GitHub Advisories (Maven)
Printed in Security Desk · github.com
Publishes about 1 a week · last piece Oct 8, 2026
How often
about 1 a week, by the archive: 6 pieces since Sep 18, 2026.
12 weeks agothis week
Latest pieces
- Critical: Hazelcast allows arbitrary member memory access by low-privileged client
- Critical: AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new host
- Critical: Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path
- Critical: http4s-scala-xml has an XML External Entity (XXE) processing issue
- Critical: Moquette: Pattern-ACL wildcard injection (cross-tenant authorization bypass) plus a remote-unauthenticated DoS cluster, a Will-message authorization bypass, and a cross-session durable-corruption bug
- Critical: org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue
In these topics
Pick one in My Edition to read it with its neighbors.