OSV-2026-609

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/javaparser/OSV-2026-609.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-609
Published
2026-04-22T00:04:34.950605Z
Modified
2026-04-22T00:04:34.950993Z
Summary
Security exception in com.github.javaparser.ast.NodeList.forEach
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=504814677

Crash type: Security exception
Crash state:
com.github.javaparser.ast.NodeList.forEach
com.github.javaparser.ast.visitor.VoidVisitorAdapter.visit
com.github.javaparser.ast.validator.language_level_validations.chunks.ModifierVa
References

Affected packages

OSS-Fuzz / javaparser

Package

Name
javaparser
Purl
pkg:generic/javaparser

Affected ranges

Type
GIT
Repo
https://github.com/javaparser/javaparser
Events
Introduced
28aeb860a119af9fe61fd200b18efb93d8cd7f73
Fixed
cb829f5d423ba5e097b0eca0e71c68049c4074b9

Affected versions

javaparser-parent-3.*
javaparser-parent-3.26.2
javaparser-parent-3.26.3
javaparser-parent-3.26.4
javaparser-parent-3.27.0
javaparser-parent-3.27.1
javaparser-parent-3.28.0
javaparser-parent-3.28.1
Other
v_snapshot_2751159

Ecosystem specific 

{
    "severity": "LOW"
}

Database specific

introduced_range 
"1df12b1aea8efc6f4bf3c9b51db03b64add209a8:3f48dac2fb39294d9104e57b03b55c3b447a4999"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/javaparser/OSV-2026-609.yaml"