News · via oss-security
CVE-2026-105111: Apache Commons BCEL: Class2HTML emits unescaped class strings, enabling stored XSS
Posted by Gary D. Gregory on Oct 06 Severity: low CVSS 3.1: 4.7 (medium) CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS 4.0: 2.3 (low)…