java-25-openjdk vulnerabilities

CVEs whose affected-version data names the java-25-openjdk package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-95512Medium· 5.5

today

A flaw was found in FreeType, specifically within its CID font loader

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted …

▾ SunlitRed Hat · java-11-openjdkvia NVD