CLEANSTART-2026-IS57850

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IS57850.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-IS57850
Upstream
Published
2026-10-14T00:44:28Z
Modified
2026-10-14T01:00:22Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets
Details

CVE-2022-34169 affects multiple packages. The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. See references for individual vulnerability details.

References

Affected packages

CleanStart / openjdk11

Package

Name
openjdk11
Purl
pkg:apk/cleanstart/openjdk11

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
11.0.16_p8-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IS57850.json"

CleanStart / openjdk17

Package

Name
openjdk17
Purl
pkg:apk/cleanstart/openjdk17

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
17.0.4_p8-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IS57850.json"