Apache Commons BCEL

Search everything

Mentions · 7d0
Mentions · 30d2
All mentions2
First seenOct 7, 2026
Last mentioned19d ago

Timeline

2 articles · newest first

CVE-2026-105111: Apache Commons BCEL: Class2HTML emits unescaped class strings, enabling stored XSS

Apache Commons BCEL Class2HTML before 6.13.0 emits unescaped class strings, enabling stored XSS (CVE-2026-105111).

oss-securityOct 7, 04:52 UTC · 19d agoVulnerability 2 sourcesCVE-2026-1051112 · 1 read

CVE-2026-94114: Apache Commons BCEL: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser

Apache Commons BCEL before 6.13.0 can recurse unboundedly while parsing nested Code or Record attributes (CVE-2026-94114).

oss-securityOct 7, 04:51 UTC · 19d agoVulnerability 2 sourcesCVE-2026-941144 · 1 read

Related CVEs

by mentions

CVE-2026-941148.2
Class-name confusion in Apache Commons BCEL before 6.13.0
published 19d agoApache Software Foundation Apache Commons BCEL
CVE-2026-1051112.3
Stored XSS in Apache Commons BCEL Class2HTML
published 19d agoApache Software Foundation Apache Commons BCEL

Appears with

Apache Software Foundationvendor · 2
Apache Software Foundationorganization · 2
Class2HTMLproduct · 1
ClassParserproduct · 1

Entities are extracted by the model from each article. First seen Oct 7, 2026, last mentioned 19d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.