Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Release: Sonatype Nexus Repository 3 3.98.0 Clear all filters
TI-2026-85144 CVE-2026-113368 · GHSA-q5h3-884x-5m6j

Authorization bypass in Sonatype Nexus Repository 3 group members

Priority LOW 23

Sonatype Nexus Repository 3 does not check that a user account is authorized to access a repository before the repository is added as a member of a group repository.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00215 Published 2026-11-04 Fixed in 3.98.0 CWE-862
TI-2026-85145 CVE-2026-113369 · GHSA-cjj9-qvgx-24vv

Stored cross-site scripting in Sonatype Nexus Repository 3 OCI attestations

Priority LOW 28

Sonatype Nexus Repository 3 allows a user account that can push manifests to a hosted OCI repository (a user account that holds the edit permission on that repository) to store script content in the artifact type field o…

CVSS 4.0MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00243 Published 2026-11-04 Fixed in 3.98.0 CWE-79
TI-2026-85146 CVE-2026-113370 · GHSA-mh47-h7w3-hwfx

SQL injection in Nexus Repository 3 reindex search task

Priority LOW 33

Sonatype Nexus Repository 3 contains a SQL injection vulnerability in the optional "Reindex Search Tables By Pattern" task.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00211 Published 2026-11-04 Fixed in 3.98.0 CWE-89
TI-2026-85147 CVE-2026-113371 · GHSA-ww65-8rp8-7fpw

Sonatype Nexus Repository 3 exposes APT and YUM signing passphrases

Priority LOW 31

Sonatype Nexus Repository 3 returns the signing passphrase of an APT or YUM repository, through an internal REST endpoint, to a user account that holds only the read privilege for administering that repository.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00215 Published 2026-11-04 Fixed in 3.98.0 CWE-522
TI-2026-85148 CVE-2026-113372 · GHSA-j6jf-w58v-gphw

Nexus Repository 3 exposes YUM repository signing keys to read users

Priority LOW 31

Sonatype Nexus Repository 3 returns the private signing key of a YUM proxy or group repository to an account that holds only the read privilege for administering that repository.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00215 Published 2026-11-04 Fixed in 3.98.0 CWE-522
TI-2026-85149 CVE-2026-113373 · GHSA-wcg2-hr8x-qqgg

Disabled Nexus Repository 3 accounts can sign in through single sign-on

Priority LOW 39

Sonatype Nexus Repository 3 Pro does not check the local account status when a user signs in through a configured SAML or OAuth2/OpenID Connect identity provider.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00249 Published 2026-11-04 Fixed in 3.98.0 CWE-1390