Security advisory: update your JDK (CVE-2026-91403)

On 2026-10-21, OpenJDK published a vulnerability advisory for CVE-2026-91403 (CVSS 9.1), which concerns eight compromised intermediate CA certificates shipped with the JDK. It affects all supported JDK lines: 8, 11, 17, 21, 25 and 27. This is not a Scala issue, but it affects every application running on the JVM, including Scala ones, as well as Scala build tools that use the JDK’s certificates to download dependencies. Am I affected? You are affected if you use JDK 27.0.1, 25.0.5, 21.0.13, 17.0.21, 11.0.33, 8u512, or earlier . To check if your JDK is vulnerable, checkout eed3si9n/emudhra-ems…

Scala Newsで読む

2026/10/22 07:00、Scala Newsが「Security advisory: update your JDK (CVE-2026-91403)」を公開しました (種別: リリース・告知)。関連する技術: Scala、Java。CVE: CVE-2026-91403。