IndexedVerified
JVM Security
Java, Kotlin, and Scala SAST rules aggregated across verified providers.
Fetch pack
greprules pack fetch jvm-security --engine opengrepcurl https://api.greprules.io/api/packs/jvm-security.tar.gz -o jvm-security.tar.gz- Owner
- Provally
- Total rules
- 567
- Downloads
- 1
- Last updated
- 2026-09-02
- Languages
Java
Kotlin
Scala
Included rules
CVE-2026-83497: Java Objectinputstream Missing Filter
cve-2026-83497-java-objectinputstream-missing-filterCVE-2026-82880: Images Svgparser Java Cwe 000 Cve 2026 82880cve-2026-82880-images-svgparser-java-cwe-000-cve-2026-82880CVE-2026-82878: Dataease Missing Object Authorizationcve-2026-82878-dataease-missing-object-authorizationCVE-2026-82465: Pac4j Nimbus Jwt Unverified Claimscve-2026-82465-pac4j-nimbus-jwt-unverified-claimsCVE-2026-82462: Nimbus Unverified Signed Jwt Claimscve-2026-82462-nimbus-unverified-signed-jwt-claimsCVE-2026-82461: Nimbus Jwt Unverified Claims Parsingcve-2026-82461-nimbus-jwt-unverified-claims-parsingCVE-2026-81679: Openremote Missing Realm Authorization Checkcve-2026-81679-openremote-missing-realm-authorization-checkCVE-2026-81624: Undertow Websocket Missing Limitscve-2026-81624-undertow-websocket-missing-limitsCVE-2026-78329: Camel Undertow Insecure Header Filter Strategycve-2026-78329-camel-undertow-insecure-header-filter-strategyCVE-2026-77810: Jdbc Metadata Sql Injectioncve-2026-77810-jdbc-metadata-sql-injectionCVE-2026-77310: Insecure Inetaddress Deserializationcve-2026-77310-insecure-inetaddress-deserializationCVE-2026-76986: Wicket Unescaped Option Tagcve-2026-76986-wicket-unescaped-option-tagCVE-2026-76985: Unescaped Html Attribute Concatenationcve-2026-76985-unescaped-html-attribute-concatenationCVE-2026-76984: Improper Html Attribute Backslash Quote Escapingcve-2026-76984-improper-html-attribute-backslash-quote-escapingCVE-2026-76983: Wicket Unescaped Replace Component Tag Bodycve-2026-76983-wicket-unescaped-replace-component-tag-bodyCVE-2026-76403: Apache Httpclient Ssl Overridden By System Propertiescve-2026-76403-apache-httpclient-ssl-overridden-by-system-propertiesCVE-2026-75910: Java Jdbc Metadata Sql Injectioncve-2026-75910-java-jdbc-metadata-sql-injectionCVE-2026-75802: Wicket Unescaped Null Label Markupcve-2026-75802-wicket-unescaped-null-label-markupCVE-2026-75627: Raw Request Uri Auth Checkcve-2026-75627-raw-request-uri-auth-checkCVE-2026-75140: Nested Scope Map Copy Doscve-2026-75140-nested-scope-map-copy-dosCVE-2026-73939: Helidon Serial Filter Resource Loadingcve-2026-73939-helidon-serial-filter-resource-loadingCVE-2026-73933: Helidon Serial Config Classloader Discoverycve-2026-73933-helidon-serial-config-classloader-discoveryCVE-2026-73932: Helidon Serial Filter Resource Loadingcve-2026-73932-helidon-serial-filter-resource-loadingCVE-2026-73931: Helidon Serialization Config Classloader Discoverycve-2026-73931-helidon-serialization-config-classloader-discovery24 of 567 loaded