{"id":"scala-ca9cda0ad0aa","seq":350404,"kind":"release","title":"Security advisory: update your JDK (CVE-2026-91403)","url":"https://www.scala-lang.org/blog/jdk-certificate-vulnerability.html","permalink":"https://vulnpulse.app/items/scala-ca9cda0ad0aa","summary":"On 2026-10-21, OpenJDK published a vulnerability advisory for CVE-2026-91403 (CVSS 9.1), which concerns eight compromised intermediate CA certificates shipped with the JDK. It affects all supported JDK lines: 8, 11, 17, 21, 25 and 27. This is not a Scala issue, but it affects every application running on the JVM, including Scala ones, as well as Scala build tools that use the JDK’s certificates to download dependencies. Am I affected? You are affected if you use JDK 27.0.1, 25.0.5, 21.0.13, 17.0.21, 11.0.33, 8u512, or earlier . To check if your JDK is vulnerable, checkout eed3si9n/emudhra-ems…","severity":null,"techs":["scala","java"],"cves":["CVE-2026-91403"],"tags":["security"],"source":{"id":"scala","name":"Scala News"},"published_at":"2026-10-21T22:00:00.000Z","fetched_at":"2026-10-22T23:47:50.659Z"}