Threats affecting pkg:maven/org.hyperledger/fabric

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 0.5%	CVE-2026-41586hyperledger fabric · Deserialization of Untrusted Data Critical9.3EPSS 0.5%2026-05-07CVE Database V5CVE-2026-41586 CVE-2026-41586 is a critical vulnerability in Hyperledger Fabric versions 1.0.0 through 2.2.26 involving unsafe deserialization of untrusted data. The vulnerability arises because Channel.java calls ObjectInputStream.readObject() on untrusted byte arrays without an ObjectInputFilter, leading to a classic Java deserialization remote code execution (RCE) pattern. No patches or official fixes are available at the time of publication. The vulnerability has a high CVSS 4. EPSS 0.5%Vulnerability CWE-502	CVE Database V5	2026-05-07

Page 1 of 1