java-25-openjdk-crypto-adapter

Direct Vulnerabilities

Known vulnerabilities in the java-25-openjdk-crypto-adapter package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Improper Validation of Consistency within Input	*
M CVE-2026-70907	<1:25.0.4.1.1-1.1.el10
M CVE-2026-60589	<1:25.0.4.1.1-1.1.el10
M CVE-2026-70906	<1:25.0.4.1.1-1.1.el10
M CVE-2026-61308	<1:25.0.4.1.1-1.1.el10
H Improper Verification of Cryptographic Signature	<1:25.0.4.0.7-1.1.el10_2
L Out-of-bounds Write	<1:25.0.4.0.7-1.1.el10_2
M Resource Exhaustion	<1:25.0.4.0.7-1.1.el10_2
L NULL Pointer Dereference	<1:25.0.4.0.7-1.1.el10_2
M Improper Certificate Validation	<1:25.0.4.0.7-1.1.el10_2
M Resource Exhaustion	<1:25.0.4.0.7-1.1.el10_2
M Inefficient Regular Expression Complexity	<1:25.0.4.0.7-1.1.el10_2
M Improper Certificate Validation	<1:25.0.4.0.7-1.1.el10_2
M Integer Overflow or Wraparound	<1:25.0.4.0.7-1.1.el10_2
L Out-of-bounds Read	<1:25.0.3.0.9-1.el10_2
L Use of a Broken or Risky Cryptographic Algorithm	<1:25.0.3.0.9-1.el10_2
L Heap-based Buffer Overflow	<1:25.0.3.0.9-1.el10_2
L Use of a Broken or Risky Cryptographic Algorithm	<1:25.0.3.0.9-1.el10_2
M CVE-2026-23865	<1:25.0.3.0.9-1.el10_2
M Cleartext Transmission of Sensitive Information	<1:25.0.3.0.9-1.el10_2
M Buffer Underflow	<1:25.0.3.0.9-1.el10_2
M Expired Pointer Dereference	<1:25.0.3.0.9-1.el10_2
H XML External Entity (XXE) Injection	<1:25.0.3.0.9-1.el10_2
M Uncontrolled Recursion	<1:25.0.3.0.9-1.el10_2
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1:25.0.3.0.9-1.el10_2
H Out-of-bounds Write	<1:25.0.3.0.9-1.el10_2
M Out-of-bounds Read	*
M Expired Pointer Dereference	*
M Out-of-bounds Read	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
M NULL Pointer Dereference	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
M Information Exposure	*
M Buffer Overflow	*
M Key Exchange without Entity Authentication	<1:25.0.2.0.10-1.el10
H Out-of-bounds Write	<1:25.0.2.0.10-1.el10
M CRLF Injection	<1:25.0.2.0.10-1.el10
H Out-of-bounds Read	<1:25.0.2.0.10-1.el10
H Improper Certificate Validation	<1:25.0.2.0.10-1.el10

Vulnerability

Vulnerable Version

Improper Validation of Consistency within Input