{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"libjgroups-java","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":[],"id":"tcs_01M5NBGNW2YNVDZ33SF0RMVM1V","modified_at":"2026-09-22T07:00:20.497338389Z","published_at":"2016-06-30T16:59:00.117Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2016-2141","https://security-tracker.debian.org/tracker/CVE-2016-2141"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2016-2141","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2016-2141"}],"summary":"It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use"}