CVE-2026-105111: Apache Commons BCEL: Class2HTML emits unescaped class strings, enabling stored XSS
Apache Commons BCEL Class2HTML before 6.13.0 emits unescaped class strings, enabling stored XSS (CVE-2026-105111).
26
Apache Commons BCEL Class2HTML before 6.13.0 emits unescaped class strings, enabling stored XSS (CVE-2026-105111).
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 2.3K readers · 3.3K views · 473 reads · all time 111K views