Read the docs

jopenlibs

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

jopenlibs records in CISA KEV

No jopenlibs vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-85379 CVE-2026-109408 · GHSA-4frw-2vwq-957r

vault-java-driver silently disables requested TLS verification

Priority LOW 34

vault-java-driver, a Java client for HashiCorp Vault, silently disables TLS certificate and hostname verification in three states where the caller asked for verification: an SslConfig passed to VaultConfig without callin…

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00177 Published 2026-11-05 Fixed in 7.0.0 CWE-295
TI-2026-85380 CVE-2026-112072 · GHSA-g3p9-q9ch-26gc

Deeply nested JSON in vault-java-driver crashes threads that read it

Priority LOW 29

vault-java-driver, a Java client for HashiCorp Vault, parses Vault's JSON responses with a vendored minimal-json parser that has no nesting depth limit.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00327 Published 2026-11-05 Fixed in 7.0.0 CWE-674
Open these records in search →