https://bugzilla.redhat.com/show_bug.cgi?id=2430311
Bug ID: 2430311
Summary: CVE-2026-0858 plantuml: PlantUML: Arbitrary script
execution via Stored Cross-Site Scripting in GraphViz
diagrams [epel-8]
Product: Fedora EPEL
Version: epel8
Status: NEW
Whiteboard: {"flaws": ["27c60aa8-34a4-434d-9578-f39fc0df6f9e"]}
Component: plantuml
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: h-k-81(a)hotmail.com
Reporter: saroy(a)redhat.com
CC: blaise(a)gmail.com, h-k-81(a)hotmail.com,
java-sig-commits(a)lists.fedoraproject.org,
sumitgarg44(a)gmail.com
Blocks: 2430303 (CVE-2026-0858)
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2430303
[Bug 2430303] CVE-2026-0858 plantuml: PlantUML: Arbitrary script execution via
Stored Cross-Site Scripting in GraphViz diagrams
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2430311
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2430310
Bug ID: 2430310
Summary: CVE-2026-0858 plantuml: PlantUML: Arbitrary script
execution via Stored Cross-Site Scripting in GraphViz
diagrams [epel-9]
Product: Fedora EPEL
Version: epel9
Status: NEW
Whiteboard: {"flaws": ["27c60aa8-34a4-434d-9578-f39fc0df6f9e"]}
Component: plantuml
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: h-k-81(a)hotmail.com
Reporter: saroy(a)redhat.com
CC: blaise(a)gmail.com, h-k-81(a)hotmail.com,
java-sig-commits(a)lists.fedoraproject.org,
sumitgarg44(a)gmail.com
Blocks: 2430303 (CVE-2026-0858)
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2430303
[Bug 2430303] CVE-2026-0858 plantuml: PlantUML: Arbitrary script execution via
Stored Cross-Site Scripting in GraphViz diagrams
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2430310
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2430309
Bug ID: 2430309
Summary: CVE-2026-0858 plantuml: PlantUML: Arbitrary script
execution via Stored Cross-Site Scripting in GraphViz
diagrams [fedora-43]
Product: Fedora
Version: 43
Status: NEW
Whiteboard: {"flaws": ["27c60aa8-34a4-434d-9578-f39fc0df6f9e"]}
Component: plantuml
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: h-k-81(a)hotmail.com
Reporter: saroy(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: blaise(a)gmail.com, h-k-81(a)hotmail.com,
java-sig-commits(a)lists.fedoraproject.org,
sumitgarg44(a)gmail.com
Blocks: 2430303 (CVE-2026-0858)
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2430303
[Bug 2430303] CVE-2026-0858 plantuml: PlantUML: Arbitrary script execution via
Stored Cross-Site Scripting in GraphViz diagrams
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2430309
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2430308
Bug ID: 2430308
Summary: CVE-2026-0858 plantuml: PlantUML: Arbitrary script
execution via Stored Cross-Site Scripting in GraphViz
diagrams [fedora-42]
Product: Fedora
Version: 42
Status: NEW
Whiteboard: {"flaws": ["27c60aa8-34a4-434d-9578-f39fc0df6f9e"]}
Component: plantuml
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: h-k-81(a)hotmail.com
Reporter: saroy(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: blaise(a)gmail.com, h-k-81(a)hotmail.com,
java-sig-commits(a)lists.fedoraproject.org,
sumitgarg44(a)gmail.com
Blocks: 2430303 (CVE-2026-0858)
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2430303
[Bug 2430303] CVE-2026-0858 plantuml: PlantUML: Arbitrary script execution via
Stored Cross-Site Scripting in GraphViz diagrams
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2430308
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2430307
Bug ID: 2430307
Summary: CVE-2026-0858 plantuml: PlantUML: Arbitrary script
execution via Stored Cross-Site Scripting in GraphViz
diagrams [epel-10]
Product: Fedora EPEL
Version: epel10
Status: NEW
Whiteboard: {"flaws": ["27c60aa8-34a4-434d-9578-f39fc0df6f9e"]}
Component: plantuml
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: h-k-81(a)hotmail.com
Reporter: saroy(a)redhat.com
CC: blaise(a)gmail.com, h-k-81(a)hotmail.com,
java-sig-commits(a)lists.fedoraproject.org,
sumitgarg44(a)gmail.com
Blocks: 2430303 (CVE-2026-0858)
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2430303
[Bug 2430303] CVE-2026-0858 plantuml: PlantUML: Arbitrary script execution via
Stored Cross-Site Scripting in GraphViz diagrams
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2430307
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2429953
Bug ID: 2429953
Summary: CVE-2025-48976 tomcat: Apache Commons FileUpload DoS
via part headers [fedora-42]
Product: Fedora
Version: 42
Status: NEW
Whiteboard: {"flaws": ["eea4b59d-5a66-4519-87a1-eee9ed9ae716"]}
Component: tomcat
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: csutherl(a)redhat.com
Reporter: ahanwate(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: akrajcik(a)redhat.com, alee(a)redhat.com,
csutherl(a)redhat.com, dsoumis(a)redhat.com,
ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
szappis(a)redhat.com
Blocks: 2373020 (CVE-2025-48976)
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2373020
[Bug 2373020] CVE-2025-48976 apache-commons-fileupload: Apache Commons
FileUpload DoS via part headers
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2429953
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2429952
Bug ID: 2429952
Summary: CVE-2025-48976 tomcat: Apache Commons FileUpload DoS
via part headers [fedora-41]
Product: Fedora
Version: 41
Status: NEW
Whiteboard: {"flaws": ["eea4b59d-5a66-4519-87a1-eee9ed9ae716"]}
Component: tomcat
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: csutherl(a)redhat.com
Reporter: ahanwate(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: akrajcik(a)redhat.com, alee(a)redhat.com,
csutherl(a)redhat.com, dsoumis(a)redhat.com,
ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
szappis(a)redhat.com
Blocks: 2373020 (CVE-2025-48976)
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2373020
[Bug 2373020] CVE-2025-48976 apache-commons-fileupload: Apache Commons
FileUpload DoS via part headers
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2429952
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…