Oracle Graalvm vulnerabilities
197 published vulnerabilities in Oracle Graalvm, 1 of them exploited in the wild. The most were published in 2021 (41), and 21 so far in 2026.
Oracle Graalvm vulnerabilities by year
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Oracle Graalvm vulnerabilities
- CVE-2023-41993 Apple Multiple Products WebKit Code Execution
- CVE-2021-22931 Code injection in Node
- CVE-2021-29921 Security feature bypass in n/a
- CVE-2019-15605 Other in Node
- CVE-2019-15606 Auth bypass in Node
- CVE-2019-17560 Improper Certificate Validation in Apache Netbeans
- CVE-2025-50059 Security feature bypass in Oracle GraalVM Enterprise Edition
- CVE-2021-37701 Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
- CVE-2021-37712 Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
- CVE-2021-37713 Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization
- CVE-2021-39134 UNIX Symbolic Link (Symlink) Following in @npmcli/arborist
- CVE-2021-39135 UNIX Symbolic Link (Symlink) Following in @npmcli/arborist
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.