VDB
BIT-java-min-2023-41074
BIT-java-min-2023-41074
PUBLISHED
CVSS 8.800000190734863 HIGH
Record from OSV · Published May 6, 2026
The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| java-min | Bitnami | 8.0.411, 1.8.0 |
Risk scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | java-min | 1.9.0, 0 |
Timeline
- May 6, 2026 CVE Published
- May 8, 2026 CVE Updated
- May 15, 2026 Distribution Patch
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln BIT-java-min-2023-41074
vulnetix vdb fixes BIT-java-min-2023-41074
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/BIT-java-min-2023-41074/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- http://seclists.org/fulldisclosure/2023/Oct/2 url
- https://nvd.nist.gov/vuln/detail/CVE-2023-41074 url
- https://support.apple.com/en-us/HT213938 url
- https://support.apple.com/en-us/HT213936 url
- https://support.apple.com/en-us/HT213937 url
- http://seclists.org/fulldisclosure/2023/Oct/10 url
- http://seclists.org/fulldisclosure/2023/Oct/9 url
- https://openjdk.org/groups/vulnerability/advisories/2024-04-16 url
- https://security.gentoo.org/glsa/202401-33 url
- https://support.apple.com/en-us/HT213941 url
- http://www.openwall.com/lists/oss-security/2023/09/28/3 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EEMDC5TQAANFH5D77QM34ZTUKXPFGVL/ url
- http://seclists.org/fulldisclosure/2023/Oct/3 url
- http://seclists.org/fulldisclosure/2023/Oct/8 url
- https://www.debian.org/security/2023/dsa-5527 url
- https://support.apple.com/en-us/HT213940 url
- https://webkitgtk.org/security/WSA-2023-0009.html url