GR
Product
Graalvm
On CISA KEVExploited in the wild
196
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 57Medium 86Low 47
Watch
Add Graalvm to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-20952 | 7.4 | Jan 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: 20.3.12; 21.3.8; 22.3.4 |
| CVE-2024-20918 | 7.4 | Jan 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 20.3.12; 21.3.8; 22.3.4 |
| CVE-2023-21930 | 7.4 | Apr 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: 20.3.9; 21.3.5; 22.3.1 |
| CVE-2021-44531 | 7.4 | Feb 24 | Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates Affected: 20.3.5; 21.3.1; 22.0.0.2 |
| CVE-2021-3450 | 7.4 | Mar 25 | CA certificate check bypass with X509_V_FLAG_X509_STRICT Affected: 19.3.5; 20.3.1.2; 21.0.0.2 |
| CVE-2020-8172 | 7.4 | Jun 8 | TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0 Affected: 19.3.2; 20.1.0 |
| CVE-2020-14718 | 7.2 | Jul 15 | Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: JVMCI) Affected: 19.3.2; 20.1.0 |