Threats Tagged 'ghsa-2p8h-ph4h-rm2f'

CVE-2026-94114 is a vulnerability in Apache Commons BCEL where symbolic names do not map to the correct objects. This occurs because BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing lookups and verification results to reference incorrect classes. The issue affects versions before 6.13.0. Users are advised to upgrade to version 6.13.0 to address this vulnerability.