{"id":"CVE-2026-66713","summary":"Apache Axis2/Java: deserialization of untrusted Data","details":"Deserialization of Untrusted Data (CWE-502) in the Tribes-based clustering component\n\n  in Apache Software Foundation Apache Axis2/Java through 2.0.0 on Apache Tomcat\n\n  (only when Tribes clustering is enabled, which is off by default) allows an\n\n  unauthenticated remote attacker with network access to the clustering port to\n\n  execute arbitrary code via a crafted serialized Java object delivered to the cluster\n\n  channel and deserialized in\n\n  org.apache.axis2.clustering.tribes.Axis2ChannelListener#messageReceived. Users are\n\n  recommended to upgrade to version 2.0.1, which fixes this issue by removing the\n\n  clustering feature entirely.","modified":"2026-07-30T08:13:25.879459Z","published":"2026-07-28T13:44:29.702Z","database_specific":{"cna_assigner":"apache","cwe_ids":["CWE-502"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/66xxx/CVE-2026-66713.json"},"references":[{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2026/07/28/2"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/66xxx/CVE-2026-66713.json"},{"type":"ADVISORY","url":"https://lists.apache.org/thread/fgggbv3sjjqw7p6q0j88gspt9b2rb728"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66713"},{"type":"FIX","url":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/apache/axis-axis2-java-core","events":[{"introduced":"0"},{"fixed":"071e45718581ed2fb282c767f800d1f50b521a66"},{"fixed":"e6f53b230bddcb40577c84ff290ba51e7265fa15"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"2.0.0"}],"source":["DESCRIPTION","REFERENCES"]}}],"versions":["v2.0.0","v1.8.2","v1.8.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-66713.json","vanir_signatures_modified":"2026-07-30T08:13:25Z","vanir_signatures":[{"target":{"file":"modules/integration/test/org/apache/axis2/deployment/TargetResolverServiceTest.java","function":"testTargetRsolver"},"deprecated":false,"digest":{"function_hash":"40108133200905740646802983408310489162","length":378},"id":"CVE-2026-66713-0103c54d","signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15"},{"source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/integration/test/org/apache/axis2/deployment/TargetResolverServiceTest.java","function":"setUp"},"deprecated":false,"digest":{"function_hash":"322265601021190499454026493896022418360","length":550},"id":"CVE-2026-66713-05590eda","signature_type":"Function","signature_version":"v1"},{"target":{"file":"modules/kernel/src/org/apache/axis2/engine/AxisServer.java"},"deprecated":false,"digest":{"line_hashes":["11422297210207456992469384043870480686","9367726687989979115288956012310479185","186367545024237179595713141323095606358","45321156621861580073847041941071378910","289684389469531423204181059044501452136","65823614415083403170393614509244144662","131001446117200590096703403216245040619","110035680666451179558066840532364720636","243526326891420776830373941734655785428","304302516659587865806810674211770982085","180898455005489343661031575801573068046","288065050975563116844557978049304276463","242457793167080044546770234813292557116","266271094001769377064407579529240164703","309047479024244259387561070637904286506","262180746756846093712499356482841987037"],"threshold":0.9},"id":"CVE-2026-66713-0aa36b5e","signature_type":"Line","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15"},{"deprecated":false,"digest":{"length":577,"function_hash":"277665547961253022800693015426436882136"},"id":"CVE-2026-66713-0f96ed4c","signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/integration/test/org/apache/axis2/deployment/TestTargetResolver.java","function":"resolveTarget"}},{"target":{"file":"modules/kernel/src/org/apache/axis2/deployment/AxisConfigBuilder.java"},"deprecated":false,"digest":{"line_hashes":["145096576671607241430216670186075350722","220638330459310401238741148783242278875","89337378463818389245838764827701646372","2358722839578597375117666955689683704","328525561076951541872463935496587233501","34569368044868136016522646165613694289","13931972173218566121161498931566627337","162345159119357418242306528573900030444","155351060517764609237393364439295990951","337960382518257823507961126189016464131","305007591633121918946634843246371221343","284173858790971815960435464301485994678","115375484716867456301186734131679446227","263349842180416881986391074281017115751","10960284887870089853076045760585177368","42367736605046582888452531254049947636","325715617716084946304925400271901085995","253525365847708915073730162408164822689","73015388834151513584510589645953099080","323709095796134588188408459241880119522","302826333867866084427045303062603558817","228563300290062324383704232816656752184","107624050509857403218033245408540652601","99084883610371450799524508713485308721","212049300919213267704521146435412631087","211509587996048276444593850918000389693","283916140015705156341755912815594676050","313886261955066317504075474670383304914","174537653910261570275611361326458824097","310063416299485495554814050617282511957","318197147449205581860210949233337345797","107649687493047824561767393895488014355","134048336459996057901663218977269438729","146455284927644992911286145392505148515","215959003694075303584224988894783378596","272271819554752424702615140084867756251","188967327668535745074375119735474664806","302727886391121896347883247670950148245","150209529994841483229567306036866391783","108587633537507210242609878158511307392","108587633537507210242609878158511307392","306367850593393730575053216759920303429","280922067888477817031209608547838127535","320400816465611851010042743847243438161"],"threshold":0.9},"id":"CVE-2026-66713-12ce31ba","signature_type":"Line","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15"},{"deprecated":false,"digest":{"line_hashes":["59001637201266936219655900007053979377","190162897114338768624799606625252818540","65332401954712768104273902501682745900","88553400985745898911915973617361936074","242381818055764320251062635876036347480","315684403168939799554424496538531460602","243038463867143610869296098160685362715","69109073896480491342156389647738125366","102557511486506067035969640190565682806","233388507933607940747624222491330485250","184108184280450623637400539889645169365","287915919225016324590960035024079314014"],"threshold":0.9},"id":"CVE-2026-66713-143f50cb","signature_type":"Line","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/client/OperationClient.java"}},{"deprecated":false,"digest":{"function_hash":"166610351405691951693838722815952845409","length":1327},"id":"CVE-2026-66713-1441cf32","signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/context/ConfigurationContextFactory.java","function":"createConfigurationContext"}},{"target":{"file":"modules/kernel/src/org/apache/axis2/deployment/DeploymentConstants.java"},"deprecated":false,"digest":{"line_hashes":["49533052979598938151394419139738245467","119959699138490268769260848302381098709","293453800523857904556838769153363865125","106706213525366717804430701195387053845","252300247787883547487847379519735753503","196134405808185248779509389341805560066","65978590824377542792527129113280825847","252947272810415012132018440019676684942","226011275634397421903081907182656496247","302542686439367844112704903362853550441","163340748719717394340133867905532053880"],"threshold":0.9},"id":"CVE-2026-66713-156fe654","signature_type":"Line","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15"},{"signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/context/AbstractContext.java","function":"flush"},"deprecated":false,"digest":{"length":72,"function_hash":"208336426224405392419893144147065446688"},"id":"CVE-2026-66713-15bfec55","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/context/PropertyDifference.java","function":"getKey"},"deprecated":false,"digest":{"function_hash":"220622759767980814286475182218422914261","length":35},"id":"CVE-2026-66713-2257c514","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"1564648868464846619295698183590636684","length":172},"id":"CVE-2026-66713-2f86be53","signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/engine/AxisConfiguration.java","function":"resolveTarget"}},{"digest":{"function_hash":"140581620034781197398336076837173282843","length":330},"id":"CVE-2026-66713-362261da","signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/engine/AxisConfiguration.java","function":"getTargetResolverChain"},"deprecated":false},{"target":{"file":"modules/kernel/src/org/apache/axis2/context/AbstractContext.java","function":"addPropertyDifference"},"deprecated":false,"digest":{"function_hash":"163854987591664665548254724920570989717","length":286},"id":"CVE-2026-66713-386e05af","signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15"},{"source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/receivers/AbstractMessageReceiver.java"},"deprecated":false,"digest":{"line_hashes":["9031169580571340183817007274798133614","230011033737021718634498760508459245430","258161492658483334762292448670939632871","265716118245819362628749765251354324520","27481346983573292891791926524060472554","54284936452563702191809774041233562695","120561550894997382178394475501558774805","23646461150763982440289889811303633700","75172451924401715933548886315263023701","20079451861352904491955139438478691117","75491183991048955873733622493758434869"],"threshold":0.9},"id":"CVE-2026-66713-3d53ceb8","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/receivers/AbstractMessageReceiver.java","function":"replicateState"},"deprecated":false,"digest":{"function_hash":"276861659081703172234890710158320874817","length":91},"id":"CVE-2026-66713-4b781bbc","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["299145192658439060334105379466974737698","213867891432712161707829526874938443533","149835579565790599977894632548004340816","274678706818932144037780442859371054500","258080921369677371184662575995289427441","104058394034442808127309126729933279292","143278190898021361927565283914906031420","189181136302604157597651026243444017071","224667349136123635916526083159559500538","69650465772986941115586279762885607268","262016428293471780289470257353940594486","72169349269032421612374132880627859663","101027218597937714743047260188154038179","16811177154454466339050691298526386911","285993198800794975175622381324379966924","292923759670759285222749887223325359899","132649971083078024709330349312954149154","195778323880607185290802685043064564428"],"threshold":0.9},"id":"CVE-2026-66713-53e92511","signature_type":"Line","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/context/ConfigurationContextFactory.java"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/receivers/AbstractInOutMessageReceiver.java"},"deprecated":false,"digest":{"line_hashes":["86960884303651326380992322512124133672","199295100044918101805529585510237963862","147561256329422781432621778904796766296","202183293384578116773442928112137272021"],"threshold":0.9},"id":"CVE-2026-66713-5475e3a7"},{"deprecated":false,"digest":{"line_hashes":["39061318426962016979361359978102325364","88239186203681466177151051120705836163"],"threshold":0.9},"id":"CVE-2026-66713-54c8d7de","signature_type":"Line","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/util/TargetResolver.java"}},{"deprecated":false,"digest":{"length":228,"function_hash":"331351692024697062935746203774028262857"},"id":"CVE-2026-66713-56a70b22","signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/receivers/RawXMLINOutMessageReceiver.java","function":"invokeBusinessLogic"}},{"signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/context/PropertyDifference.java","function":"setRemoved"},"deprecated":false,"digest":{"length":54,"function_hash":"183647619553638278444108709886108529996"},"id":"CVE-2026-66713-5a8cefaf","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/integration/test/org/apache/axis2/deployment/TargetResolverServiceTest.java","function":"receive"},"deprecated":false,"digest":{"length":176,"function_hash":"283247063410772718772562718954367125379"},"id":"CVE-2026-66713-5dad7c0d"},{"id":"CVE-2026-66713-63016226","signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/client/OperationClient.java","function":"prepareMessageContext"},"deprecated":false,"digest":{"function_hash":"126087910624616964754927920861712799894","length":909}},{"digest":{"function_hash":"297729374438667699149318173713594606576","length":1042},"id":"CVE-2026-66713-7101459c","signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/engine/AxisConfiguration.java","function":"AxisConfiguration"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/integration/test/org/apache/axis2/deployment/TargetResolverServiceTest.java"},"deprecated":false,"digest":{"line_hashes":["69358908330480630227740542029307533663","48878624991020412026907085808804493130","128956330500453493507570436217671479492","319480465865484459564540891114421857567","313083995977638454467848099807462011347","75291134338338513145460205324386494891","322314388254798917068542374872331500692","297509181381012914036136698846433417012","236694990001800968128465375415048928102","127625973445525272148537653310861720041","234055749135119956662428570633234141856","54106921797306579892345958351605287049","35553473231679787862752934683606996320","264481382080974339861973377583404758370","71337307805006161497548473015926828298","299170358997095201642606364586982344280","206489653219794038609501450912885731900","154820062648777834625821996219636632457","256408211811046836752665256344102733208","63430751934388075720009931161970354565","266554250042654754287020053507961920994","166166923284772501191709245545261768527","101043123817622665740748800225535741605","301812913570752317024037559914485261101","174690623565469262690205569578876985621","54641357893066737722935605000074384091","218519561973333447647217966509007520824","78701624951171792549259551022853637745","58080205920331904075504581185717041295","125764544671017142486990999499868663902","97495821227724829087416209689407663786","222757252000876865192551128404969701195"],"threshold":0.9},"id":"CVE-2026-66713-73d87717","signature_type":"Line"},{"target":{"file":"modules/kernel/src/org/apache/axis2/util/MessageContextBuilder.java","function":"createOutMessageContext"},"deprecated":false,"digest":{"function_hash":"202172146366973484703680739339067410458","length":2193},"id":"CVE-2026-66713-76a12e81","signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15"},{"deprecated":false,"digest":{"function_hash":"277865597007213170884391648011689310643","length":47},"id":"CVE-2026-66713-81ea39e9","signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/engine/AxisConfiguration.java","function":"getClusteringAgent"}},{"signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/context/AbstractContext.java","function":"clearPropertyDifferences"},"deprecated":false,"digest":{"function_hash":"135479606370995855854930469187920038056","length":98},"id":"CVE-2026-66713-a077fa79","signature_type":"Function"},{"source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/context/ConfigurationContextFactory.java","function":"createEmptyConfigurationContext"},"deprecated":false,"digest":{"function_hash":"80329975974630663994011527832034638086","length":196},"id":"CVE-2026-66713-a1131ad3","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"206622329843590569548627157674113735615","length":405},"id":"CVE-2026-66713-a509147c","signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/context/AbstractContext.java","function":"setProperty"},"deprecated":false},{"digest":{"line_hashes":["16824817604778014695102681953642086051","8084955532857055955391251225837198765","291171295281042125786867943732770598797","106388680481447670098534459761524184272","204875374209625162505797044671931429139","286267754668646118982550790116537139871","145907195483040258417420740672752599294","138371714899049852212880216128409803201","175691989523716102167442918124838302867","181086086674099824560819202076099487729","64960425233602354737885702051028242169","163753670603866352519064490701857917973","224581768041546746540296670444978484685","40157968576527757147920407583078861275","268427300731358868253314819760921364654","311261375687498655002140272264160116317"],"threshold":0.9},"id":"CVE-2026-66713-a50f8c24","signature_type":"Line","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/util/MessageContextBuilder.java"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/context/AbstractContext.java","function":"removeProperty"},"deprecated":false,"digest":{"function_hash":"336924963918092017529646281148289430547","length":449},"id":"CVE-2026-66713-a87d6582"},{"source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/integration/test/org/apache/axis2/deployment/TestTargetResolver.java"},"deprecated":false,"digest":{"line_hashes":["75562150793921032275988168216154080241","134420365215368117589950177024839456390","214427530819830834012401357692520757799","97020502092453004265110756015743416311","279962482188730314304495163142253200326","12330595553744596203079417658085066255","210513152383605827446492469384861691586","40704088575677203089684891837464810688","79576250253363627274873291717155650703","172681468740337351577153423667394617384","91876862060762702003081753679010176473","62478472102732911750963761130190443094","44638818969135008714453807148994496194","175918157400793518376255906331851825856"],"threshold":0.9},"id":"CVE-2026-66713-aa8cf9e5","signature_type":"Line","signature_version":"v1"},{"id":"CVE-2026-66713-ad9b5e31","signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/adb/src/org/apache/axis2/rpc/receivers/RPCInOnlyMessageReceiver.java","function":"invokeBusinessLogic"},"deprecated":false,"digest":{"function_hash":"300742505082997118827783501943614572424","length":1377}},{"digest":{"function_hash":"298421003584275155608264681913901142409","length":571},"id":"CVE-2026-66713-b0680720","signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/engine/AxisConfiguration.java","function":"cleanup"},"deprecated":false},{"digest":{"line_hashes":["1067481548202486021911756246357778388","306694479797447207341747121575036595010","224551257337779186562760905435767456408","118530666246325708320596817911966570705","25870238965268241791590752475394568815","153155527454699154885174031128181213890","241209840653930926013434316220633392312","331387368020455302807872026387948216353","228834604546189025614719181457002241470","80834397490875139960342788672631392349","29257078109018196729810908430535239417","310412321884312322372997218702699112344","58141166710934685484218458546400243124","74182990782263048059614340138488651211","66885144386338129831420332086562789226","257314546229499686818072088228884121060","127046812127241303348979014562899099962","43165113076911853865790577510998330342","68101354925981800470986073812916496722","306847821409360860344641946390824340709","108234465089464413249745637124644291478","136835154035115501515446440089267197783","168855242019269564536742466993966918901","336439208909695274060047495143962394472","202126011609457205986127743928986299813","113112060755853008552417514284514285321","127046812127241303348979014562899099962","43165113076911853865790577510998330342","68101354925981800470986073812916496722","306847821409360860344641946390824340709","191731338033001948944124083274629231699","116581972298834290473179678835922903050","52319056921300051814114962345942551869","246562754877506029707018757964224679336","229179030796438894282409096156622303347","95778599390605494392175028979058755103","6571260547089161404671935721757218833","287107844707630316872759169392411521120","26142599954727245398907449682722715410","127046812127241303348979014562899099962","43165113076911853865790577510998330342","129741753431013643969399980480379690267","150152493980468521158995372816153783518","1695184059920760823010783751593659928","99304265273071014870198415166936599405","250047408805876238415946049487233709206","48395522404236089287464392986782745012","109600870432825052499956738051179227308","266252747020000388461431523589374494165","223861114549009123560256450053029818299","283449297664213838963756569725600674488","219149012746433953443501049881629356002","135894006289664723967297237290792904254","270658208089351279017431023865609877696","243989889313825452097362445144735164546","146512527294581235075232833338694747738","213102175275741330543717221085906362401","98086689344170469428810422964930014444","186865245616644173257976394914259005842","295200633851234298426692847513184269954","199445994849636701339651677398170260392","143191802026905807691471745403173085023","169207803503062192843099429888628010972","41918820249568790380118544302568145242","113121582695728805132313909603216832910","272389341790991507897858193048809314715","105135349804760838859480469610730392589","170407486575688803813490917280253981469","109876903022742018687568246328424110455","3820623381778116498235515744938808873","265913619936054973191209115837325624689","287107844707630316872759169392411521120","26142599954727245398907449682722715410","127046812127241303348979014562899099962","43165113076911853865790577510998330342","185818986250435593992930856147204016292","43589694286520354034982879980475141289","1055261799007728317589273605760089665","18401953008774125913533098538367552148","119772650780289720357434582677929291316","149650444099552970899444206513590797655","208051425277718319609235768244547921442","94524190273439489036567819711426502771","88346072842906415062630516879685771250","337582779806093101373955172046521905450","69914132491828531563479029977938603023","182244562275003374673976815993702090374","135623997816239430648103675060429702511","339189933294918181448189910723020403158","11954923099316766827694993312331172226","30052083177766707705933473943734134965","286664879131670009707454777467942558870","15996504889726005749583241820740709961","53508754959954960384423276683059540535","246055468722883699523094880956676441520","56688735348990889973104588143393467329","286818270013673336713015597244985943526","129534610271858478445258197988605254179","80861278193586677363209044359726208408","187476163416348547958967746276641294853"],"threshold":0.9},"id":"CVE-2026-66713-b0c3adff","signature_type":"Line","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/context/AbstractContext.java"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/receivers/RawXMLINOutMessageReceiver.java"},"deprecated":false,"digest":{"line_hashes":["86960884303651326380992322512124133672","199295100044918101805529585510237963862","147561256329422781432621778904796766296","202183293384578116773442928112137272021"],"threshold":0.9},"id":"CVE-2026-66713-b5f03c7a"},{"signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/engine/AxisConfiguration.java","function":"addTargetResolver"},"deprecated":false,"digest":{"function_hash":"103163428972005471321963779991893745766","length":73},"id":"CVE-2026-66713-bf856f73","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/clustering/test/org/apache/axis2/clustering/ContextReplicationTest.java"},"deprecated":false,"digest":{"line_hashes":["78824775050917352032494425514691792302","132297707022620884019975866483392683409","87597549209976188146639000265478071794","102734838713048723011252523129505841488","260120727588402329416243988443058354645","306973335964880497856270432094999783906","330750690254048851613654183379792155754","185030943627967694025153003585232267063","100535520083321038316925898681387595318","338114258287027556314820364431398230172","336831733633708128919523396162572660853","128470252233049271305049856283099130112","1261473432607059788288750496465843677","252453935671772221485016054021579021089","201333197404203275366732236436566532195","187733796830956559020215386419354556121","201584960012999439751229886524897509345","146660112602054297689032550669986551996","263334635993921335892911636947669653610","318445340587936126363433613458939044493","215440165136325468900157706378037563277","235000269647454905781272639284061975250","121811877777508605308036615593450027778","229081195436102305267983765985526638030","3966697559341476771895042720138834833","27581810843880815603649686505456685418","125423509816153237457463187243147188572","264611324089557018985073192901822677579","137452071830433048276984468389719223638","141157581831659678785774531074565871552","296432219991284237976110204732353575877","265080062519785185872485294460219996290","245797901151264851268822997121632344018","102661588807621004289631593761218657815","279802426665692233003870250186379336057","268353072434055344341826621170435991600","27602022008075592007176712406458597076","330771990204388724085256566680520730598","237368711698075041819051899129382309065","129839494122829507307402304384664260204","49862028668001865494144076267172500597","35950652683408780722569892761645102651","198312123822210110801466687701615463448","14846114822862250693391733415302843317","49143093274154645303791957513877614577","309990551981647331594862405358494588589","156800779502446119968971044789385843344","45547238123336170654150742088715610757","149518364209039410052974019380643164916","265699478951107601456328583710379504144","112411936163694980566411303189048302535","82917473158886370383805329820097469477","253224243948722599386579683983099669149","196402054001558814333445134734693814595","93247457097726120101089232618586316876","247308965724904316590583792087356200326","137730649316878808382220621942241128260","211929183140473238619357060970262900117","31951657733090171840334537287548101505","240339897890274961417890812908868176004","188674864500719400143828008507874957296","201719640594566040826878509049285104834","275464877741933029395373253940023709936","92417837286194239399988786665017608058","210060785671795289505922041765756790704","230305990940349306267445028278241029621","271285636489496992107746638010907537355","170840046639184102703292940083399548580","133821541232246021930104882380102578022","205224697276563438772095141810422507844","92572407322145145352222353116138262634","19385219126404368512223317332896022738","267261398998306269546895210631755746035","41456407451810252496965648237215887622","322869723066108355296878070000284693400","301628082329810672738748514425575670499","258724104942346848150596203229216992147","244451272305206838065103366957772516566","176367272696065422738476323827496245220","106105266881906323746852548769912767149","7351646793510729350412148682639598653","172765666928031516410185754321492671815","51599129630966247346385813476962267025","77678570967911117857512937424192685747","207604478197271662984624877805600506611","59442936689388675441143270869028154462","214651332671114636709878232313000082995","283557006681223502731948134107917783075","64139855927285878445045019806687376118","66538597801972704319289006317597628319","233400529100249572629707695358893023344","277215402274260508779721268898692273480","139053461716395900326549944404902420971","40944781721833173643601895867672085168","44021704709012318474825283941212600669","72913772983549685377005612392083615842","326251201532423326255300430290336142636","319559846221202547290179682021258052156","76713178757036939046498822633002360263","79357873265599677238457502694122177515","304372666144528221268750421728625995000","295242797878449937803523546491092617503","304950147905408178082713899644947975189","289834835299156809621230748259610749258","188355829694250972264516571019100194904","149278518780489694709225671881549093893","207812375529223811543322284990431045963","331253805918132871517295271950990969348","303918464470671416368509885949721122083","281727756196522128655139944452893116721","94108025020487369484512832318376815132","87974550010376836881520779293954209530","18172318270766452088440437999738544203","94807881331883040125810905412887028203","54168175312786687820333340296083848114","320272577457189454465219746877456349178","106202715952352424317679737460641863490","226043278233741053181484634660941900869","319559846221202547290179682021258052156","76713178757036939046498822633002360263","79357873265599677238457502694122177515","123112767349614498956676230286129393765","266837821697474246273841564703375233013","314879407414873569397012260836315731620","139876345769145629052490718072444498494","63317084546476648295619163903838254176","232986895149308651364922597353061026651","87367283633815905006659380050930819764","268644226333028352523525785249767683673","261488278571783969611644866106152994640","260874488222467486701310624214834650804","257223745841953549469913693864291569209","63945659716970026041774017515061415681","8216955614656566494446775483395211548","211906303857676913637730216268713979078","151790270372219483069009027195098509647","124962444198881112734970136314284930410","336314742690790994727890528768505989000","123700954233783645810987071305304511417","302666012316403373912461733338815458234","112227311754793838093871390691650393353","323504438400080621767835756659471383888","137344314909979316802039301562928186778","315391528747404888894276200891060325006","185577576472101019769926169331442717722","66544621427500290402137716617175681791","321856418674405446275095799865410593444","200383585715728975455102526484237066348","243850071858070032851271443901874450224","179959635171748736292751368554445705156","309015617629681700534853849095624742846","84426496940370983225536330912241430482","233711389994463867100728019137045289749","62695405991118166755464201514316589906","23057481850611490811909903926668850736","232328045795835996111864375348780136138","271512225532655695898535255587643636731","10955527002772656451056853053096303102","16980172876905503112703954882878329634","307094218236494580721085479032902152476","284799284279709023140078278030760141391","301718015790278315383608872389179914705","271836178959818976834730244264357791500","327886346421465398207226637346048823997","298030335740423057244829352418523556225","99127845666115392070847446697121451751","3515120807637114157293625327771505419","2182964466916518420085844859808332402","165160460273820836814929274630024429383","198196807633048172309429081290141116373","228603888943496411082070444652353758148","156125873929785024671552273385890295064","151084327370197803955319923597031813297","313436808812333739257705811899030322763","247301782144729017051246905490071874353","179753750683335012842651988446086307968","6454868831720833756144970800694505159","67434896884464903205650110370298952711","160902550848426707663248624278906578758","321646129879289359753470422033173848730","154358610437451593046109606259368623860","53458902434654106856474617138856095644","15456251489258109290024097778945548571","81963555774081208266990252410258152765","226522132899605281221243371454038344257","237366138368031119955192851574767001598","244532114184765392338360511511874343105","146043303009374935839107085353654131307","252837888631815411879861385741605703058","109225929578268829426112087184402972215","321041478401586961899059066402133128181","52790920230881343212894509080253188071","291727598736581792527889679716449874226","36140852967572590819533943275578173278","149033189465332760185089572691974581361","310328157197849506569138091962360981032","50860857436399916945247694667737609687","100751441472825386358122983716306897657","82600884395198717788636107807870815189","19077786250800524965078900245670907709","134225669664573573421717849842767492332","290224586456319789251683435707859434881","311339112344238036835502891740004281982","44491452981945840434339085303772635044","86623619898762402053807219435341773735","188596705165219092538453975109128504954","189842020051153977187138223120058491074","172926823997768983874517029107257795542","311130603564967290641639301569429654964","11056756027448088957817216071823106442","158568629422726157354697663099280870461","95041471567007287528180151803923346842","217853263281732531273911435312094952440","168408269161754473866082174239058113622","39187620573874108412974405586877320311","274634795705237104154195659030996996975","46749712108539481844089814289861985849","332074038544667626285052866241053901348","58608770739971043270700364323546430708","60629639533116814038297573493141560125","185436354538020183659270598452684559607","51516103141895169433176105243201485711","134225669664573573421717849842767492332","290224586456319789251683435707859434881","97486673271845294578627338765499227165","230767334517211610796820735235612584145","15038724279268203708952502962214850815","208925135041981046466856231422431601899","142202227818936740313237670540920805905","101226825013941282148596294701982830039","329796014676051226351068176054929214198","200109471263314970656648891104471969381","208478144698059781246343289465484080216","74908109852317220226694429010111905191","93390605094441029935977109511240865802","265999497622450648617017081802510050276","191059540193908323759729780571244907203","299052882545994405348797075593530459028","119449575951373602013720288709888586373","3051993859857148655711194476603953029","48743414234983486166542217462083967104","219962292507176298697240662086433256920","153547852686244128059842780512867863837","28122222758834442918542554344557918938","91580248759244116222214001255233728378","221530319016523880160996978234791466829","316327675580918692655923658431299436045","119426181833426585014110741477314285992","260221808289191591116025701355259435189","194404471166356799599578947576345967405","17451922003125723113563646309180042898","332829946187400318601150598225386060710","202315569241018081242330145477312472108","59696364357208150257418666023561261284","93390605094441029935977109511240865802","265999497622450648617017081802510050276","191059540193908323759729780571244907203","299052882545994405348797075593530459028","119449575951373602013720288709888586373","3051993859857148655711194476603953029","48743414234983486166542217462083967104","219962292507176298697240662086433256920","153547852686244128059842780512867863837","28122222758834442918542554344557918938","91580248759244116222214001255233728378","221530319016523880160996978234791466829","316327675580918692655923658431299436045","119426181833426585014110741477314285992","260221808289191591116025701355259435189","11412831746399007088048474013750131202","182793283725631565937969622565331846398","254468381388422116905828363954482933395","295350109950356683840241584865712301713","166799662615504652336435886071871596538","103982685414291483761387208010436426831","156441382917072288102505623337226276669","331988785056412417533374186836951601087","196205190909892854747310331986959370210","145055374734712926244947912301555743903","6305066821721934028078109988240439971","60756641401022829005112752453147068054","151999235672031071885556511577119645526","124750754619466648943705487458498289257","218734062758470072232110652625669512872","285578104173713637929720640168938718295","139051769047989355992890441881874876387","141759140345578476082996983567030927234","47480025380526538164994301667986231331","222381897143206055101926398372645044091","166092335052481999024313046504539465294","148609298254770923478857920073034844320","316327675580918692655923658431299436045","119426181833426585014110741477314285992","260221808289191591116025701355259435189","194404471166356799599578947576345967405","131704086276420172613658211190005568003","107379016036490723861015637290245884731","222249456662426889525927515204864084696","20762483525048298802647136388006076775","145055374734712926244947912301555743903","6305066821721934028078109988240439971","60756641401022829005112752453147068054","151999235672031071885556511577119645526","124750754619466648943705487458498289257","218734062758470072232110652625669512872","285578104173713637929720640168938718295","139051769047989355992890441881874876387","141759140345578476082996983567030927234","47480025380526538164994301667986231331","222381897143206055101926398372645044091","166092335052481999024313046504539465294","148609298254770923478857920073034844320","316327675580918692655923658431299436045","119426181833426585014110741477314285992","260221808289191591116025701355259435189","11412831746399007088048474013750131202","182793283725631565937969622565331846398","254468381388422116905828363954482933395","295350109950356683840241584865712301713","166799662615504652336435886071871596538","8431498070034190239906584580930355081","4806362044592166662487985246179363154","327188828731658853570686895848259947480","229336548178753413611148115741640146760","93390605094441029935977109511240865802","265999497622450648617017081802510050276","191059540193908323759729780571244907203","170220475634831899564888442194259780210","320784032739991204418340256420522152467","120470975171847533452474147044707463344","125099565832347297439708083602645650240","279093208989903396486800519609516463525","1896856457815070065886962965493825292","309298470515912726863812241368438902283","231704186072204540567105421882354987036","145562660176967244372462492859340119321","84081418838730085413872964150590714349","123060575135308787961581820015880488046","198456683505968976431107673055595248928","39940216858200629868098270934865169902","139053701975898184461765207809765276437","49421351974493225415834017418794651346","49126161429843050165134959085429687593","187047883987589288535149185478024950150","146283007056547659281651654773645469124","27030607728727359867742222009018285209","154975788631403300276775876397959725297","159298521202135042142019077950515018361","93390605094441029935977109511240865802","265999497622450648617017081802510050276","191059540193908323759729780571244907203","170220475634831899564888442194259780210","189056382561385235143558925860300911022","223449287845941124949394541497652128936","100373751041294565174594907972346114882","279460720843076778453697746946552737439","1896856457815070065886962965493825292","309298470515912726863812241368438902283","231704186072204540567105421882354987036","133480186785493531803532228943953266225","59921806245711419741648544014058795881","212918694499108414346492794895142253168","214565329341654784045059360641965184347","39940216858200629868098270934865169902","139053701975898184461765207809765276437","49421351974493225415834017418794651346","49126161429843050165134959085429687593","187047883987589288535149185478024950150","336426735504545841948686219144488316729","301613740277465799305729239933248122474","42781903607130401015961513279890536964","98222395341789871582332022518651595633","93390605094441029935977109511240865802","265999497622450648617017081802510050276","191059540193908323759729780571244907203","170220475634831899564888442194259780210","320784032739991204418340256420522152467","120470975171847533452474147044707463344","125099565832347297439708083602645650240","279093208989903396486800519609516463525","1896856457815070065886962965493825292","309298470515912726863812241368438902283","231704186072204540567105421882354987036","145562660176967244372462492859340119321","84081418838730085413872964150590714349","123060575135308787961581820015880488046","198456683505968976431107673055595248928","39940216858200629868098270934865169902","139053701975898184461765207809765276437","49421351974493225415834017418794651346","49126161429843050165134959085429687593","321829189429335803583130844124326525970","174214162601479433568360464648586447782","180998175224938637778460707452353188488","73815733983763249073313670869841318081","238195773198798470402520696613836264047","208486167308003474379352525409704673467","175584682153907989913823460969970272552","29122060064251675092994219653597550017","338394447090998062687872825818189418607","93390605094441029935977109511240865802","265999497622450648617017081802510050276","191059540193908323759729780571244907203","170220475634831899564888442194259780210","189056382561385235143558925860300911022","223449287845941124949394541497652128936","100373751041294565174594907972346114882","279460720843076778453697746946552737439","1896856457815070065886962965493825292","309298470515912726863812241368438902283","231704186072204540567105421882354987036","133480186785493531803532228943953266225","59921806245711419741648544014058795881","212918694499108414346492794895142253168","214565329341654784045059360641965184347","39940216858200629868098270934865169902","139053701975898184461765207809765276437","49421351974493225415834017418794651346","49126161429843050165134959085429687593","321829189429335803583130844124326525970","174214162601479433568360464648586447782","180998175224938637778460707452353188488","73815733983763249073313670869841318081","238195773198798470402520696613836264047","27192526935005360736641672317297035672","139428769944508582796977490487930157163","333080170866774684969010787415624816771","250332362161258000068073925147682047157","123347806003615183840856518691935925087","61551457684839778635131648754091955180","852921096416511752278716616966869861","145990581537709200891419805981590421345","16011203371540619997656214662355253823","263412238977223524410774366047123472924","272240005598048923201309742260204247937","222103264394390472689307856843309672260","120528298771045526598070501004538264874","306791123761045431532312851650153235565","259562343540607743363536337730786506913","57390494990659707739384528954016080569","179253977669605131625418667522976980949","327980591264612645993681134812435182105","123347806003615183840856518691935925087","61551457684839778635131648754091955180","852921096416511752278716616966869861","145990581537709200891419805981590421345","8289567746424803988528473916597466742","52696270085489020008606607485716687025","219832370788597468848590332020362643437","324201530950914980323595211532158297908","120528298771045526598070501004538264874","306791123761045431532312851650153235565","281962460340860345459199570110856614200","39749453032628913896836917400067380369","65852790180953490624289182977499403937","158558779291449626616115696307633445935","123347806003615183840856518691935925087","61551457684839778635131648754091955180","852921096416511752278716616966869861","145990581537709200891419805981590421345","8289567746424803988528473916597466742","180694331691182210745613317400657889095","123088299970835109483748870612407892625","210072725281235719981227558162558039186","9848638859574148107874333444252303467","306063461427834201366659664620106549800","306791123761045431532312851650153235565","114783060347951898037021765233619270075","130267324264882090410554825084408535362","139043519488057744736447136517500226841","300083130565551487008718201262175921014","283540010493746252757287137744817169135","182345749943628972413351465310982449682","35224485820313212462378173856250846626","39764581654169669616952865119297304339","321425542421177156901028962176782319232","330684799261387606288538174276723265828","295327250395636115329237896283099254257","316774246260339793565557600263082303591","151121796153231950525978774110788002203","43135427554132785984538884425439486747","298677098690405295770337330560426014469","107392225401303337117464883691352035213","126898572659701249916832410390401650817","274210672449590169342254579293334124395","335834229075702514510502401988805103630","190873714898483585429239505114231159539","176433334519524452513180502946415604235","12514722321269423617102775622938910138","247758044454373644798268041136459963276","124898523040548556658267883364596702563","118438372588127154177173831119510029009","331289753152940734965582648030391624794","325719038013029906964882104709199071285","264216622420974474283096917672546014989","227644883409131691245733560685049085537","132014327203865380461816025914006435447","264408466445932767111187410319270375499","259834782638035532927203947582024517858","252653368079040753059008904656447657781","149201255462300044327713085606015581848","100094302567000088139605491322774790125","292046920314550371498128144350308088178","292427984666003939609766249611704252197","266805497944259294559703989765220430362","248933160022941996638397971125101340400","126420398972240476135555521659916861325","251224357284398581974216302854246670516","161915236254798861553252568305521961925"],"threshold":0.9},"id":"CVE-2026-66713-c80d6d79"},{"target":{"file":"modules/kernel/src/org/apache/axis2/context/AbstractContext.java","function":"needPropertyDifferences"},"deprecated":false,"digest":{"function_hash":"116626278412425675488051280127102110650","length":217},"id":"CVE-2026-66713-ca56369d","signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15"},{"signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/receivers/AbstractInOutMessageReceiver.java","function":"invokeBusinessLogic"},"deprecated":false,"digest":{"function_hash":"331351692024697062935746203774028262857","length":228},"id":"CVE-2026-66713-cca87f9c","signature_type":"Function"},{"digest":{"function_hash":"27962370894066975315864722374088843287","length":596},"id":"CVE-2026-66713-ccaeaac4","signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"function":"processTargetResolvers","file":"modules/kernel/src/org/apache/axis2/deployment/AxisConfigBuilder.java"},"deprecated":false},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["1888601134941411290135505839195863963","193980650197097061530070825315401989486","138581602922293315040116334299627159988","284669778652198122617079396771614385373","105622619484752700182500073069314827222","226199353439049222920678420635326023571","252356009747575340845494265386088622558","43025224529542875318331558414656349169","270295570077540791015119257794778400856","65449795133035214496731546233529543426","239700400147403641103965720331950305616","251759797774248798701759819635569969225","141575383099869226117896783537116040936","206079332681300046064948390777824592159","68277514885814195238664518281425251114","195896633518090524436070014624507968441","110962257607129121368524740913482014712","36136504410692231327533487133478186076","10449319151654260008087430674450837193","38224395046169467901288609443190618243","200507535792902777396122518810225418414","205649327404820453289451343387227900782","264645822760523275194361773177445313365","46942968118226680270302289640437699992","220364945845271830350545889958203739589","308403173290282659571292490558741917552","160942408146899089310189394784050349072","233067538221599316439099392221700971193","171163250244607218745428104891991739230","325718479878787284300074220385498344386","337918643664111008797793893258541207265","333108183657125986680631207618559035847"]},"id":"CVE-2026-66713-ce0fb0a7","signature_type":"Line","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/context/ConfigurationContext.java"}},{"deprecated":false,"digest":{"function_hash":"198300828640622498051390611844690168202","length":348},"id":"CVE-2026-66713-cebbe719","signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/context/ConfigurationContext.java","function":"initCluster"}},{"signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/context/ConfigurationContext.java","function":"shouldClusterBeInitiated"},"deprecated":false,"digest":{"function_hash":"57458822154629437427105852475219871300","length":195},"id":"CVE-2026-66713-cef4f181","signature_type":"Function"},{"id":"CVE-2026-66713-d19fcafd","signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/engine/AxisServer.java","function":"start"},"deprecated":false,"digest":{"function_hash":"47542149394185295286686492419475308529","length":502}},{"id":"CVE-2026-66713-d6310764","signature_type":"Line","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/engine/AxisConfiguration.java"},"deprecated":false,"digest":{"line_hashes":["182984053615178929631215305368734346626","327839278587876282974374614248339741137","23788043869307604578317008285423862637","73570695142518507354002340778113940930","153104082851704945237852962782115084324","291812424647303162776993410534852953363","292156312569356984102807417853735489897","252895719901113595258776531551412571663","57822444141947648900599419860220438097","227370336198029398093353872388797316448","250377179928852216408692630626050214148","65043657002636664723453135631322477916","210263302443977337538925569043721811573","178250634342178410322313229417787512583","59884644156589891169638226610053021187","244246663097316966128612709205922058049","215014499695096419382199563636524277595","222836208518210867997846106590121630347","293653392407665636424989873069579083707","274084104336043527992401206136490755783","22196126745320830836436014050729147518","326514218725361855876629616161514360396","23983221554596959379646112241939445221","196593957052645668468372312431974802806","217649167038028258420924569244832382848","40312607938425483165212506128842365215","219004939394687104755551421685052377962","31606321371609045705006673644108175938","226079639771490543989019189642694260914","4537501593846241638024251120898552925","311437277109243595267848782620871262172","34450726125089044779866111897310198065","199268582258792546320415350507021197804","2202674638674955747358330562777931718","320817264424166863528374427525559983702","20119596697748671666502361529918672072","231070100169016167990259326165898603889","64128424681750054913394446557294614819","37394594093679912911417533633900736842","112542688482582407366777557322775717439","81803849122387521750805826114884217363","24613822983810604489134329613593310732","214451851557528613847892322431407379482","239989738093524869286596933377599165387","218185987485252401261228849392902954456","291626687903827467863878074921980388023","331595460418142757804431403808116740704","327514502790875404343375900994003943215","289038431634263385172034759190894824010","307244243239014747135877397289785402441","21426774324199000126313668573190945351","83824343156541834187165388098163288023","173065357509288041220020155845397380501","308587579857832734354517684315973455620","242297387364596504549786375826718763540","38242025811794290185076262873661757066"],"threshold":0.9}},{"signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/deployment/AxisConfigBuilder.java","function":"populateConfig"},"deprecated":false,"digest":{"function_hash":"238628945132454641844123397463240328674","length":4486},"id":"CVE-2026-66713-e11fb381","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/test/org/apache/axis2/engine/AbstractEngineTest.java"},"deprecated":false,"digest":{"line_hashes":["86960884303651326380992322512124133672","199295100044918101805529585510237963862","147561256329422781432621778904796766296","202183293384578116773442928112137272021"],"threshold":0.9},"id":"CVE-2026-66713-e24fe816"},{"deprecated":false,"digest":{"function_hash":"274983812837459090055975443272808505846","length":2722},"id":"CVE-2026-66713-ec252f01","signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/util/MessageContextBuilder.java","function":"createFaultMessageContext"}},{"digest":{"function_hash":"144043879617877207568657958921093185778","length":338},"id":"CVE-2026-66713-ef9490bf","signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/context/AbstractContext.java","function":"getLocalProperty"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/context/AbstractContext.java","function":"getProperty"},"deprecated":false,"digest":{"function_hash":"97627694953076210222011026035771420073","length":370},"id":"CVE-2026-66713-f1f6412e","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/src/org/apache/axis2/context/ConfigurationContextFactory.java","function":"createBasicConfigurationContext"},"deprecated":false,"digest":{"function_hash":"105594112895689733624433207207890793338","length":337},"id":"CVE-2026-66713-f4a9f5d1"},{"target":{"file":"modules/kernel/src/org/apache/axis2/context/AbstractContext.java","function":"getPropertyDifferences"},"deprecated":false,"digest":{"function_hash":"269813118398518102486599048644588843332","length":165},"id":"CVE-2026-66713-f63b273e","signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15"},{"deprecated":false,"digest":{"line_hashes":["327304637716879935942020144342815214238","198878017107471816223636256882235101521","137176163206922702257077154116813435765","219477703778039019384592334744612410026"],"threshold":0.9},"id":"CVE-2026-66713-f7e883ed","signature_type":"Line","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/adb/src/org/apache/axis2/rpc/receivers/RPCInOnlyMessageReceiver.java"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15","target":{"file":"modules/kernel/test/org/apache/axis2/engine/AbstractEngineTest.java","function":"invokeBusinessLogic"},"deprecated":false,"digest":{"function_hash":"331351692024697062935746203774028262857","length":228},"id":"CVE-2026-66713-fd431108"},{"target":{"file":"modules/kernel/src/org/apache/axis2/context/PropertyDifference.java"},"deprecated":false,"digest":{"line_hashes":["99351188444307345892078767178807504939","237572400596220032615971813857299572028","269141853012490756438299652640148473433","256932422488593386194881319611013868249","183936234945271630108762430858862945216","166041738264700121419058781109596491138","170271336593269081783773908195470393787","114468697871444919041120419243747482398","170930800470338524163488556767858368278","307217399867167004343055096120791147827","198557490678691486679447066496971657799","257796859633183206280488357068809068304","229659050419434322573661754966083779681","74595915484225373140772707270294412301","239304815804884014079850671394048488617","185024523164912700750867036054518131603","208080280239709561910888411997208466245","267352723522810437950087687646017396253","334111954252056311743510145859559079192","67450163622195309063835916387272064738","106332392742778728644108412869259970213","28891270861235844168490324602293757213","329662340306584512098890479644181802822","177780620983423975472423192863752549810"],"threshold":0.9},"id":"CVE-2026-66713-fed2c790","signature_type":"Line","signature_version":"v1","source":"https://github.com/apache/axis-axis2-java-core/commit/e6f53b230bddcb40577c84ff290ba51e7265fa15"}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}