Announcements – Sonatype Support

Announcements

• PostgreSQL Index Corruption - "duplicate key violation" errors
• Sonatype Data Services (HDS) Regularly Scheduled Maintenance
• IQ Server vulnerability information contains the Root Cause
• codehaus.org Repositories Should Be Removed From Your Nexus Repository Instance
• Log4Shell log4j Vulnerability CVE-2021-44228 Status
• Spring Framework RCE Vulnerability CVE-2021-22963 and SONATYPE-2022-1764

Security Advisories

• CVE-2026-14646 Nexus Repository 3 - SSRF via HTTP Redirect - 2026-07-14
• CVE-2026-14645 Nexus Repository 3 - Webhook SSRF - 2026-07-14
• CVE-2026-14504 Nexus Repository 3 - Authorization Bypass in Component Upload API - 2026-07-14
• CVE-2026-7494 Nexus Repository 3 - SSRF in SSL Certificate Retrieval - 2026-07-14
• CVE-2026-3329 Nexus Repository 3 - Authentication Handling Issue - 2026-06-11
• CVE-2026-11403 Nexus Repository 3 - Insufficient Entropy in API Key Generation - 2026-07-14