java-21-ibm-semeru-certified-jdk-headless

Direct Vulnerabilities

Known vulnerabilities in the java-21-ibm-semeru-certified-jdk-headless package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M CVE-2026-70907	<1:21.0.12.1.1-2.el10_2
M CVE-2026-60589	<1:21.0.12.1.1-2.el10_2
M CVE-2026-61308	<1:21.0.12.1.1-2.el10_2
M Improper Validation of Specified Quantity in Input	<1:21.0.12.0.8-2.el10_2
M Buffer Underflow	<1:21.0.12.0.8-2.el10_2
M Access of Resource Using Incompatible Type ('Type Confusion')	<1:21.0.12.0.8-2.el10_2
M Integer Overflow or Wraparound	<1:21.0.12.0.8-2.el10_2
M Resource Exhaustion	<1:21.0.12.0.8-2.el10_2
L NULL Pointer Dereference	<1:21.0.12.0.8-2.el10_2
M Improper Certificate Validation	<1:21.0.12.0.8-2.el10_2
L Out-of-bounds Write	<1:21.0.12.0.8-2.el10_2
M Improper Certificate Validation	<1:21.0.12.0.8-2.el10_2
M Inefficient Regular Expression Complexity	<1:21.0.12.0.8-2.el10_2
H Improper Verification of Cryptographic Signature	<1:21.0.12.0.8-2.el10_2
M Resource Exhaustion	<1:21.0.12.0.8-2.el10_2
H Improper Validation of Syntactic Correctness of Input	<1:21.0.11.0.10-2.el10_1
L Use of a Broken or Risky Cryptographic Algorithm	<1:21.0.11.0.10-2.el10_1
L Use of a Broken or Risky Cryptographic Algorithm	<1:21.0.11.0.10-2.el10_1
M Cleartext Transmission of Sensitive Information	<1:21.0.11.0.10-2.el10_1
H XML External Entity (XXE) Injection	<1:21.0.11.0.10-2.el10_1
M Uncontrolled Recursion	<1:21.0.11.0.10-2.el10_1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1:21.0.11.0.10-2.el10_1
M Out-of-bounds Read	<1:21.0.11.0.10-2.el10_1
M CRLF Injection	*
M Key Exchange without Entity Authentication	*
H Improper Certificate Validation	*
M XML External Entity (XXE) Injection	<1:21.0.9.0.10-1.el10
M Inappropriate Encoding for Output Context	<1:21.0.9.0.10-1.el10
H Heap-based Buffer Overflow	<1:21.0.8.0.9-1.el10
H Information Exposure	<1:21.0.8.0.9-1.el10
H Heap-based Buffer Overflow	<1:21.0.8.0.9-1.el10
M Missing Required Cryptographic Step	<1:21.0.8.0.9-1.el10
M Information Exposure	<1:21.0.7.0.6-1.el10_0
M Heap-based Buffer Overflow	<1:21.0.7.0.6-1.el10_0
H Heap-based Buffer Overflow	<1:21.0.7.0.6-1.el10_0

Vulnerability

Vulnerable Version

CVE-2026-70907

<1:21.0.12.1.1-2.el10_2