Announcements
- PostgreSQL Index Corruption - "duplicate key violation" errors
- Sonatype Data Services (HDS) Regularly Scheduled Maintenance
- IQ Server vulnerability information contains the Root Cause
- codehaus.org Repositories Should Be Removed From Your Nexus Repository Instance
- Log4Shell log4j Vulnerability CVE-2021-44228 Status
- Spring Framework RCE Vulnerability CVE-2021-22963 and SONATYPE-2022-1764
Security Advisories
- CVE-2026-14646 Nexus Repository 3 - SSRF via HTTP Redirect - 2026-07-14
- CVE-2026-14645 Nexus Repository 3 - Webhook SSRF - 2026-07-14
- CVE-2026-14504 Nexus Repository 3 - Authorization Bypass in Component Upload API - 2026-07-14
- CVE-2026-7494 Nexus Repository 3 - SSRF in SSL Certificate Retrieval - 2026-07-14
- CVE-2026-3329 Nexus Repository 3 - Authentication Handling Issue - 2026-06-11
- CVE-2026-11403 Nexus Repository 3 - Insufficient Entropy in API Key Generation - 2026-07-14