java-21-ibm-semeru-certified-jdk-src

Direct Vulnerabilities

Known vulnerabilities in the java-21-ibm-semeru-certified-jdk-src package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M CVE-2026-60589	<1:21.0.12.1.1-2.el10_2
M CVE-2026-70907	<1:21.0.12.1.1-2.el10_2
M CVE-2026-61308	<1:21.0.12.1.1-2.el10_2
L NULL Pointer Dereference	<1:21.0.12.0.8-2.el10_2
M Improper Certificate Validation	<1:21.0.12.0.8-2.el10_2
M Resource Exhaustion	<1:21.0.12.0.8-2.el10_2
L Out-of-bounds Write	<1:21.0.12.0.8-2.el10_2
M Inefficient Regular Expression Complexity	<1:21.0.12.0.8-2.el10_2
M Improper Certificate Validation	<1:21.0.12.0.8-2.el10_2
H Improper Verification of Cryptographic Signature	<1:21.0.12.0.8-2.el10_2
M Resource Exhaustion	<1:21.0.12.0.8-2.el10_2
M Integer Overflow or Wraparound	<1:21.0.12.0.8-2.el10_2
M Improper Validation of Specified Quantity in Input	<1:21.0.12.0.8-2.el10_2
M Buffer Underflow	<1:21.0.12.0.8-2.el10_2
M Access of Resource Using Incompatible Type ('Type Confusion')	<1:21.0.12.0.8-2.el10_2
M Uncontrolled Recursion	<1:21.0.11.0.10-2.el10_1
H XML External Entity (XXE) Injection	<1:21.0.11.0.10-2.el10_1
M Uncontrolled Recursion	<1:21.0.11.0.10-2.el10_1
H XML External Entity (XXE) Injection	<1:21.0.11.0.10-2.el10_1
L Use of a Broken or Risky Cryptographic Algorithm	<1:21.0.11.0.10-2.el10_1
L Use of a Broken or Risky Cryptographic Algorithm	<1:21.0.11.0.10-2.el10_1
L Use of a Broken or Risky Cryptographic Algorithm	<1:21.0.11.0.10-2.el10_1
L Use of a Broken or Risky Cryptographic Algorithm	<1:21.0.11.0.10-2.el10_1
M Cleartext Transmission of Sensitive Information	<1:21.0.11.0.10-2.el10_1
M Cleartext Transmission of Sensitive Information	<1:21.0.11.0.10-2.el10_1
M Out-of-bounds Read	<1:21.0.11.0.10-2.el10_1
M Out-of-bounds Read	<1:21.0.11.0.10-2.el10_1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1:21.0.11.0.10-2.el10_1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1:21.0.11.0.10-2.el10_1
H Improper Validation of Syntactic Correctness of Input	<1:21.0.11.0.10-2.el10_1
H Improper Validation of Syntactic Correctness of Input	<1:21.0.11.0.10-2.el10_1
M CRLF Injection	*
M Key Exchange without Entity Authentication	*
H Improper Certificate Validation	*
M Inappropriate Encoding for Output Context	<1:21.0.9.0.10-1.el10
M XML External Entity (XXE) Injection	<1:21.0.9.0.10-1.el10
H Heap-based Buffer Overflow	<1:21.0.8.0.9-1.el10
H Heap-based Buffer Overflow	<1:21.0.8.0.9-1.el10
M Missing Required Cryptographic Step	<1:21.0.8.0.9-1.el10
H Information Exposure	<1:21.0.8.0.9-1.el10
H Heap-based Buffer Overflow	<1:21.0.7.0.6-1.el10_0
M Heap-based Buffer Overflow	<1:21.0.7.0.6-1.el10_0
M Information Exposure	<1:21.0.7.0.6-1.el10_0

Vulnerability

Vulnerable Version

CVE-2026-60589

<1:21.0.12.1.1-2.el10_2