https://vulnogram.org/ Most recent CVEs assigned by Sonatype Inc. (sonatype). https://vulnogram.org/seaview/icons/sonatype.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-97712 https://vulnogram.org/CVE-2026-97712 Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold. This can give the user more access than intended, up to full administrative access. High Thu, 15 Oct 2026 15:34:40 GMT https://vulnogram.org/CVE-2026-97667 https://vulnogram.org/CVE-2026-97667 Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package. The script runs in the browser of a user who opens the details of that package… Medium Thu, 15 Oct 2026 15:34:40 GMT https://vulnogram.org/CVE-2026-97666 https://vulnogram.org/CVE-2026-97666 Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn whether specific classes are present in the applic… Medium Network Exploitable Thu, 15 Oct 2026 15:34:40 GMT https://vulnogram.org/CVE-2026-97665 https://vulnogram.org/CVE-2026-97665 A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages (.snupkg) to a hosted repository, bypassing the wr… High Thu, 15 Oct 2026 15:34:40 GMT https://vulnogram.org/CVE-2026-77121 https://vulnogram.org/CVE-2026-77121 A user account with permission to deploy artifacts to a hosted Maven repository could upload a POM file containing an oversized metadata field. This causes future attempts to list or browse that repository's components to permanently fail until an ad… Medium Wed, 02 Sep 2026 17:03:26 GMT https://vulnogram.org/CVE-2026-77122 https://vulnogram.org/CVE-2026-77122 An authorization flaw in the REST API repository details endpoint (GET /service/rest/v1/repositories/{repositoryName}) in Sonatype Nexus Repository 3 allowed an account holding read or browse permission on a group repository to retrieve metadata for… Medium Wed, 02 Sep 2026 17:03:25 GMT https://vulnogram.org/CVE-2026-77123 https://vulnogram.org/CVE-2026-77123 Nexus Repository 3 contains a sensitive information disclosure vulnerability in the capability read API. An account holding the nexus:capabilities:read privilege can retrieve the plaintext shared secret configured on a webhook capability, which is in… Medium Wed, 02 Sep 2026 17:03:25 GMT https://vulnogram.org/CVE-2026-77124 https://vulnogram.org/CVE-2026-77124 In affected versions of Nexus Repository 3, the script execution endpoint (POST /service/rest/v1/script/{name}/run) did not verify whether script execution had been administratively disabled. An account holding script-execution permission could conti… High Wed, 02 Sep 2026 17:03:25 GMT https://vulnogram.org/CVE-2026-77125 https://vulnogram.org/CVE-2026-77125 A vulnerability was identified in Sonatype Nexus Repository 3 in which two blobstore group management REST API endpoints did not correctly enforce the intended authorization check. A user granted only the nexus:blobstores:create permission could invo… High Wed, 02 Sep 2026 17:03:25 GMT https://vulnogram.org/CVE-2026-14644 https://vulnogram.org/CVE-2026-14644 Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with permission to manage privileges could, under certain role configurations, escalate their own access to full administrator by expl… High Fri, 07 Aug 2026 16:07:43 GMT https://vulnogram.org/CVE-2026-17593 https://vulnogram.org/CVE-2026-17593 An account holding the nexus:settings:update permission in Nexus Repository 3 (or the equivalent nexus:settings permission in the legacy Nexus Repository 2) could submit arbitrary values as realm identifiers through an internal configuration API that… High Fri, 07 Aug 2026 16:07:43 GMT https://vulnogram.org/CVE-2026-17594 https://vulnogram.org/CVE-2026-17594 Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an incorrect authorization vulnerability (CWE-863) in the repository-creation user interface. An individual user account holding a delegated repository-admin privilege scoped to a specif… High Fri, 07 Aug 2026 16:07:43 GMT https://vulnogram.org/CVE-2026-17595 https://vulnogram.org/CVE-2026-17595 Nexus Repository 3 did not fully sandbox JEXL expressions used in Content Selectors. An account holding the nexus:selectors:create permission could construct an expression that read Java object properties not intended to be exposed to the expression… Medium Fri, 07 Aug 2026 16:07:43 GMT https://vulnogram.org/CVE-2026-17596 https://vulnogram.org/CVE-2026-17596 Nexus Repository 3 was found to be vulnerable to stored cross-site scripting (XSS). A user with the nexus:blobstores:create or nexus:blobstores:update permission could set a blob store name containing malicious script content, which would later execu… Medium Fri, 07 Aug 2026 16:07:42 GMT https://vulnogram.org/CVE-2026-17598 https://vulnogram.org/CVE-2026-17598 Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task through the administrative UI. An account holding permission to create at least one schedule… Medium Fri, 07 Aug 2026 16:07:42 GMT https://vulnogram.org/CVE-2026-17599 https://vulnogram.org/CVE-2026-17599 Nexus Repository 3 contained an endpoint used to change the administrator account password during initial onboarding. This endpoint did not verify that onboarding was still in progress before allowing the password change, relying instead on the prese… Medium Fri, 07 Aug 2026 16:07:42 GMT https://vulnogram.org/CVE-2026-17600 https://vulnogram.org/CVE-2026-17600 Sonatype Nexus Repository 3 did not immediately terminate a user's active login session or revoke their cached permissions when that user's account was deleted, deactivated, or had its password changed. A user whose account was already logged in at t… High Fri, 07 Aug 2026 16:07:42 GMT https://vulnogram.org/CVE-2026-17601 https://vulnogram.org/CVE-2026-17601 A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions than they were authorized to hold, including full administrative access, without any additio… High Fri, 07 Aug 2026 16:07:42 GMT https://vulnogram.org/CVE-2026-17603 https://vulnogram.org/CVE-2026-17603 Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the DataStore configuration API. A user holding the nx-datastores-update permission could set the connectionInitSql property to execute ar… High Fri, 07 Aug 2026 16:07:41 GMT https://vulnogram.org/CVE-2026-17597 https://vulnogram.org/CVE-2026-17597 Nexus Repository 3 contains a Server-Side Request Forgery (SSRF) vulnerability in the email configuration verification feature. A user holding the nexus:settings:update permission could submit arbitrary host and port values to the email test/verifica… Medium Fri, 07 Aug 2026 16:07:41 GMT https://vulnogram.org/CVE-2026-14646 https://vulnogram.org/CVE-2026-14646 Nexus Repository 3 did not apply its existing Server-Side Request Forgery (SSRF) protections to HTTP redirect targets returned by proxy repository upstream servers. Any user with read access to a proxy repository backed by an attacker-controlled or c… Medium Tue, 14 Jul 2026 16:49:46 GMT https://vulnogram.org/CVE-2026-14645 https://vulnogram.org/CVE-2026-14645 Nexus Repository 3 does not validate the destination of the "Webhook: Global" capability's configured URL before making an outbound HTTP request, allowing a user holding the Capability Administration permission to cause the server to send requests to… Medium Tue, 14 Jul 2026 16:33:47 GMT https://vulnogram.org/CVE-2026-14504 https://vulnogram.org/CVE-2026-14504 An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on a Swift, Terraform, or Conda hosted repository to upload arbitrary artifacts, bypassing the intended write-permission check. High Network Exploitable Tue, 14 Jul 2026 15:55:04 GMT https://vulnogram.org/CVE-2026-7494 https://vulnogram.org/CVE-2026-7494 Nexus Repository 3 is vulnerable to Server-Side Request Forgery (SSRF) via the SSL Certificate Retrieval endpoint. A user holding the nexus:ssl-truststore:read permission could cause the server to initiate outbound connections to internal or otherwis… Medium Tue, 14 Jul 2026 15:46:24 GMT https://vulnogram.org/CVE-2026-11403 https://vulnogram.org/CVE-2026-11403 A vulnerability in Sonatype Nexus Repository Manager's format-specific API key generation may allow a remote attacker to gain unauthorized access to repository operations as a targeted user. A format-specific API key realm (NuGet API Key, Docker Bear… High Network Exploitable Tue, 14 Jul 2026 15:28:23 GMT https://vulnogram.org/CVE-2026-10741 https://vulnogram.org/CVE-2026-10741 Sonatype Nexus Repository Manager before 3.93.0 contains an authorization vulnerability in the proxy repository configuration that allows a delegated repository administrator to disclose stored upstream proxy credentials. Medium Wed, 17 Jun 2026 19:01:13 GMT https://vulnogram.org/CVE-2026-10748 https://vulnogram.org/CVE-2026-10748 An authenticated user with the nx-licensing-create privilege can upload a specially crafted license file to execute arbitrary operating system commands as the Nexus process user in Sonatype Nexus Repository 3 versions before 3.92.0. High Tue, 16 Jun 2026 17:42:59 GMT https://vulnogram.org/CVE-2026-3329 https://vulnogram.org/CVE-2026-3329 A remote unauthenticated attacker may be able to conduct credential-guessing attacks against user accounts in Sonatype Nexus Repository via authentication endpoints. High Network Exploitable Thu, 11 Jun 2026 17:00:12 GMT https://vulnogram.org/CVE-2026-7308 https://vulnogram.org/CVE-2026-7308 An authenticated user with upload permission to a hosted repository can store content that causes arbitrary JavaScript to execute in the browser of any user who browses that repository directory via the HTML index page in Sonatype Nexus Repository ve… Medium Mon, 11 May 2026 17:17:04 GMT https://vulnogram.org/CVE-2026-3048 https://vulnogram.org/CVE-2026-3048 An authenticated administrator who configures or tests LDAP connectivity in Sonatype Nexus Repository Manager versions 3.0.0 through 3.91.1 may be able to initiate unintended server-side connections when interacting with a malicious LDAP server. Medium Mon, 11 May 2026 17:11:45 GMT https://vulnogram.org/CVE-2026-5189 https://vulnogram.org/CVE-2026-5189 CWE-798: Use of Hard-coded Credentials in Sonatype Nexus Repository Manager versions 3.0.0 through 3.70.5 allows an unauthenticated attacker with network access to gain unauthorized read/write access to the internal database and execute arbitrary OS… Critical Network Exploitable Wed, 15 Apr 2026 18:43:32 GMT https://vulnogram.org/CVE-2026-3199 https://vulnogram.org/CVE-2026-3199 A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1 through 3.90.2 allows an authenticated attacker with task creation permissions to execute arbitrary code, bypassing the nexus.scripts.allowCreation security… Critical Wed, 08 Apr 2026 22:17:10 GMT https://vulnogram.org/CVE-2026-3438 https://vulnogram.org/CVE-2026-3438 A reflected cross-site scripting vulnerability exists in Sonatype Nexus Repository versions 3.0.0 through 3.90.2 that allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser through a specially crafted URL. Explo… Medium Network Exploitable Wed, 08 Apr 2026 22:16:09 GMT https://vulnogram.org/CVE-2026-0600 https://vulnogram.org/CVE-2026-0600 Server-Side Request Forgery (SSRF) vulnerability in Sonatype Nexus Repository 3 versions 3.0.0 and later allows authenticated administrators to configure proxy repositories with URLs that can access unintended network destinations, potentially includ… Medium Wed, 14 Jan 2026 22:29:09 GMT https://vulnogram.org/CVE-2026-0601 https://vulnogram.org/CVE-2026-0601 A reflected cross-site scripting vulnerability exists in Nexus Repository 3 that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser through a specially crafted request requiring user interaction. Medium Network Exploitable Wed, 14 Jan 2026 22:05:17 GMT https://vulnogram.org/CVE-2025-13158 https://vulnogram.org/CVE-2025-13158 Prototype pollution vulnerability in apidoc-core versions 0.2.0 and all subsequent versions allows remote attackers to modify JavaScript object prototypes via malformed data structures, including the “define” property processed by the application, po… Critical Network Exploitable Fri, 26 Dec 2025 16:00:27 GMT https://vulnogram.org/CVE-2025-13488 https://vulnogram.org/CVE-2025-13488 Due to a regression introduced in version 3.83.0, a security header is no longer applied to certain user-uploaded content served from repositories. This may allow an authenticated attacker with repository upload privileges to exploit a stored cross-s… Medium Thu, 04 Dec 2025 18:16:56 GMT https://vulnogram.org/CVE-2025-12183 https://vulnogram.org/CVE-2025-12183 Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input. High Network Exploitable Fri, 28 Nov 2025 15:52:56 GMT https://vulnogram.org/CVE-2025-9868 https://vulnogram.org/CVE-2025-9868 Server-Side Request Forgery (SSRF) in the Remote Browser Plugin in Sonatype Nexus Repository 2.x up to and including 2.15.2 allows unauthenticated remote attackers to exfiltrate proxy repository credentials via crafted HTTP requests. High Network Exploitable Wed, 08 Oct 2025 17:07:45 GMT https://vulnogram.org/CVE-2025-1945 https://vulnogram.org/CVE-2025-1945 picklescan before 0.0.23 fails to detect malicious pickle files inside PyTorch model archives when certain ZIP file flag bits are modified. By flipping specific bits in the ZIP file headers, an attacker can embed malicious pickle files that remain un… Medium Network Exploitable Mon, 10 Mar 2025 11:43:02 GMT https://vulnogram.org/CVE-2025-1944 https://vulnogram.org/CVE-2025-1944 picklescan before 0.0.23 is vulnerable to a ZIP archive manipulation attack that causes it to crash when attempting to extract and scan PyTorch model archives. By modifying the filename in the ZIP header while keeping the original filename in the dir… Medium Network Exploitable Mon, 10 Mar 2025 11:30:32 GMT https://vulnogram.org/CVE-2025-1889 https://vulnogram.org/CVE-2025-1889 picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An attacker could craft a malicious model that uses Pickle and include a malicious pickle file with a non-standard file extension. Becaus… Medium Network Exploitable Mon, 03 Mar 2025 18:38:10 GMT https://vulnogram.org/CVE-2025-1716 https://vulnogram.org/CVE-2025-1716 picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker could craft a malicious model that uses Pickle to pull in a malicious PyPI package (hosted, for example, on pypi.org or GitHub) via `pip.main()`. Because pip is not a rest… Medium Network Exploitable Wed, 26 Feb 2025 14:51:38 GMT https://vulnogram.org/CVE-2024-5082 https://vulnogram.org/CVE-2024-5082 A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2. This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1. High Thu, 14 Nov 2024 02:58:44 GMT https://vulnogram.org/CVE-2024-5083 https://vulnogram.org/CVE-2024-5083 A stored Cross-site Scripting vulnerability has been discovered in Sonatype Nexus Repository 2 This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1. Medium Thu, 14 Nov 2024 01:31:20 GMT https://vulnogram.org/CVE-2024-5764 https://vulnogram.org/CVE-2024-5764 Use of Hard-coded Credentials vulnerability in Sonatype Nexus Repository has been discovered in the code responsible for encrypting any secrets stored in the Nexus Repository configuration database (SMTP or HTTP proxy credentials, user tokens, tokens… Medium Wed, 23 Oct 2024 14:47:55 GMT https://vulnogram.org/CVE-2024-6060 https://vulnogram.org/CVE-2024-6060 An information disclosure vulnerability in Phloc Webscopes 7.0.0 allows local attackers with access to the log files to view logged HTTP requests that contain user passwords or other sensitive information. Critical Tue, 25 Jun 2024 21:36:33 GMT https://vulnogram.org/CVE-2024-4956 https://vulnogram.org/CVE-2024-4956 Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1. High Network Exploitable Thu, 16 May 2024 15:31:01 GMT https://vulnogram.org/CVE-2024-1142 https://vulnogram.org/CVE-2024-1142 Path Traversal in Sonatype IQ Server from version 143 allows remote authenticated attackers to overwrite or delete files via a specially crafted request. Version 171 fixes this issue. Medium Wed, 06 Mar 2024 20:08:21 GMT