Announcements
- PostgreSQL Index Corruption - "duplicate key violation" errors
- Sonatype Data Services (HDS) Regularly Scheduled Maintenance
- IQ Server vulnerability information contains the Root Cause
- codehaus.org Repositories Should Be Removed From Your Nexus Repository Instance
- Log4Shell log4j Vulnerability CVE-2021-44228 Status
- Spring Framework RCE Vulnerability CVE-2021-22963 and SONATYPE-2022-1764
Security Advisories
- CVE-2026-77125 Nexus Repository 3 - Incorrect Authorization on Blobstore Group Endpoints - 2026-09-02
- CVE-2026-77124 Nexus Repository 3 - Script Execution Disable Setting Not Enforced - 2026-09-02
- CVE-2026-77123 Nexus Repository 3 - Webhook Secret Disclosure via Capability Read API - 2026-09-02
- CVE-2026-77122 Nexus Repository 3 - Authorization Bypass Exposes Member Repository Metadata - 2026-09-02
- CVE-2026-77121 Nexus Repository 3 - Denial of Service via Unbounded Maven POM Metadata Fields - 2026-09-02
- CVE-2026-17603 Nexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration API - 2026-08-07