easymock CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW easymock CVE published 2026-10-26

CVE-2026-116486

A type confusion vulnerability exists in Objenesis before 3.6, which allows code in one class loader to substitute objects into another by exploiting instantiator caching keyed on class name. This vulnerability can lead to ClassCastException failures and object substitution across class loaders, potentially impacting systems and applications using affected Objenesis versions. Defenders should assess expos [truncated]