Apache Commons Bcel (Apache Software Foundation) - vulnerabilities (CVEs)

3 CVEs, 2 in the last 30 days, 1 known versions, newest CVE from 2026-10-06. Vendor: Apache Software Foundation.

CVEs of Apache Commons Bcel

• CVE-2026-105111 - CVSS 4.7 (medium), 2026-10-06: Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Commons BCEL. This only happens when you're using…
• CVE-2026-94114 - CVSS 8.2 (high), 2026-10-06: Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name,…
• CVE-2022-42920 - CVSS 9.8 (critical), 2022-11-07: Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing…