GHSA-qhr6-6cgv-6638
Medium · 5.3CVSS
5.3
EPSS
—
Published
Dec 10, 2025
CISA due date
—
The record
Improper Memory Cleanup in the Okta Java SDK
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | com.okta.sdk:okta-sdk-root | 21.0.0 | 24.0.1 |
| maven | com.okta.sdk/okta-sdk-root | 21.0.0 | 24.0.1 |
Related vulnerabilities
- CVE-2025-66033 Okta Java Management SDK facilitates interactions with the Okta management API. Same vulnerability
- CVE-2025-67505 Okta Java Management SDK facilitates interactions with the Okta management API. Also affects com.okta.sdk:okta-sdk-root
- GHSA-j5gq-897m-2rff Race condition in the Okta Java SDK Also affects com.okta.sdk:okta-sdk-root
- CVE-2026-109278 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the… CWE-401
- CVE-2026-109270 ImageMagick before 7.1.2-32 contains a memory leak vulnerability in the -process option… CWE-401
- CVE-2026-109262 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG… CWE-401
- CVE-2026-109263 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV… CWE-401
- CVE-2026-109261 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF… CWE-401