esa sleapi-j vulnerabilities

Latest esa sleapi-j CVEs

Newest publication first

1. CVE-2026-54086 SLE API for Java: Uncontrolled Memory Allocation / handled exception leading to Denial of Service

   Published 2026-10-13

   Medium·CVSS 5.3 EPSS 0.49%

   SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body length and allocates a byte array without an upper bound, while malformed or truncated input can also terminate reads unexp...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.