Skip to content

CVE record · 1 source

CVE-2026-97667

Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of…

Vendor: Sonatype / JFrog
Product: Java libraries / app servers, Nexus Repository / Artifactory
Exposure class: Web platform, Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

5

CVE NVD 16d ago

Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of…

Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package. The script runs in the browser of a user who opens the…

CVE-2026-97667 Sonatype / JFrog