:2.3:a:tar:tar:1.35-r5:*:*:*:*:*:*:*"],"name":"tar","purl":"pkg:apk/alpine/tar@1.35-r5?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.35-r5","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/tar"},{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/rmt"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"tar"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:tar:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-5704","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:tar:1.35:*:*:*:*:*:*:*"],"package":{"name":"tar","version":"1.35-r5"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-5704","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":5,"impactScore":3.6,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5704","cwe":"CWE-434","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-5704","date":"2026-11-12","epss":0.00473,"percentile":0.41388}],"risk":0.24241249999999998,"urls":["https://access.redhat.com/errata/RHSA-2026:61581","https://access.redhat.com/errata/RHSA-2026:61586","https://access.redhat.com/errata/RHSA-2026:61783","https://access.redhat.com/errata/RHSA-2026:66018","https://access.redhat.com/errata/RHSA-2026:66514","https://access.redhat.com/errata/RHSA-2026:70390","https://access.redhat.com/security/cve/CVE-2026-5704","https://bugzilla.redhat.com/show_bug.cgi?id=2455360","http://www.openwall.com/lists/oss-security/2026/04/11/10","http://www.openwall.com/lists/oss-security/2026/04/11/11","http://www.openwall.com/lists/oss-security/2026/04/12/2"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5704","description":"A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection."},"relatedVulnerabilities":[]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-114820","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114820","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-114820","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"risk":0.22896500000000003,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-114820"},"relatedVulnerabilities":[{"id":"CVE-2026-114820","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-114820.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114820","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and  21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114820","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-114820","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"risk":0.22896500000000003,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-114820"},"relatedVulnerabilities":[{"id":"CVE-2026-114820","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-114820.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114820","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and  21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114820","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-114820","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"risk":0.22896500000000003,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-114820"},"relatedVulnerabilities":[{"id":"CVE-2026-114820","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-114820.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114820","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and  21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114820","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-114820","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"risk":0.22896500000000003,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-114820"},"relatedVulnerabilities":[{"id":"CVE-2026-114820","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-114820.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114820","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and  21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114820","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-114820","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"risk":0.22896500000000003,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-114820"},"relatedVulnerabilities":[{"id":"CVE-2026-114820","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-114820.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114820","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and  21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114820","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-114820","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"risk":0.22896500000000003,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-114820"},"relatedVulnerabilities":[{"id":"CVE-2026-114820","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-114820.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114820","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and  21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114820","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-114820","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"risk":0.22896500000000003,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-114820"},"relatedVulnerabilities":[{"id":"CVE-2026-114820","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-114820.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114820","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and  21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91373","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91373","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91373","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"risk":0.227115,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91373"},"relatedVulnerabilities":[{"id":"CVE-2026-91373","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91373","description":"Vulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91373","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91373","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"risk":0.227115,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91373"},"relatedVulnerabilities":[{"id":"CVE-2026-91373","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91373","description":"Vulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91373","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91373","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"risk":0.227115,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91373"},"relatedVulnerabilities":[{"id":"CVE-2026-91373","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91373","description":"Vulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91373","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91373","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"risk":0.227115,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91373"},"relatedVulnerabilities":[{"id":"CVE-2026-91373","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91373","description":"Vulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91373","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91373","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"risk":0.227115,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91373"},"relatedVulnerabilities":[{"id":"CVE-2026-91373","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91373","description":"Vulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91373","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91373","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"risk":0.227115,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91373"},"relatedVulnerabilities":[{"id":"CVE-2026-91373","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91373","description":"Vulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91373","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91373","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"risk":0.227115,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91373"},"relatedVulnerabilities":[{"id":"CVE-2026-91373","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91373","description":"Vulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"eb911159cbdb7edd","cpes":["cpe:2.3:a:org.sonatype.buildsupport:ognl:3.4.4:*:*:*:*:*:*:*","cpe:2.3:a:buildsupport:ognl:3.4.4:*:*:*:*:*:*:*","cpe:2.3:a:sonatype:ognl:3.4.4:*:*:*:*:*:*:*","cpe:2.3:a:ognl:ognl:3.4.4:*:*:*:*:*:*:*"],"name":"ognl","purl":"pkg:maven/ognl/ognl@3.4.4","type":"java-archive","version":"3.4.4","language":"java","licenses":["The Apache Software License, Version 2.0"],"metadata":{"pomGroupID":"ognl","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.96.5-05.jar:BOOT-INF/lib/mybatis-3.5.19.jar:ognl:ognl","manifestName":"","pomArtifactID":"ognl","archiveDigests":null},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.96.5-05.jar","layerID":"sha256:ca8d74ab56b1b5a881eaaf7d2dd185cecb6f55e11cd0670d1f835f3c69a0d19f","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.96.5-05.jar:BOOT-INF/lib/mybatis-3.5.19.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.4.13"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-crwc-vw2r-qr6m","versionConstraint":"<=3.4.12 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"ognl:ognl","version":"3.4.4"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-crwc-vw2r-qr6m","fix":{"state":"fixed","versions":["3.4.13"],"available":[{"date":"2026-10-22","kind":"first-observed","version":"3.4.13"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.6,"impactScore":3.4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113730","cwe":"CWE-693","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-113730","date":"2026-11-12","epss":0.00394,"percentile":0.34117}],"risk":0.215715,"urls":["https://github.com/orphan-oss/ognl/security/advisories/GHSA-crwc-vw2r-qr6m","https://nvd.nist.gov/vuln/detail/CVE-2026-113730","https://github.com/orphan-oss/ognl/commit/16396fa4b560221294c2ab9ca04b76b161115e7d","https://github.com/orphan-oss/ognl/commit/f4c17f794754d516ea799c36ed8524d1b7fb98e2","https://github.com/orphan-oss/ognl/releases/tag/OGNL_3_4_13"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-crwc-vw2r-qr6m","description":"OGNL stricter-invocation block list bypass via java.lang.reflect reflection proxies"},"relatedVulnerabilities":[{"id":"CVE-2026-113730","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.6,"impactScore":3.4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113730","cwe":"CWE-693","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-113730","date":"2026-11-12","epss":0.00394,"percentile":0.34117}],"urls":["https://github.com/orphan-oss/ognl/commit/16396fa4b560221294c2ab9ca04b76b161115e7d","https://github.com/orphan-oss/ognl/commit/f4c17f794754d516ea799c36ed8524d1b7fb98e2","https://github.com/orphan-oss/ognl/releases/tag/OGNL_3_4_13","https://github.com/orphan-oss/ognl/security/advisories/GHSA-crwc-vw2r-qr6m"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113730","description":"OGNL is an Object Graph Navigation Library for Java. Prior to 3.4.13, the optional stricter-invocation mode in OgnlRuntime.invokeMethod checks the declaring class of the method that OGNL invokes but does not block java.lang.reflect.Method, java.lang.reflect.Constructor, or java.lang.reflect.Field. An attacker-controlled expression can invoke one of these reflection objects as a proxy for a method on a blocked class, causing the real operation to execute inside JDK reflection without passing through the stricter-invocation check again. Exploitation requires an application to evaluate untrusted OGNL expressions, use the default or an equivalently permissive MemberAccess that permits reflection, and rely on stricter invocation as a sandbox. Applications using a restrictive MemberAccess, including Apache Struts with SecurityMemberAccess, are not affected by this bypass. This issue is fixed in 3.4.13."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91418","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91418","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91418","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"risk":0.207545,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91418"},"relatedVulnerabilities":[{"id":"CVE-2026-91418","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91418","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle JavaFX: 21.0.12, 25.0.4, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91418","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91418","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"risk":0.207545,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91418"},"relatedVulnerabilities":[{"id":"CVE-2026-91418","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91418","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle JavaFX: 21.0.12, 25.0.4, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91418","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91418","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"risk":0.207545,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91418"},"relatedVulnerabilities":[{"id":"CVE-2026-91418","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91418","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle JavaFX: 21.0.12, 25.0.4, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91418","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91418","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"risk":0.207545,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91418"},"relatedVulnerabilities":[{"id":"CVE-2026-91418","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91418","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle JavaFX: 21.0.12, 25.0.4, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91418","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91418","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"risk":0.207545,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91418"},"relatedVulnerabilities":[{"id":"CVE-2026-91418","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91418","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle JavaFX: 21.0.12, 25.0.4, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91418","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91418","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"risk":0.207545,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91418"},"relatedVulnerabilities":[{"id":"CVE-2026-91418","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91418","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle JavaFX: 21.0.12, 25.0.4, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91418","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91418","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"risk":0.207545,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91418"},"relatedVulnerabilities":[{"id":"CVE-2026-91418","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91418","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle JavaFX: 21.0.12, 25.0.4, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-83400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"risk":0.20394,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83400"},"relatedVulnerabilities":[{"id":"CVE-2026-83400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"risk":0.20394,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83400"},"relatedVulnerabilities":[{"id":"CVE-2026-83400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"risk":0.20394,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83400"},"relatedVulnerabilities":[{"id":"CVE-2026-83400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"risk":0.20394,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83400"},"relatedVulnerabilities":[{"id":"CVE-2026-83400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"risk":0.20394,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83400"},"relatedVulnerabilities":[{"id":"CVE-2026-83400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"risk":0.20394,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83400"},"relatedVulnerabilities":[{"id":"CVE-2026-83400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"risk":0.20394,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83400"},"relatedVulnerabilities":[{"id":"CVE-2026-83400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-46470","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-46470","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-46470","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"risk":0.18824,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-46470"},"relatedVulnerabilities":[{"id":"CVE-2026-46470","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":4,"impactScore":1.5,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"urls":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11243.patch","https://gstreamer.freedesktop.org/security/sa-2026-0018.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-46470","description":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-46470","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-46470","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"risk":0.18824,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-46470"},"relatedVulnerabilities":[{"id":"CVE-2026-46470","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":4,"impactScore":1.5,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"urls":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11243.patch","https://gstreamer.freedesktop.org/security/sa-2026-0018.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-46470","description":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-46470","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-46470","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"risk":0.18824,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-46470"},"relatedVulnerabilities":[{"id":"CVE-2026-46470","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":4,"impactScore":1.5,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"urls":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11243.patch","https://gstreamer.freedesktop.org/security/sa-2026-0018.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-46470","description":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-46470","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-46470","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"risk":0.18824,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-46470"},"relatedVulnerabilities":[{"id":"CVE-2026-46470","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":4,"impactScore":1.5,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"urls":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11243.patch","https://gstreamer.freedesktop.org/security/sa-2026-0018.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-46470","description":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-46470","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-46470","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"risk":0.18824,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-46470"},"relatedVulnerabilities":[{"id":"CVE-2026-46470","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":4,"impactScore":1.5,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"urls":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11243.patch","https://gstreamer.freedesktop.org/security/sa-2026-0018.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-46470","description":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-46470","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-46470","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"risk":0.18824,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-46470"},"relatedVulnerabilities":[{"id":"CVE-2026-46470","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":4,"impactScore":1.5,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"urls":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11243.patch","https://gstreamer.freedesktop.org/security/sa-2026-0018.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-46470","description":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-46470","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-46470","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"risk":0.18824,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-46470"},"relatedVulnerabilities":[{"id":"CVE-2026-46470","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":4,"impactScore":1.5,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"urls":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11243.patch","https://gstreamer.freedesktop.org/security/sa-2026-0018.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-46470","description":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-61308","versionConstraint":"< 1.8.0_504||>= 1.9, < 8.0.504||>= 12, < 17.0.20.1||>= 18, < 21.0.12.1||>= 22, < 25.0.4.1||>= 26, < 26.0.2.1||>= 9, < 11.0.32.1 (jvm)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:21.0.12_p8:*:*:*:*:*:*:*"],"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-61308","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.8,"impactScore":4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-61308","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-61308","date":"2026-11-12","epss":0.0031,"percentile":0.24159}],"risk":0.18289999999999998,"urls":["https://www.oracle.com/security-alerts/cspuaug2026.html","https://openjdk.org/groups/vulnerability/advisories/2026-08-18"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-61308","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and  21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.8 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)."},"relatedVulnerabilities":[]},{"artifact":{"id":"fef07e9c95ea2bda","cpes":["cpe:2.3:a:busybox:busybox:1.37.0-r31:*:*:*:*:*:*:*"],"name":"busybox","purl":"pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/busybox"},{"path":"/etc"},{"path":"/etc/securetty"},{"path":"/etc/busybox-paths.d"},{"path":"/etc/busybox-paths.d/busybox"},{"path":"/etc/logrotate.d"},{"path":"/etc/logrotate.d/acpid"},{"path":"/etc/network"},{"path":"/etc/network/if-down.d"},{"path":"/etc/network/if-post-down.d"},{"path":"/etc/network/if-post-up.d"},{"path":"/etc/network/if-pre-down.d"},{"path":"/etc/network/if-pre-up.d"},{"path":"/etc/network/if-up.d"},{"path":"/etc/network/if-up.d/dad"},{"path":"/etc/udhcpc"},{"path":"/etc/udhcpc/udhcpc.conf"},{"path":"/sbin"},{"path":"/usr"},{"path":"/usr/sbin"},{"path":"/usr/share"},{"path":"/usr/share/udhcpc"},{"path":"/usr/share/udhcpc/default.script"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-11-12","epss":0.00312,"percentile":0.24431}],"risk":0.17939999999999998,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"915155597fcdee9a","cpes":["cpe:2.3:a:busybox-binsh:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox-binsh:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*"],"name":"busybox-binsh","purl":"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64&distro=alpine-3.24.3&upstream=busybox","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/sh"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-11-12","epss":0.00312,"percentile":0.24431}],"risk":0.17939999999999998,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"8a9ef44e1018f213","cpes":["cpe:2.3:a:ssl-client:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl-client:ssl_client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl_client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl_client:1.37.0-r31:*:*:*:*:*:*:*"],"name":"ssl_client","purl":"pkg:apk/alpine/ssl_client@1.37.0-r31?arch=x86_64&distro=alpine-3.24.3&upstream=busybox","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ssl_client"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-11-12","epss":0.00312,"percentile":0.24431}],"risk":0.17939999999999998,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-83387","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83387","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83387","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83387"},"relatedVulnerabilities":[{"id":"CVE-2026-83387","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83387","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-87290","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87290","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87290","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87290"},"relatedVulnerabilities":[{"id":"CVE-2026-87290","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87290","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83387","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83387","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83387"},"relatedVulnerabilities":[{"id":"CVE-2026-83387","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83387","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87290","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87290","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87290"},"relatedVulnerabilities":[{"id":"CVE-2026-87290","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87290","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83387","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83387","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83387"},"relatedVulnerabilities":[{"id":"CVE-2026-83387","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83387","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87290","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87290","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87290"},"relatedVulnerabilities":[{"id":"CVE-2026-87290","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87290","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83387","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83387","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83387"},"relatedVulnerabilities":[{"id":"CVE-2026-83387","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83387","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87290","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87290","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87290"},"relatedVulnerabilities":[{"id":"CVE-2026-87290","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87290","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83387","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83387","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83387"},"relatedVulnerabilities":[{"id":"CVE-2026-83387","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83387","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87290","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87290","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87290"},"relatedVulnerabilities":[{"id":"CVE-2026-87290","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87290","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83387","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83387","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83387"},"relatedVulnerabilities":[{"id":"CVE-2026-83387","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83387","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87290","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87290","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87290"},"relatedVulnerabilities":[{"id":"CVE-2026-87290","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87290","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83387","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83387","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83387"},"relatedVulnerabilities":[{"id":"CVE-2026-83387","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83387","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87290","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87290","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87290"},"relatedVulnerabilities":[{"id":"CVE-2026-87290","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87290","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-87291","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87291","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87291","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"risk":0.15861999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87291"},"relatedVulnerabilities":[{"id":"CVE-2026-87291","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87291","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87291","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87291","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"risk":0.15861999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87291"},"relatedVulnerabilities":[{"id":"CVE-2026-87291","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87291","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87291","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87291","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"risk":0.15861999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87291"},"relatedVulnerabilities":[{"id":"CVE-2026-87291","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87291","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87291","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87291","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"risk":0.15861999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87291"},"relatedVulnerabilities":[{"id":"CVE-2026-87291","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87291","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87291","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87291","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"risk":0.15861999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87291"},"relatedVulnerabilities":[{"id":"CVE-2026-87291","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87291","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87291","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87291","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"risk":0.15861999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87291"},"relatedVulnerabilities":[{"id":"CVE-2026-87291","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87291","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87291","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87291","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"risk":0.15861999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87291"},"relatedVulnerabilities":[{"id":"CVE-2026-87291","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87291","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91417","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91417","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91417","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"risk":0.15758999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91417"},"relatedVulnerabilities":[{"id":"CVE-2026-91417","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91417","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91417","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91417","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"risk":0.15758999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91417"},"relatedVulnerabilities":[{"id":"CVE-2026-91417","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91417","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91417","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91417","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"risk":0.15758999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91417"},"relatedVulnerabilities":[{"id":"CVE-2026-91417","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91417","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91417","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91417","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"risk":0.15758999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91417"},"relatedVulnerabilities":[{"id":"CVE-2026-91417","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91417","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91417","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91417","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"risk":0.15758999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91417"},"relatedVulnerabilities":[{"id":"CVE-2026-91417","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91417","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91417","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91417","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"risk":0.15758999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91417"},"relatedVulnerabilities":[{"id":"CVE-2026-91417","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91417","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91417","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91417","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"risk":0.15758999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91417"},"relatedVulnerabilities":[{"id":"CVE-2026-91417","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91417","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-83374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"risk":0.157505,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83374"},"relatedVulnerabilities":[{"id":"CVE-2026-83374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"risk":0.157505,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83374"},"relatedVulnerabilities":[{"id":"CVE-2026-83374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"risk":0.157505,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83374"},"relatedVulnerabilities":[{"id":"CVE-2026-83374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"risk":0.157505,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83374"},"relatedVulnerabilities":[{"id":"CVE-2026-83374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"risk":0.157505,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83374"},"relatedVulnerabilities":[{"id":"CVE-2026-83374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"risk":0.157505,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83374"},"relatedVulnerabilities":[{"id":"CVE-2026-83374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"risk":0.157505,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83374"},"relatedVulnerabilities":[{"id":"CVE-2026-83374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91332","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91332","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91332","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91332"},"relatedVulnerabilities":[{"id":"CVE-2026-91332","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91332","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91453","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91453","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91453","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91453"},"relatedVulnerabilities":[{"id":"CVE-2026-91453","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91453","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91332","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91332","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91332"},"relatedVulnerabilities":[{"id":"CVE-2026-91332","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91332","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91453","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91453","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91453"},"relatedVulnerabilities":[{"id":"CVE-2026-91453","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91453","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91332","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91332","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91332"},"relatedVulnerabilities":[{"id":"CVE-2026-91332","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91332","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91453","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91453","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91453"},"relatedVulnerabilities":[{"id":"CVE-2026-91453","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91453","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91332","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91332","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91332"},"relatedVulnerabilities":[{"id":"CVE-2026-91332","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91332","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91453","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91453","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91453"},"relatedVulnerabilities":[{"id":"CVE-2026-91453","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91453","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91332","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91332","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91332"},"relatedVulnerabilities":[{"id":"CVE-2026-91332","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91332","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91453","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91453","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91453"},"relatedVulnerabilities":[{"id":"CVE-2026-91453","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91453","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91332","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91332","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91332"},"relatedVulnerabilities":[{"id":"CVE-2026-91332","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91332","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91453","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91453","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91453"},"relatedVulnerabilities":[{"id":"CVE-2026-91453","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91453","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91332","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91332","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91332"},"relatedVulnerabilities":[{"id":"CVE-2026-91332","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91332","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91453","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91453","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91453"},"relatedVulnerabilities":[{"id":"CVE-2026-91453","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91453","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91451","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91451","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91451","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91451"},"relatedVulnerabilities":[{"id":"CVE-2026-91451","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91451","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91452","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91452","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91452","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91452"},"relatedVulnerabilities":[{"id":"CVE-2026-91452","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91452","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91451","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91451","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91451"},"relatedVulnerabilities":[{"id":"CVE-2026-91451","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91451","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91452","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91452","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91452"},"relatedVulnerabilities":[{"id":"CVE-2026-91452","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91452","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91451","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91451","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91451"},"relatedVulnerabilities":[{"id":"CVE-2026-91451","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91451","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91452","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91452","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91452"},"relatedVulnerabilities":[{"id":"CVE-2026-91452","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91452","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91451","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91451","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91451"},"relatedVulnerabilities":[{"id":"CVE-2026-91451","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91451","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91452","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91452","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91452"},"relatedVulnerabilities":[{"id":"CVE-2026-91452","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91452","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91451","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91451","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91451"},"relatedVulnerabilities":[{"id":"CVE-2026-91451","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91451","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91452","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91452","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91452"},"relatedVulnerabilities":[{"id":"CVE-2026-91452","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91452","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91451","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91451","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91451"},"relatedVulnerabilities":[{"id":"CVE-2026-91451","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91451","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91452","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91452","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91452"},"relatedVulnerabilities":[{"id":"CVE-2026-91452","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91452","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91451","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91451","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91451"},"relatedVulnerabilities":[{"id":"CVE-2026-91451","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91451","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91452","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91452","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91452"},"relatedVulnerabilities":[{"id":"CVE-2026-91452","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91452","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91462","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91462","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91462","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"risk":0.14933,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91462"},"relatedVulnerabilities":[{"id":"CVE-2026-91462","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91462","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91462","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91462","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"risk":0.14933,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91462"},"relatedVulnerabilities":[{"id":"CVE-2026-91462","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91462","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91462","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91462","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"risk":0.14933,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91462"},"relatedVulnerabilities":[{"id":"CVE-2026-91462","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91462","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91462","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91462","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"risk":0.14933,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91462"},"relatedVulnerabilities":[{"id":"CVE-2026-91462","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91462","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91462","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91462","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"risk":0.14933,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91462"},"relatedVulnerabilities":[{"id":"CVE-2026-91462","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91462","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91462","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91462","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"risk":0.14933,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91462"},"relatedVulnerabilities":[{"id":"CVE-2026-91462","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91462","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91462","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91462","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"risk":0.14933,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91462"},"relatedVulnerabilities":[{"id":"CVE-2026-91462","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91462","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91464","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91464","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91464","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"risk":0.148835,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91464"},"relatedVulnerabilities":[{"id":"CVE-2026-91464","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91464","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91464","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91464","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"risk":0.148835,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91464"},"relatedVulnerabilities":[{"id":"CVE-2026-91464","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91464","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91464","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91464","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"risk":0.148835,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91464"},"relatedVulnerabilities":[{"id":"CVE-2026-91464","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91464","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91464","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91464","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"risk":0.148835,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91464"},"relatedVulnerabilities":[{"id":"CVE-2026-91464","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91464","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91464","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91464","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"risk":0.148835,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91464"},"relatedVulnerabilities":[{"id":"CVE-2026-91464","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91464","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91464","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91464","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"risk":0.148835,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91464"},"relatedVulnerabilities":[{"id":"CVE-2026-91464","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91464","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91464","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91464","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"risk":0.148835,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91464"},"relatedVulnerabilities":[{"id":"CVE-2026-91464","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91464","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70907","versionConstraint":"< 1.8.0_504||>= 1.9, < 8.0.504||>= 12, < 17.0.20.1||>= 18, < 21.0.12.1||>= 22, < 25.0.4.1||>= 26, < 26.0.2.1||>= 9, < 11.0.32.1 (jvm)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:21.0.12_p8:*:*:*:*:*:*:*"],"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70907","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70907","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-70907","date":"2026-11-12","epss":0.00278,"percentile":0.20475}],"risk":0.14317,"urls":["https://www.oracle.com/security-alerts/cspuaug2026.html","https://openjdk.org/groups/vulnerability/advisories/2026-08-18"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70907","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and  21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."},"relatedVulnerabilities":[]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91463","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91463","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91463","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"risk":0.11690500000000001,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91463"},"relatedVulnerabilities":[{"id":"CVE-2026-91463","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91463","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91463","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91463","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"risk":0.11690500000000001,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91463"},"relatedVulnerabilities":[{"id":"CVE-2026-91463","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91463","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91463","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91463","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"risk":0.11690500000000001,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91463"},"relatedVulnerabilities":[{"id":"CVE-2026-91463","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91463","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91463","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91463","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"risk":0.11690500000000001,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91463"},"relatedVulnerabilities":[{"id":"CVE-2026-91463","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91463","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91463","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91463","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"risk":0.11690500000000001,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91463"},"relatedVulnerabilities":[{"id":"CVE-2026-91463","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91463","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91463","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91463","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"risk":0.11690500000000001,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91463"},"relatedVulnerabilities":[{"id":"CVE-2026-91463","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91463","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91463","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91463","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"risk":0.11690500000000001,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91463"},"relatedVulnerabilities":[{"id":"CVE-2026-91463","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91463","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-83381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"risk":0.11073999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83381"},"relatedVulnerabilities":[{"id":"CVE-2026-83381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83381","description":"Vulnerability in Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"risk":0.11073999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83381"},"relatedVulnerabilities":[{"id":"CVE-2026-83381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83381","description":"Vulnerability in Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"risk":0.11073999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83381"},"relatedVulnerabilities":[{"id":"CVE-2026-83381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83381","description":"Vulnerability in Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"risk":0.11073999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83381"},"relatedVulnerabilities":[{"id":"CVE-2026-83381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83381","description":"Vulnerability in Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"risk":0.11073999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83381"},"relatedVulnerabilities":[{"id":"CVE-2026-83381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83381","description":"Vulnerability in Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"risk":0.11073999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83381"},"relatedVulnerabilities":[{"id":"CVE-2026-83381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83381","description":"Vulnerability in Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"risk":0.11073999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83381"},"relatedVulnerabilities":[{"id":"CVE-2026-83381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83381","description":"Vulnerability in Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-83378","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83378","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83378","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"risk":0.10486,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83378"},"relatedVulnerabilities":[{"id":"CVE-2026-83378","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83378","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83378","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83378","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"risk":0.10486,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83378"},"relatedVulnerabilities":[{"id":"CVE-2026-83378","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83378","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83378","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83378","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"risk":0.10486,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83378"},"relatedVulnerabilities":[{"id":"CVE-2026-83378","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83378","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83378","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83378","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"risk":0.10486,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83378"},"relatedVulnerabilities":[{"id":"CVE-2026-83378","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83378","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83378","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83378","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"risk":0.10486,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83378"},"relatedVulnerabilities":[{"id":"CVE-2026-83378","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83378","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83378","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83378","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"risk":0.10486,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83378"},"relatedVulnerabilities":[{"id":"CVE-2026-83378","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83378","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83378","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83378","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"risk":0.10486,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83378"},"relatedVulnerabilities":[{"id":"CVE-2026-83378","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83378","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-87255","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87255","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87255","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"risk":0.10317999999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87255"},"relatedVulnerabilities":[{"id":"CVE-2026-87255","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87255","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87255","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87255","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"risk":0.10317999999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87255"},"relatedVulnerabilities":[{"id":"CVE-2026-87255","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87255","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87255","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87255","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"risk":0.10317999999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87255"},"relatedVulnerabilities":[{"id":"CVE-2026-87255","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87255","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87255","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87255","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"risk":0.10317999999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87255"},"relatedVulnerabilities":[{"id":"CVE-2026-87255","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87255","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87255","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87255","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"risk":0.10317999999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87255"},"relatedVulnerabilities":[{"id":"CVE-2026-87255","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87255","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87255","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87255","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"risk":0.10317999999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87255"},"relatedVulnerabilities":[{"id":"CVE-2026-87255","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87255","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87255","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87255","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"risk":0.10317999999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87255"},"relatedVulnerabilities":[{"id":"CVE-2026-87255","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87255","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"fa2a8d27b3bb32ed","cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*"],"name":"alsa-lib","purl":"pkg:apk/alpine/alsa-lib@1.2.15.3-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.2.15.3-r0","language":"","licenses":["LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/alsa"},{"path":"/etc/alsa/conf.d"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/aserver"},{"path":"/usr/lib"},{"path":"/usr/lib/libasound.so.2"},{"path":"/usr/lib/libasound.so.2.0.0"},{"path":"/usr/lib/libatopology.so.2"},{"path":"/usr/lib/libatopology.so.2.0.0"},{"path":"/usr/share"},{"path":"/usr/share/alsa"},{"path":"/usr/share/alsa/alsa.conf"},{"path":"/usr/share/alsa/cards"},{"path":"/usr/share/alsa/cards/AACI.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-MODEM.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-SPDMA.conf"},{"path":"/usr/share/alsa/cards/ATIIXP.conf"},{"path":"/usr/share/alsa/cards/AU8810.conf"},{"path":"/usr/share/alsa/cards/AU8820.conf"},{"path":"/usr/share/alsa/cards/AU8830.conf"},{"path":"/usr/share/alsa/cards/Audigy.conf"},{"path":"/usr/share/alsa/cards/Audigy2.conf"},{"path":"/usr/share/alsa/cards/Aureon51.conf"},{"path":"/usr/share/alsa/cards/Aureon71.conf"},{"path":"/usr/share/alsa/cards/CA0106.conf"},{"path":"/usr/share/alsa/cards/CMI8338-SWIEC.conf"},{"path":"/usr/share/alsa/cards/CMI8338.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC6.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC8.conf"},{"path":"/usr/share/alsa/cards/CMI8788.conf"},{"path":"/usr/share/alsa/cards/CS46xx.conf"},{"path":"/usr/share/alsa/cards/EMU10K1.conf"},{"path":"/usr/share/alsa/cards/EMU10K1X.conf"},{"path":"/usr/share/alsa/cards/ENS1370.conf"},{"path":"/usr/share/alsa/cards/ENS1371.conf"},{"path":"/usr/share/alsa/cards/ES1968.conf"},{"path":"/usr/share/alsa/cards/Echo_Echo3G.conf"},{"path":"/usr/share/alsa/cards/FM801.conf"},{"path":"/usr/share/alsa/cards/FWSpeakers.conf"},{"path":"/usr/share/alsa/cards/FireWave.conf"},{"path":"/usr/share/alsa/cards/GUS.conf"},{"path":"/usr/share/alsa/cards/HDA-Intel.conf"},{"path":"/usr/share/alsa/cards/HdmiLpeAudio.conf"},{"path":"/usr/share/alsa/cards/ICE1712.conf"},{"path":"/usr/share/alsa/cards/ICE1724.conf"},{"path":"/usr/share/alsa/cards/ICH-MODEM.conf"},{"path":"/usr/share/alsa/cards/ICH.conf"},{"path":"/usr/share/alsa/cards/ICH4.conf"},{"path":"/usr/share/alsa/cards/Loopback.conf"},{"path":"/usr/share/alsa/cards/Maestro3.conf"},{"path":"/usr/share/alsa/cards/NFORCE.conf"},{"path":"/usr/share/alsa/cards/PC-Speaker.conf"},{"path":"/usr/share/alsa/cards/PMac.conf"},{"path":"/usr/share/alsa/cards/PMacToonie.conf"},{"path":"/usr/share/alsa/cards/PS3.conf"},{"path":"/usr/share/alsa/cards/RME9636.conf"},{"path":"/usr/share/alsa/cards/RME9652.conf"},{"path":"/usr/share/alsa/cards/SB-XFi.conf"},{"path":"/usr/share/alsa/cards/SI7018.conf"},{"path":"/usr/share/alsa/cards/TRID4DWAVENX.conf"},{"path":"/usr/share/alsa/cards/USB-Audio.conf"},{"path":"/usr/share/alsa/cards/VIA686A.conf"},{"path":"/usr/share/alsa/cards/VIA8233.conf"},{"path":"/usr/share/alsa/cards/VIA8233A.conf"},{"path":"/usr/share/alsa/cards/VIA8237.conf"},{"path":"/usr/share/alsa/cards/VX222.conf"},{"path":"/usr/share/alsa/cards/VXPocket.conf"},{"path":"/usr/share/alsa/cards/VXPocket440.conf"},{"path":"/usr/share/alsa/cards/YMF744.conf"},{"path":"/usr/share/alsa/cards/aliases.conf"},{"path":"/usr/share/alsa/cards/pistachio-card.conf"},{"path":"/usr/share/alsa/cards/vc4-hdmi.conf"},{"path":"/usr/share/alsa/ctl"},{"path":"/usr/share/alsa/ctl/default.conf"},{"path":"/usr/share/alsa/pcm"},{"path":"/usr/share/alsa/pcm/center_lfe.conf"},{"path":"/usr/share/alsa/pcm/default.conf"},{"path":"/usr/share/alsa/pcm/dmix.conf"},{"path":"/usr/share/alsa/pcm/dpl.conf"},{"path":"/usr/share/alsa/pcm/dsnoop.conf"},{"path":"/usr/share/alsa/pcm/front.conf"},{"path":"/usr/share/alsa/pcm/hdmi.conf"},{"path":"/usr/share/alsa/pcm/iec958.conf"},{"path":"/usr/share/alsa/pcm/modem.conf"},{"path":"/usr/share/alsa/pcm/rear.conf"},{"path":"/usr/share/alsa/pcm/side.conf"},{"path":"/usr/share/alsa/pcm/surround21.conf"},{"path":"/usr/share/alsa/pcm/surround40.conf"},{"path":"/usr/share/alsa/pcm/surround41.conf"},{"path":"/usr/share/alsa/pcm/surround50.conf"},{"path":"/usr/share/alsa/pcm/surround51.conf"},{"path":"/usr/share/alsa/pcm/surround71.conf"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"alsa-lib"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56109","versionConstraint":"< 1.2.16.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3:*:*:*:*:*:*:*"],"package":{"name":"alsa-lib","version":"1.2.15.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56109","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.8,"impactScore":4.3,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56109","cwe":"CWE-415","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-56109","date":"2026-11-12","epss":0.00138,"percentile":0.03264}],"risk":0.09935999999999999,"urls":["https://github.com/alsa-project/alsa-lib/commit/536dd6f8affdf5197c12a63a71c92a70b2833cc0","https://github.com/alsa-project/alsa-lib/releases/tag/v1.2.16.1","https://lore.kernel.org/alsa-devel/CAGt8pqBU0p2voB+qHxWGcNJrKHAcBhAyHUUBPLBN-Yj_SiV6MQ@mail.gmail.com/","https://www.vulncheck.com/advisories/alsa-library-double-free-via-parse-def-in-conf-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56109","description":"The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write or invalid memory read."},"relatedVulnerabilities":[]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-60589","versionConstraint":"< 1.8.0_504||>= 1.9, < 8.0.504||>= 12, < 17.0.20.1||>= 18, < 21.0.12.1||>= 22, < 25.0.4.1||>= 26, < 26.0.2.1||>= 9, < 11.0.32.1 (jvm)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:21.0.12_p8:*:*:*:*:*:*:*"],"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-60589","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-60589","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-60589","date":"2026-11-12","epss":0.00265,"percentile":0.18597}],"risk":0.08877499999999999,"urls":["https://www.oracle.com/security-alerts/cspuaug2026.html","https://openjdk.org/groups/vulnerability/advisories/2026-08-18"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-60589","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and  21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."},"relatedVulnerabilities":[]},{"artifact":{"id":"fa2a8d27b3bb32ed","cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*"],"name":"alsa-lib","purl":"pkg:apk/alpine/alsa-lib@1.2.15.3-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.2.15.3-r0","language":"","licenses":["LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/alsa"},{"path":"/etc/alsa/conf.d"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/aserver"},{"path":"/usr/lib"},{"path":"/usr/lib/libasound.so.2"},{"path":"/usr/lib/libasound.so.2.0.0"},{"path":"/usr/lib/libatopology.so.2"},{"path":"/usr/lib/libatopology.so.2.0.0"},{"path":"/usr/share"},{"path":"/usr/share/alsa"},{"path":"/usr/share/alsa/alsa.conf"},{"path":"/usr/share/alsa/cards"},{"path":"/usr/share/alsa/cards/AACI.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-MODEM.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-SPDMA.conf"},{"path":"/usr/share/alsa/cards/ATIIXP.conf"},{"path":"/usr/share/alsa/cards/AU8810.conf"},{"path":"/usr/share/alsa/cards/AU8820.conf"},{"path":"/usr/share/alsa/cards/AU8830.conf"},{"path":"/usr/share/alsa/cards/Audigy.conf"},{"path":"/usr/share/alsa/cards/Audigy2.conf"},{"path":"/usr/share/alsa/cards/Aureon51.conf"},{"path":"/usr/share/alsa/cards/Aureon71.conf"},{"path":"/usr/share/alsa/cards/CA0106.conf"},{"path":"/usr/share/alsa/cards/CMI8338-SWIEC.conf"},{"path":"/usr/share/alsa/cards/CMI8338.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC6.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC8.conf"},{"path":"/usr/share/alsa/cards/CMI8788.conf"},{"path":"/usr/share/alsa/cards/CS46xx.conf"},{"path":"/usr/share/alsa/cards/EMU10K1.conf"},{"path":"/usr/share/alsa/cards/EMU10K1X.conf"},{"path":"/usr/share/alsa/cards/ENS1370.conf"},{"path":"/usr/share/alsa/cards/ENS1371.conf"},{"path":"/usr/share/alsa/cards/ES1968.conf"},{"path":"/usr/share/alsa/cards/Echo_Echo3G.conf"},{"path":"/usr/share/alsa/cards/FM801.conf"},{"path":"/usr/share/alsa/cards/FWSpeakers.conf"},{"path":"/usr/share/alsa/cards/FireWave.conf"},{"path":"/usr/share/alsa/cards/GUS.conf"},{"path":"/usr/share/alsa/cards/HDA-Intel.conf"},{"path":"/usr/share/alsa/cards/HdmiLpeAudio.conf"},{"path":"/usr/share/alsa/cards/ICE1712.conf"},{"path":"/usr/share/alsa/cards/ICE1724.conf"},{"path":"/usr/share/alsa/cards/ICH-MODEM.conf"},{"path":"/usr/share/alsa/cards/ICH.conf"},{"path":"/usr/share/alsa/cards/ICH4.conf"},{"path":"/usr/share/alsa/cards/Loopback.conf"},{"path":"/usr/share/alsa/cards/Maestro3.conf"},{"path":"/usr/share/alsa/cards/NFORCE.conf"},{"path":"/usr/share/alsa/cards/PC-Speaker.conf"},{"path":"/usr/share/alsa/cards/PMac.conf"},{"path":"/usr/share/alsa/cards/PMacToonie.conf"},{"path":"/usr/share/alsa/cards/PS3.conf"},{"path":"/usr/share/alsa/cards/RME9636.conf"},{"path":"/usr/share/alsa/cards/RME9652.conf"},{"path":"/usr/share/alsa/cards/SB-XFi.conf"},{"path":"/usr/share/alsa/cards/SI7018.conf"},{"path":"/usr/share/alsa/cards/TRID4DWAVENX.conf"},{"path":"/usr/share/alsa/cards/USB-Audio.conf"},{"path":"/usr/share/alsa/cards/VIA686A.conf"},{"path":"/usr/share/alsa/cards/VIA8233.conf"},{"path":"/usr/share/alsa/cards/VIA8233A.conf"},{"path":"/usr/share/alsa/cards/VIA8237.conf"},{"path":"/usr/share/alsa/cards/VX222.conf"},{"path":"/usr/share/alsa/cards/VXPocket.conf"},{"path":"/usr/share/alsa/cards/VXPocket440.conf"},{"path":"/usr/share/alsa/cards/YMF744.conf"},{"path":"/usr/share/alsa/cards/aliases.conf"},{"path":"/usr/share/alsa/cards/pistachio-card.conf"},{"path":"/usr/share/alsa/cards/vc4-hdmi.conf"},{"path":"/usr/share/alsa/ctl"},{"path":"/usr/share/alsa/ctl/default.conf"},{"path":"/usr/share/alsa/pcm"},{"path":"/usr/share/alsa/pcm/center_lfe.conf"},{"path":"/usr/share/alsa/pcm/default.conf"},{"path":"/usr/share/alsa/pcm/dmix.conf"},{"path":"/usr/share/alsa/pcm/dpl.conf"},{"path":"/usr/share/alsa/pcm/dsnoop.conf"},{"path":"/usr/share/alsa/pcm/front.conf"},{"path":"/usr/share/alsa/pcm/hdmi.conf"},{"path":"/usr/share/alsa/pcm/iec958.conf"},{"path":"/usr/share/alsa/pcm/modem.conf"},{"path":"/usr/share/alsa/pcm/rear.conf"},{"path":"/usr/share/alsa/pcm/side.conf"},{"path":"/usr/share/alsa/pcm/surround21.conf"},{"path":"/usr/share/alsa/pcm/surround40.conf"},{"path":"/usr/share/alsa/pcm/surround41.conf"},{"path":"/usr/share/alsa/pcm/surround50.conf"},{"path":"/usr/share/alsa/pcm/surround51.conf"},{"path":"/usr/share/alsa/pcm/surround71.conf"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"alsa-lib"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-90781","versionConstraint":"<= 1.2.16.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3:*:*:*:*:*:*:*"],"package":{"name":"alsa-lib","version":"1.2.15.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-90781","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-90781","cwe":"CWE-193","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-90781","date":"2026-11-12","epss":0.00179,"percentile":0.07562}],"risk":0.08592,"urls":["https://github.com/alsa-project/alsa-lib","https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/control/ctlparse.c#L216-L241","https://github.com/alsa-project/alsa-lib/commit/f84cd4ced7b36fddb8e4ee24404cf7c091d27020","https://lore.kernel.org/alsa-devel/CACBQ=P2FhO3M6dkv3cWuKb6Qhs92ouV+FJ3SJZ_PVBSSdJWRAQ@mail.gmail.com/","https://www.vulncheck.com/advisories/alsa-lib-through-1.2.16.1-off-by-one-stack-buffer-overflow-in-snd-ctl-ascii-elem-id-parse"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-90781","description":"alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-line arguments to overwrite adjacent stack memory and crash the calling process."},"relatedVulnerabilities":[]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-83376","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83376","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83376","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83376"},"relatedVulnerabilities":[{"id":"CVE-2026-83376","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83376","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-87367","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87367","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87367","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87367"},"relatedVulnerabilities":[{"id":"CVE-2026-87367","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87367","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83376","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83376","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83376"},"relatedVulnerabilities":[{"id":"CVE-2026-83376","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83376","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87367","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87367","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87367"},"relatedVulnerabilities":[{"id":"CVE-2026-87367","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87367","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83376","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83376","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83376"},"relatedVulnerabilities":[{"id":"CVE-2026-83376","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83376","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87367","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87367","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87367"},"relatedVulnerabilities":[{"id":"CVE-2026-87367","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87367","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83376","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83376","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83376"},"relatedVulnerabilities":[{"id":"CVE-2026-83376","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83376","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87367","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87367","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87367"},"relatedVulnerabilities":[{"id":"CVE-2026-87367","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87367","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83376","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83376","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83376"},"relatedVulnerabilities":[{"id":"CVE-2026-83376","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83376","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87367","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87367","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87367"},"relatedVulnerabilities":[{"id":"CVE-2026-87367","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87367","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83376","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83376","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83376"},"relatedVulnerabilities":[{"id":"CVE-2026-83376","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83376","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87367","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87367","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87367"},"relatedVulnerabilities":[{"id":"CVE-2026-87367","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87367","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83376","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83376","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83376"},"relatedVulnerabilities":[{"id":"CVE-2026-83376","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83376","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87367","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87367","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87367"},"relatedVulnerabilities":[{"id":"CVE-2026-87367","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87367","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91374"},"relatedVulnerabilities":[{"id":"CVE-2026-91374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91487","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91487","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91487","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91487"},"relatedVulnerabilities":[{"id":"CVE-2026-91487","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91487","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91374"},"relatedVulnerabilities":[{"id":"CVE-2026-91374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91487","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91487","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91487"},"relatedVulnerabilities":[{"id":"CVE-2026-91487","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91487","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91374"},"relatedVulnerabilities":[{"id":"CVE-2026-91374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91487","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91487","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91487"},"relatedVulnerabilities":[{"id":"CVE-2026-91487","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91487","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91374"},"relatedVulnerabilities":[{"id":"CVE-2026-91374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91487","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91487","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91487"},"relatedVulnerabilities":[{"id":"CVE-2026-91487","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91487","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91374"},"relatedVulnerabilities":[{"id":"CVE-2026-91374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91487","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91487","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91487"},"relatedVulnerabilities":[{"id":"CVE-2026-91487","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91487","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91374"},"relatedVulnerabilities":[{"id":"CVE-2026-91374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91487","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91487","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91487"},"relatedVulnerabilities":[{"id":"CVE-2026-91487","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91487","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91374"},"relatedVulnerabilities":[{"id":"CVE-2026-91374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91487","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91487","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91487"},"relatedVulnerabilities":[{"id":"CVE-2026-91487","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91487","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91381"},"relatedVulnerabilities":[{"id":"CVE-2026-91381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91381","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91381"},"relatedVulnerabilities":[{"id":"CVE-2026-91381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91381","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91381"},"relatedVulnerabilities":[{"id":"CVE-2026-91381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91381","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91381"},"relatedVulnerabilities":[{"id":"CVE-2026-91381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91381","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91381"},"relatedVulnerabilities":[{"id":"CVE-2026-91381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91381","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91381"},"relatedVulnerabilities":[{"id":"CVE-2026-91381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91381","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91381"},"relatedVulnerabilities":[{"id":"CVE-2026-91381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91381","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-87292","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87292","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87292","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87292"},"relatedVulnerabilities":[{"id":"CVE-2026-87292","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87292","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87292","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87292","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87292"},"relatedVulnerabilities":[{"id":"CVE-2026-87292","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87292","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87292","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87292","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87292"},"relatedVulnerabilities":[{"id":"CVE-2026-87292","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87292","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87292","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87292","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87292"},"relatedVulnerabilities":[{"id":"CVE-2026-87292","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87292","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87292","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87292","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87292"},"relatedVulnerabilities":[{"id":"CVE-2026-87292","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87292","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87292","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87292","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87292"},"relatedVulnerabilities":[{"id":"CVE-2026-87292","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87292","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87292","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87292","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87292"},"relatedVulnerabilities":[{"id":"CVE-2026-87292","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87292","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"risk":0.07838499999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91400"},"relatedVulnerabilities":[{"id":"CVE-2026-91400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"risk":0.07838499999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91400"},"relatedVulnerabilities":[{"id":"CVE-2026-91400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"risk":0.07838499999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91400"},"relatedVulnerabilities":[{"id":"CVE-2026-91400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"risk":0.07838499999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91400"},"relatedVulnerabilities":[{"id":"CVE-2026-91400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"risk":0.07838499999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91400"},"relatedVulnerabilities":[{"id":"CVE-2026-91400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"risk":0.07838499999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91400"},"relatedVulnerabilities":[{"id":"CVE-2026-91400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"risk":0.07838499999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91400"},"relatedVulnerabilities":[{"id":"CVE-2026-91400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"1c17c50523e6ecb5","cpes":["cpe:2.3:a:apache:shiro-core:2.2.1:*:*:*:*:*:*:*","cpe:2.3:a:apache:shiro_core:2.2.1:*:*:*:*:*:*:*","cpe:2.3:a:apache:shiro:2.2.1:*:*:*:*:*:*:*","cpe:2.3:a:apache:core:2.2.1:*:*:*:*:*:*:*"],"name":"shiro-core","purl":"pkg:maven/org.apache.shiro/shiro-core@2.2.1","type":"java-archive","version":"2.2.1","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.apache.shiro","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.96.5-05.jar:BOOT-INF/lib/shiro-core-2.2.1-jakarta.jar","manifestName":"","pomArtifactID":"shiro-core","archiveDigests":[{"value":"8d06e5062c2dd64634715d697fe25e8d5a29b7bf","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.96.5-05.jar","layerID":"sha256:ca8d74ab56b1b5a881eaaf7d2dd185cecb6f55e11cd0670d1f835f3c69a0d19f","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.96.5-05.jar:BOOT-INF/lib/shiro-core-2.2.1-jakarta.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.0.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-m8g6-vrr2-x7ff","versionConstraint":">=1.2.4,<3.0.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.shiro:shiro-core","version":"2.2.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-m8g6-vrr2-x7ff","fix":{"state":"fixed","versions":["3.0.0"],"available":[{"date":"2026-11-04","kind":"first-observed","version":"3.0.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/S:N/AU:Y/V:D/RE:L/U:Green","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56130","cwe":"CWE-294","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-56130","date":"2026-11-12","epss":0.00299,"percentile":0.22864}],"risk":0.07475,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-56130","https://lists.apache.org/thread/9k9b3bmlq516ylvf7cdp3dlrtdtmxbmo","http://www.openwall.com/lists/oss-security/2026/06/24/8","https://github.com/github/advisory-database/pull/10074","https://github.com/apache/shiro/commit/e441ea37009a426b122c53b0120ae5879d00e354"],"severity":"Low","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-m8g6-vrr2-x7ff","description":"Apache Shiro's \"remember me\" cookie age is not verified on the server."},"relatedVulnerabilities":[{"id":"CVE-2026-56130","cvss":[{"type":"Secondary","source":"security@apache.org","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:X/V:D/RE:L/U:Green","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56130","cwe":"CWE-294","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-56130","date":"2026-11-12","epss":0.00299,"percentile":0.22864}],"urls":["https://lists.apache.org/thread/9k9b3bmlq516ylvf7cdp3dlrtdtmxbmo","http://www.openwall.com/lists/oss-security/2026/06/24/8"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56130","description":"\"Remember me\" cookie age is not verified on the server. This potentially allows an attacker to intercept a valid cookie and reuse it indefinitely, even after the configured expiration time has passed.\nThis issue affects all Apache Shiro versions from 1.2.4 through 2.x, and 3.0.0-alpha-1, only when RememberMe functionality is enabled.\n\n\nUpgrade to version 3.0.0 or later, which fixes the issue."}]},{"artifact":{"id":"1d7d3061ead6bcf3","cpes":["cpe:2.3:a:apache:shiro-web:2.2.1:*:*:*:*:*:*:*","cpe:2.3:a:apache:shiro_web:2.2.1:*:*:*:*:*:*:*","cpe:2.3:a:apache:shiro:2.2.1:*:*:*:*:*:*:*","cpe:2.3:a:apache:web:2.2.1:*:*:*:*:*:*:*"],"name":"shiro-web","purl":"pkg:maven/org.apache.shiro/shiro-web@2.2.1","type":"java-archive","version":"2.2.1","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.apache.shiro","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.96.5-05.jar:BOOT-INF/lib/shiro-web-2.2.1-jakarta.jar","manifestName":"","pomArtifactID":"shiro-web","archiveDigests":[{"value":"6932ad19703002c4bea3ac73530dddfe85a9471d","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.96.5-05.jar","layerID":"sha256:ca8d74ab56b1b5a881eaaf7d2dd185cecb6f55e11cd0670d1f835f3c69a0d19f","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.96.5-05.jar:BOOT-INF/lib/shiro-web-2.2.1-jakarta.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.0.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-m8g6-vrr2-x7ff","versionConstraint":">=1.2.4,<3.0.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.shiro:shiro-web","version":"2.2.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-m8g6-vrr2-x7ff","fix":{"state":"fixed","versions":["3.0.0"],"available":[{"date":"2026-11-04","kind":"first-observed","version":"3.0.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/S:N/AU:Y/V:D/RE:L/U:Green","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56130","cwe":"CWE-294","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-56130","date":"2026-11-12","epss":0.00299,"percentile":0.22864}],"risk":0.07475,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-56130","https://lists.apache.org/thread/9k9b3bmlq516ylvf7cdp3dlrtdtmxbmo","http://www.openwall.com/lists/oss-security/2026/06/24/8","https://github.com/github/advisory-database/pull/10074","https://github.com/apache/shiro/commit/e441ea37009a426b122c53b0120ae5879d00e354"],"severity":"Low","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-m8g6-vrr2-x7ff","description":"Apache Shiro's \"remember me\" cookie age is not verified on the server."},"relatedVulnerabilities":[{"id":"CVE-2026-56130","cvss":[{"type":"Secondary","source":"security@apache.org","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:X/V:D/RE:L/U:Green","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56130","cwe":"CWE-294","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-56130","date":"2026-11-12","epss":0.00299,"percentile":0.22864}],"urls":["https://lists.apache.org/thread/9k9b3bmlq516ylvf7cdp3dlrtdtmxbmo","http://www.openwall.com/lists/oss-security/2026/06/24/8"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56130","description":"\"Remember me\" cookie age is not verified on the server. This potentially allows an attacker to intercept a valid cookie and reuse it indefinitely, even after the configured expiration time has passed.\nThis issue affects all Apache Shiro versions from 1.2.4 through 2.x, and 3.0.0-alpha-1, only when RememberMe functionality is enabled.\n\n\nUpgrade to version 3.0.0 or later, which fixes the issue."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91402","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91402","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91402","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"risk":0.074115,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91402"},"relatedVulnerabilities":[{"id":"CVE-2026-91402","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91402","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and  27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91402","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91402","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"risk":0.074115,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91402"},"relatedVulnerabilities":[{"id":"CVE-2026-91402","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91402","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and  27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91402","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91402","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"risk":0.074115,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91402"},"relatedVulnerabilities":[{"id":"CVE-2026-91402","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91402","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and  27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91402","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91402","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"risk":0.074115,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91402"},"relatedVulnerabilities":[{"id":"CVE-2026-91402","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91402","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and  27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91402","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91402","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"risk":0.074115,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91402"},"relatedVulnerabilities":[{"id":"CVE-2026-91402","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91402","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and  27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91402","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91402","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"risk":0.074115,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91402"},"relatedVulnerabilities":[{"id":"CVE-2026-91402","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91402","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and  27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91402","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91402","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"risk":0.074115,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91402"},"relatedVulnerabilities":[{"id":"CVE-2026-91402","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91402","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and  27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"db0be20435ff9026","cpes":["cpe:2.3:a:gnu:tar:1.35-r5:*:*:*:*:*:*:*","cpe:2.3:a:tar:tar:1.35-r5:*:*:*:*:*:*:*"],"name":"tar","purl":"pkg:apk/alpine/tar@1.35-r5?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.35-r5","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/tar"},{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/rmt"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"tar"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:tar:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-18508","versionConstraint":"= 1.35 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:tar:1.35:*:*:*:*:*:*:*"],"package":{"name":"tar","version":"1.35-r5"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-18508","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18508","cwe":"CWE-59","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-18508","date":"2026-11-12","epss":0.00141,"percentile":0.03484}],"risk":0.06627,"urls":["https://access.redhat.com/errata/RHSA-2026:50807","https://access.redhat.com/errata/RHSA-2026:61581","https://access.redhat.com/errata/RHSA-2026:61586","https://access.redhat.com/errata/RHSA-2026:61783","https://access.redhat.com/errata/RHSA-2026:66018","https://access.redhat.com/errata/RHSA-2026:70390","https://access.redhat.com/security/cve/CVE-2026-18508","https://bugzilla.redhat.com/show_bug.cgi?id=2509843"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18508","description":"A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A crafted archive can create hardlinks that escape the intended boundary and, when combined with a preexisting symbolic link under the working directory, may allow writing outside that boundary during a single extraction."},"relatedVulnerabilities":[]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91461","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91461","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91461","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"risk":0.06264499999999999,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91461"},"relatedVulnerabilities":[{"id":"CVE-2026-91461","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91461","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91461","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91461","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"risk":0.06264499999999999,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91461"},"relatedVulnerabilities":[{"id":"CVE-2026-91461","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91461","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91461","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91461","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"risk":0.06264499999999999,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91461"},"relatedVulnerabilities":[{"id":"CVE-2026-91461","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91461","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91461","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91461","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"risk":0.06264499999999999,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91461"},"relatedVulnerabilities":[{"id":"CVE-2026-91461","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91461","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91461","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91461","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"risk":0.06264499999999999,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91461"},"relatedVulnerabilities":[{"id":"CVE-2026-91461","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91461","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91461","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91461","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"risk":0.06264499999999999,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91461"},"relatedVulnerabilities":[{"id":"CVE-2026-91461","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91461","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91461","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91461","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"risk":0.06264499999999999,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91461"},"relatedVulnerabilities":[{"id":"CVE-2026-91461","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91461","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91379","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91379","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91379","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"risk":0.05916999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91379"},"relatedVulnerabilities":[{"id":"CVE-2026-91379","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91379","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK tools).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91379","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91379","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"risk":0.05916999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91379"},"relatedVulnerabilities":[{"id":"CVE-2026-91379","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91379","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK tools).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91379","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91379","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"risk":0.05916999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91379"},"relatedVulnerabilities":[{"id":"CVE-2026-91379","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91379","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK tools).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91379","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91379","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"risk":0.05916999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91379"},"relatedVulnerabilities":[{"id":"CVE-2026-91379","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91379","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK tools).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91379","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91379","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"risk":0.05916999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91379"},"relatedVulnerabilities":[{"id":"CVE-2026-91379","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91379","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK tools).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91379","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91379","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"risk":0.05916999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91379"},"relatedVulnerabilities":[{"id":"CVE-2026-91379","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91379","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK tools).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91379","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91379","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"risk":0.05916999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91379"},"relatedVulnerabilities":[{"id":"CVE-2026-91379","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91379","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK tools).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91335","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91335","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91335","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"risk":0.0588,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91335"},"relatedVulnerabilities":[{"id":"CVE-2026-91335","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91335","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91335","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91335","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"risk":0.0588,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91335"},"relatedVulnerabilities":[{"id":"CVE-2026-91335","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91335","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91335","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91335","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"risk":0.0588,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91335"},"relatedVulnerabilities":[{"id":"CVE-2026-91335","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91335","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91335","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91335","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"risk":0.0588,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91335"},"relatedVulnerabilities":[{"id":"CVE-2026-91335","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91335","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91335","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91335","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"risk":0.0588,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91335"},"relatedVulnerabilities":[{"id":"CVE-2026-91335","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91335","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91335","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91335","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"risk":0.0588,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91335"},"relatedVulnerabilities":[{"id":"CVE-2026-91335","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91335","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91335","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91335","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"risk":0.0588,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91335"},"relatedVulnerabilities":[{"id":"CVE-2026-91335","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91335","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"fa2a8d27b3bb32ed","cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*"],"name":"alsa-lib","purl":"pkg:apk/alpine/alsa-lib@1.2.15.3-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.2.15.3-r0","language":"","licenses":["LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/alsa"},{"path":"/etc/alsa/conf.d"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/aserver"},{"path":"/usr/lib"},{"path":"/usr/lib/libasound.so.2"},{"path":"/usr/lib/libasound.so.2.0.0"},{"path":"/usr/lib/libatopology.so.2"},{"path":"/usr/lib/libatopology.so.2.0.0"},{"path":"/usr/share"},{"path":"/usr/share/alsa"},{"path":"/usr/share/alsa/alsa.conf"},{"path":"/usr/share/alsa/cards"},{"path":"/usr/share/alsa/cards/AACI.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-MODEM.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-SPDMA.conf"},{"path":"/usr/share/alsa/cards/ATIIXP.conf"},{"path":"/usr/share/alsa/cards/AU8810.conf"},{"path":"/usr/share/alsa/cards/AU8820.conf"},{"path":"/usr/share/alsa/cards/AU8830.conf"},{"path":"/usr/share/alsa/cards/Audigy.conf"},{"path":"/usr/share/alsa/cards/Audigy2.conf"},{"path":"/usr/share/alsa/cards/Aureon51.conf"},{"path":"/usr/share/alsa/cards/Aureon71.conf"},{"path":"/usr/share/alsa/cards/CA0106.conf"},{"path":"/usr/share/alsa/cards/CMI8338-SWIEC.conf"},{"path":"/usr/share/alsa/cards/CMI8338.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC6.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC8.conf"},{"path":"/usr/share/alsa/cards/CMI8788.conf"},{"path":"/usr/share/alsa/cards/CS46xx.conf"},{"path":"/usr/share/alsa/cards/EMU10K1.conf"},{"path":"/usr/share/alsa/cards/EMU10K1X.conf"},{"path":"/usr/share/alsa/cards/ENS1370.conf"},{"path":"/usr/share/alsa/cards/ENS1371.conf"},{"path":"/usr/share/alsa/cards/ES1968.conf"},{"path":"/usr/share/alsa/cards/Echo_Echo3G.conf"},{"path":"/usr/share/alsa/cards/FM801.conf"},{"path":"/usr/share/alsa/cards/FWSpeakers.conf"},{"path":"/usr/share/alsa/cards/FireWave.conf"},{"path":"/usr/share/alsa/cards/GUS.conf"},{"path":"/usr/share/alsa/cards/HDA-Intel.conf"},{"path":"/usr/share/alsa/cards/HdmiLpeAudio.conf"},{"path":"/usr/share/alsa/cards/ICE1712.conf"},{"path":"/usr/share/alsa/cards/ICE1724.conf"},{"path":"/usr/share/alsa/cards/ICH-MODEM.conf"},{"path":"/usr/share/alsa/cards/ICH.conf"},{"path":"/usr/share/alsa/cards/ICH4.conf"},{"path":"/usr/share/alsa/cards/Loopback.conf"},{"path":"/usr/share/alsa/cards/Maestro3.conf"},{"path":"/usr/share/alsa/cards/NFORCE.conf"},{"path":"/usr/share/alsa/cards/PC-Speaker.conf"},{"path":"/usr/share/alsa/cards/PMac.conf"},{"path":"/usr/share/alsa/cards/PMacToonie.conf"},{"path":"/usr/share/alsa/cards/PS3.conf"},{"path":"/usr/share/alsa/cards/RME9636.conf"},{"path":"/usr/share/alsa/cards/RME9652.conf"},{"path":"/usr/share/alsa/cards/SB-XFi.conf"},{"path":"/usr/share/alsa/cards/SI7018.conf"},{"path":"/usr/share/alsa/cards/TRID4DWAVENX.conf"},{"path":"/usr/share/alsa/cards/USB-Audio.conf"},{"path":"/usr/share/alsa/cards/VIA686A.conf"},{"path":"/usr/share/alsa/cards/VIA8233.conf"},{"path":"/usr/share/alsa/cards/VIA8233A.conf"},{"path":"/usr/share/alsa/cards/VIA8237.conf"},{"path":"/usr/share/alsa/cards/VX222.conf"},{"path":"/usr/share/alsa/cards/VXPocket.conf"},{"path":"/usr/share/alsa/cards/VXPocket440.conf"},{"path":"/usr/share/alsa/cards/YMF744.conf"},{"path":"/usr/share/alsa/cards/aliases.conf"},{"path":"/usr/share/alsa/cards/pistachio-card.conf"},{"path":"/usr/share/alsa/cards/vc4-hdmi.conf"},{"path":"/usr/share/alsa/ctl"},{"path":"/usr/share/alsa/ctl/default.conf"},{"path":"/usr/share/alsa/pcm"},{"path":"/usr/share/alsa/pcm/center_lfe.conf"},{"path":"/usr/share/alsa/pcm/default.conf"},{"path":"/usr/share/alsa/pcm/dmix.conf"},{"path":"/usr/share/alsa/pcm/dpl.conf"},{"path":"/usr/share/alsa/pcm/dsnoop.conf"},{"path":"/usr/share/alsa/pcm/front.conf"},{"path":"/usr/share/alsa/pcm/hdmi.conf"},{"path":"/usr/share/alsa/pcm/iec958.conf"},{"path":"/usr/share/alsa/pcm/modem.conf"},{"path":"/usr/share/alsa/pcm/rear.conf"},{"path":"/usr/share/alsa/pcm/side.conf"},{"path":"/usr/share/alsa/pcm/surround21.conf"},{"path":"/usr/share/alsa/pcm/surround40.conf"},{"path":"/usr/share/alsa/pcm/surround41.conf"},{"path":"/usr/share/alsa/pcm/surround50.conf"},{"path":"/usr/share/alsa/pcm/surround51.conf"},{"path":"/usr/share/alsa/pcm/surround71.conf"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"alsa-lib"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-96674","versionConstraint":"<= 1.2.16.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3:*:*:*:*:*:*:*"],"package":{"name":"alsa-lib","version":"1.2.15.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-96674","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-96674","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-96674","date":"2026-11-12","epss":0.00115,"percentile":0.01574}],"risk":0.0552,"urls":["https://github.com/alsa-project/alsa-lib","https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/topology/ctl.c#L1316-L1326","https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/topology/ctl.c#L1420-L1430","https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/topology/ctl.c#L1511-L1521","https://github.com/alsa-project/alsa-lib/pull/527","https://www.vulncheck.com/advisories/alsa-lib-through-1.2.16.1-integer-overflow-via-topology-file"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-96674","description":"alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing integer overflow that defeats bounds checks. Attackers can supply crafted topology files that wrap size calculations, causing the decoder to read beyond the topology buffer and potentially leak sensitive data or crash the application."},"relatedVulnerabilities":[]},{"artifact":{"id":"fa2a8d27b3bb32ed","cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*"],"name":"alsa-lib","purl":"pkg:apk/alpine/alsa-lib@1.2.15.3-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.2.15.3-r0","language":"","licenses":["LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/alsa"},{"path":"/etc/alsa/conf.d"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/aserver"},{"path":"/usr/lib"},{"path":"/usr/lib/libasound.so.2"},{"path":"/usr/lib/libasound.so.2.0.0"},{"path":"/usr/lib/libatopology.so.2"},{"path":"/usr/lib/libatopology.so.2.0.0"},{"path":"/usr/share"},{"path":"/usr/share/alsa"},{"path":"/usr/share/alsa/alsa.conf"},{"path":"/usr/share/alsa/cards"},{"path":"/usr/share/alsa/cards/AACI.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-MODEM.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-SPDMA.conf"},{"path":"/usr/share/alsa/cards/ATIIXP.conf"},{"path":"/usr/share/alsa/cards/AU8810.conf"},{"path":"/usr/share/alsa/cards/AU8820.conf"},{"path":"/usr/share/alsa/cards/AU8830.conf"},{"path":"/usr/share/alsa/cards/Audigy.conf"},{"path":"/usr/share/alsa/cards/Audigy2.conf"},{"path":"/usr/share/alsa/cards/Aureon51.conf"},{"path":"/usr/share/alsa/cards/Aureon71.conf"},{"path":"/usr/share/alsa/cards/CA0106.conf"},{"path":"/usr/share/alsa/cards/CMI8338-SWIEC.conf"},{"path":"/usr/share/alsa/cards/CMI8338.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC6.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC8.conf"},{"path":"/usr/share/alsa/cards/CMI8788.conf"},{"path":"/usr/share/alsa/cards/CS46xx.conf"},{"path":"/usr/share/alsa/cards/EMU10K1.conf"},{"path":"/usr/share/alsa/cards/EMU10K1X.conf"},{"path":"/usr/share/alsa/cards/ENS1370.conf"},{"path":"/usr/share/alsa/cards/ENS1371.conf"},{"path":"/usr/share/alsa/cards/ES1968.conf"},{"path":"/usr/share/alsa/cards/Echo_Echo3G.conf"},{"path":"/usr/share/alsa/cards/FM801.conf"},{"path":"/usr/share/alsa/cards/FWSpeakers.conf"},{"path":"/usr/share/alsa/cards/FireWave.conf"},{"path":"/usr/share/alsa/cards/GUS.conf"},{"path":"/usr/share/alsa/cards/HDA-Intel.conf"},{"path":"/usr/share/alsa/cards/HdmiLpeAudio.conf"},{"path":"/usr/share/alsa/cards/ICE1712.conf"},{"path":"/usr/share/alsa/cards/ICE1724.conf"},{"path":"/usr/share/alsa/cards/ICH-MODEM.conf"},{"path":"/usr/share/alsa/cards/ICH.conf"},{"path":"/usr/share/alsa/cards/ICH4.conf"},{"path":"/usr/share/alsa/cards/Loopback.conf"},{"path":"/usr/share/alsa/cards/Maestro3.conf"},{"path":"/usr/share/alsa/cards/NFORCE.conf"},{"path":"/usr/share/alsa/cards/PC-Speaker.conf"},{"path":"/usr/share/alsa/cards/PMac.conf"},{"path":"/usr/share/alsa/cards/PMacToonie.conf"},{"path":"/usr/share/alsa/cards/PS3.conf"},{"path":"/usr/share/alsa/cards/RME9636.conf"},{"path":"/usr/share/alsa/cards/RME9652.conf"},{"path":"/usr/share/alsa/cards/SB-XFi.conf"},{"path":"/usr/share/alsa/cards/SI7018.conf"},{"path":"/usr/share/alsa/cards/TRID4DWAVENX.conf"},{"path":"/usr/share/alsa/cards/USB-Audio.conf"},{"path":"/usr/share/alsa/cards/VIA686A.conf"},{"path":"/usr/share/alsa/cards/VIA8233.conf"},{"path":"/usr/share/alsa/cards/VIA8233A.conf"},{"path":"/usr/share/alsa/cards/VIA8237.conf"},{"path":"/usr/share/alsa/cards/VX222.conf"},{"path":"/usr/share/alsa/cards/VXPocket.conf"},{"path":"/usr/share/alsa/cards/VXPocket440.conf"},{"path":"/usr/share/alsa/cards/YMF744.conf"},{"path":"/usr/share/alsa/cards/aliases.conf"},{"path":"/usr/share/alsa/cards/pistachio-card.conf"},{"path":"/usr/share/alsa/cards/vc4-hdmi.conf"},{"path":"/usr/share/alsa/ctl"},{"path":"/usr/share/alsa/ctl/default.conf"},{"path":"/usr/share/alsa/pcm"},{"path":"/usr/share/alsa/pcm/center_lfe.conf"},{"path":"/usr/share/alsa/pcm/default.conf"},{"path":"/usr/share/alsa/pcm/dmix.conf"},{"path":"/usr/share/alsa/pcm/dpl.conf"},{"path":"/usr/share/alsa/pcm/dsnoop.conf"},{"path":"/usr/share/alsa/pcm/front.conf"},{"path":"/usr/share/alsa/pcm/hdmi.conf"},{"path":"/usr/share/alsa/pcm/iec958.conf"},{"path":"/usr/share/alsa/pcm/modem.conf"},{"path":"/usr/share/alsa/pcm/rear.conf"},{"path":"/usr/share/alsa/pcm/side.conf"},{"path":"/usr/share/alsa/pcm/surround21.conf"},{"path":"/usr/share/alsa/pcm/surround40.conf"},{"path":"/usr/share/alsa/pcm/surround41.conf"},{"path":"/usr/share/alsa/pcm/surround50.conf"},{"path":"/usr/share/alsa/pcm/surround51.conf"},{"path":"/usr/share/alsa/pcm/surround71.conf"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"alsa-lib"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-96675","versionConstraint":"<= 1.2.16.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3:*:*:*:*:*:*:*"],"package":{"name":"alsa-lib","version":"1.2.15.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-96675","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-96675","cwe":"CWE-129","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-96675","date":"2026-11-12","epss":0.00111,"percentile":0.01321}],"risk":0.05022750000000001,"urls":["https://github.com/alsa-project/alsa-lib","https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/pcm/pcm_multi.c#L1122-L1131","https://github.com/alsa-project/alsa-lib/pull/527","https://www.vulncheck.com/advisories/alsa-lib-through-1.2.16.1-denial-of-service-via-pcm-multi"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-96675","description":"alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to validate sparse binding indices before array access. Attackers can supply a malicious ALSA configuration file with sparse bindings to trigger an out-of-bounds array read and assertion failure, causing the application to abort."},"relatedVulnerabilities":[]},{"artifact":{"id":"db0be20435ff9026","cpes":["cpe:2.3:a:gnu:tar:1.35-r5:*:*:*:*:*:*:*","cpe:2.3:a:tar:tar:1.35-r5:*:*:*:*:*:*:*"],"name":"tar","purl":"pkg:apk/alpine/tar@1.35-r5?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.35-r5","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/tar"},{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/rmt"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"tar"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:tar:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-18477","versionConstraint":"= 1.35 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:tar:1.35:*:*:*:*:*:*:*"],"package":{"name":"tar","version":"1.35-r5"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-18477","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.4,"impactScore":3.6,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18477","cwe":"CWE-367","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-18477","date":"2026-11-12","epss":0.00104,"percentile":0.01005}],"risk":0.04887999999999999,"urls":["https://access.redhat.com/errata/RHSA-2026:49361","https://access.redhat.com/errata/RHSA-2026:61581","https://access.redhat.com/errata/RHSA-2026:61586","https://access.redhat.com/errata/RHSA-2026:61783","https://access.redhat.com/errata/RHSA-2026:66018","https://access.redhat.com/errata/RHSA-2026:70390","https://access.redhat.com/security/cve/CVE-2026-18477","https://bugzilla.redhat.com/show_bug.cgi?id=2509735"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18477","description":"A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the attacker has access to the system where the restore is being performed. During restoration, files or directories may be created, renamed or overwritten outside the intended extraction directory. This could lead to unauthorized file modification or, in some cases, privilege escalation. Exploitation does not require the attacker to modify or craft the archive, and standard backup and restore workflows—including extracting into a newly created directory without using the -P option do not mitigate the issue."},"relatedVulnerabilities":[]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91375","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91375","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91375","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"risk":0.04462,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91375"},"relatedVulnerabilities":[{"id":"CVE-2026-91375","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91375","description":"Vulnerability in Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91375","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91375","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"risk":0.04462,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91375"},"relatedVulnerabilities":[{"id":"CVE-2026-91375","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91375","description":"Vulnerability in Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91375","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91375","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"risk":0.04462,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91375"},"relatedVulnerabilities":[{"id":"CVE-2026-91375","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91375","description":"Vulnerability in Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91375","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91375","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"risk":0.04462,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91375"},"relatedVulnerabilities":[{"id":"CVE-2026-91375","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91375","description":"Vulnerability in Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91375","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91375","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"risk":0.04462,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91375"},"relatedVulnerabilities":[{"id":"CVE-2026-91375","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91375","description":"Vulnerability in Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91375","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91375","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"risk":0.04462,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91375"},"relatedVulnerabilities":[{"id":"CVE-2026-91375","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91375","description":"Vulnerability in Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91375","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91375","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"risk":0.04462,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91375"},"relatedVulnerabilities":[{"id":"CVE-2026-91375","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91375","description":"Vulnerability in Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91397","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91397","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91397","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"risk":0.031349999999999996,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91397"},"relatedVulnerabilities":[{"id":"CVE-2026-91397","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91397","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.6 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91397","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91397","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"risk":0.031349999999999996,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91397"},"relatedVulnerabilities":[{"id":"CVE-2026-91397","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91397","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.6 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91397","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91397","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"risk":0.031349999999999996,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91397"},"relatedVulnerabilities":[{"id":"CVE-2026-91397","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91397","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.6 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91397","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91397","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"risk":0.031349999999999996,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91397"},"relatedVulnerabilities":[{"id":"CVE-2026-91397","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91397","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.6 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91397","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91397","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"risk":0.031349999999999996,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91397"},"relatedVulnerabilities":[{"id":"CVE-2026-91397","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91397","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.6 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91397","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91397","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"risk":0.031349999999999996,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91397"},"relatedVulnerabilities":[{"id":"CVE-2026-91397","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91397","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.6 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:5f04c877e60c3bf963ea3c8f85608322ff0fe40f78e36cbafbb0b1cced1bbebf","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91397","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91397","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"risk":0.031349999999999996,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91397"},"relatedVulnerabilities":[{"id":"CVE-2026-91397","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91397","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.6 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L)."}]}],"grade":"F","score":"0.00","as_of":"2026-11-14T04:58:51.720Z","grype_db_version":"2026-11-13T15:40:34.000Z"}