Package impact
MAVEN / org.hyperledger.fabric-sdk-java:fabric-sdk-java
| CVE | Severity | CVSS | Risk | Flags | OS | Vendor | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-41586 | critical | — | 9.5 | 29d ago | fabric-sdk-java has ObjectInputStream.readObject() without ObjectInputFilter, which allows Java deserialization RCE |