Sonatype vulnerabilities

CVEs per yearBy the year they were published

1. 20245
2. 20252
3. 202642

Newest CVEs

• CVE-2026-113368

  Nexus Repository 3 - Group Repository Member Authorization Bypass

  Sonatype · Nexus Repository 3

  Medium5.3
• CVE-2026-113369

  Nexus Repository 3 - Stored Cross-Site Scripting in OCI Attestations Tab

  Sonatype · Nexus Repository 3

  Medium6.3
• CVE-2026-113370

  Nexus Repository 3 - SQL Injection in Reindex Search by Pattern Task

  Sonatype · Nexus Repository 3

  High7.7
• CVE-2026-113371

  Nexus Repository 3 - Insufficiently Protected Credentials in Repository Signing Passphrase

  Sonatype · Nexus Repository 3

  High7.1
• CVE-2026-113372

  Nexus Repository 3 - Insufficiently Protected Credentials in YUM Repository Signing Key

  Sonatype · Nexus Repository 3

  High7.1
• CVE-2026-113373

  Nexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In Again

  Sonatype · Nexus Repository 3

  Critical9.1
• CVE-2026-113374

  Nexus Repository 3 - Privilege Escalation via Rut Auth Capability Creation

  Sonatype · Nexus Repository 3

  High8.6
• CVE-2026-97712

  Nexus Repository 3 - Privilege Escalation via Role Management

  Sonatype · Nexus Repository 3

  High8.7
• CVE-2026-97667

  Nexus Repository 3 - Stored Cross-Site Scripting in Browse UI

  Sonatype · Nexus Repository 3

  Medium5.1
• CVE-2026-97666

  Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository Endpoint

  Sonatype · Nexus Repository 3

  Medium6.9