Maven/com.mchange:mchange-commons-java CVE-2026-55153: high 7.1, EPSS 0.19%
mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"
Action: Upgrade com.mchange:mchange-commons-java to 0.6.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.0 | - |
Fixed versions
| 0.6.0 |
Sources
- osv: GHSA-h84g-69h7-mw6v
- https://github.com/swaldman/mchange-commons-java/security/advisories/GHSA-h84g-69h7-mw6v
- https://nvd.nist.gov/vuln/detail/CVE-2026-55153
- https://github.com/swaldman/mchange-commons-java
CVE-2026-55153 · published · modified · JSON