Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
BIT-hyperledger-fabric-tools-2026-41586
  • Bitnami/hyperledger-fabric-tools
 ObjectInputStream.readObject() without ObjectInputFilter in fabric-sdk-java allows Java deserialization RCE 11 May
  • Fix available
  • Severity - 9.3 (Critical)
BIT-hyperledger-fabric-peer-2026-41586
  • Bitnami/hyperledger-fabric-peer
 ObjectInputStream.readObject() without ObjectInputFilter in fabric-sdk-java allows Java deserialization RCE 11 May
  • Fix available
  • Severity - 9.3 (Critical)
BIT-hyperledger-fabric-orderer-2026-41586
  • Bitnami/hyperledger-fabric-orderer
 ObjectInputStream.readObject() without ObjectInputFilter in fabric-sdk-java allows Java deserialization RCE 11 May
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-prf8-cf2x-rhx7
  • Maven/org.hyperledger.fabric-sdk-java:fabric-sdk-java
 fabric-sdk-java has ObjectInputStream.readObject() without ObjectInputFilter, which allows Java deserialization RCE 29 Apr
  • No fix available
  • Severity - 9.3 (Critical)