Threats affecting pkg:maven/org.b3log/bolo-solo

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.6%	CVE-2026-1691bolo-solo · Deserialization Medium5.3EPSS 0.6%2026-01-30CVE Database V5CVE-2026-1691 A vulnerability has been found in bolo-solo up to 2.6.4. This impacts the function importMarkdownsSync of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the component SnakeYAML. Such manipulation leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. EPSS 0.6%Vulnerability	CVE Database V5	2026-01-30

Page 1 of 1