V
vulnerability-reports
Confidential Security Reports (4 Submissions) — No Response in 6 Days
#675
· created
Aug 04, 2026
by
Yu Bao
updated
Aug 04, 2026
[Eclipse BaSyx] ABAC authorization bypass via trailing slash route normalization
#580
· created
Jul 06, 2026
by
Aaron Zielstorff
cve
published
reporter
project
resolution
fixed
+7
4
updated
Jul 24, 2026
[Eclipse Langium] Prototype pollution in langium Module.merge()
#540
· created
Jun 22, 2026
by
Lukas Pühringer
reporter
external
vulnerability
regular_bug
+5
11
updated
Jul 02, 2026
Glassfish SSRF vulnerability in /download/log endpoint
#239
· created
Sep 09, 2024
by
Thomas Neidhart
cve
reserved
reporter
external
visibility
intentionally-public
vulnerability
unconfirmed
+6
33
updated
Jun 15, 2026
Glassfish cross-side scripting in uploadFrame.jsf
#230
· created
Jul 22, 2024
by
Marta Rybczynska
status
awaiting_project
visibility
intentionally-public
vulnerability
confirmed
+6
22
updated
Jun 15, 2026
Glasshfish cross-side scripting in auth-realm/admin-realm/list-users
#229
· created
Jul 22, 2024
by
Marta Rybczynska
cve
reserved
status
awaiting_release
visibility
intentionally-public
vulnerability
confirmed
+6
22
updated
Jun 15, 2026
Glassfish cross-side scripting in standaloneInstanceConfigProperties.jsf
#228
· created
Jul 22, 2024
by
Marta Rybczynska
cve
reserved
status
awaiting_project
visibility
intentionally-public
vulnerability
confirmed
+6
22
updated
Jun 15, 2026
Glassfish cross-side scripting in instanceName
#226
· created
Jul 16, 2024
by
Marta Rybczynska
cve
reserved
status
awaiting_release
visibility
intentionally-public
vulnerability
confirmed
+7
32
1
updated
Jun 15, 2026
