Announcements
- PostgreSQL Index Corruption - "duplicate key violation" errors
- Sonatype Data Services (HDS) Regularly Scheduled Maintenance
- IQ Server vulnerability information contains the Root Cause
- codehaus.org Repositories Should Be Removed From Your Nexus Repository Instance
- Log4Shell log4j Vulnerability CVE-2021-44228 Status
- Spring Framework RCE Vulnerability CVE-2021-22963 and SONATYPE-2022-1764
Security Advisories
- CVE-2026-97667 Nexus Repository 3 - Stored Cross-Site Scripting in Browse UI - 2026-10-15
- CVE-2026-97712 Nexus Repository 3 - Privilege Escalation via Role Management - 2026-10-15
- CVE-2026-97666 Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository Endpoint - 2026-10-15
- CVE-2026-97665 Nexus Repository 3 - Missing Authorization on NuGet Symbol Package Upload - 2026-10-15
- CVE-2026-77125 Nexus Repository 3 - Incorrect Authorization on Blobstore Group Endpoints - 2026-09-02
- CVE-2026-77124 Nexus Repository 3 - Script Execution Disable Setting Not Enforced - 2026-09-02