Announcements
- PostgreSQL Index Corruption - "duplicate key violation" errors
- Sonatype Data Services (HDS) Regularly Scheduled Maintenance
- IQ Server vulnerability information contains the Root Cause
- codehaus.org Repositories Should Be Removed From Your Nexus Repository Instance
- Log4Shell log4j Vulnerability CVE-2021-44228 Status
- Spring Framework RCE Vulnerability CVE-2021-22963 and SONATYPE-2022-1764
Security Advisories
- CVE-2026-113374 Nexus Repository 3 - Privilege Escalation via Rut Auth Capability Creation - 2026-11-04
- CVE-2026-113373 Nexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In Again - 2026-11-04
- CVE-2026-113372 Nexus Repository 3 - Insufficiently Protected Credentials in YUM Repository Signing Key - 2026-11-04
- CVE-2026-113371 Nexus Repository 3 - Insufficiently Protected Credentials in Repository Signing Passphrase - 2026-11-04
- CVE-2026-113370 Nexus Repository 3 - SQL Injection in Reindex Search by Pattern Task - 2026-11-04
- CVE-2026-113368 Nexus Repository 3 - Group Repository Member Authorization Bypass - 2026-11-04