## Security advisory: update your JDK (CVE-2026-91403)

- 種別: release
- 関連技術: scala, java
- CVE: CVE-2026-91403
- 公開日時: 2026-10-21T22:00:00.000Z
- 情報源: Scala News (https://www.scala-lang.org/blog/jdk-certificate-vulnerability.html)
- パーマリンク: https://vulnpulse.app/items/scala-ca9cda0ad0aa

On 2026-10-21, OpenJDK published a vulnerability advisory for CVE-2026-91403 (CVSS 9.1), which concerns eight compromised intermediate CA certificates shipped with the JDK. It affects all supported JDK lines: 8, 11, 17, 21, 25 and 27. This is not a Scala issue, but it affects every application running on the JVM, including Scala ones, as well as Scala build tools that use the JDK’s certificates to download dependencies. Am I affected? You are affected if you use JDK 27.0.1, 25.0.5, 21.0.13, 17.0.21, 11.0.33, 8u512, or earlier . To check if your JDK is vulnerable, checkout eed3si9n/emudhra-ems…