CVE-2026-25360

Publication date

2026-03-25 16:14:45

Family

Patchstack

State

PUBLISHED

Description

Deserialization of Untrusted Data vulnerability in rascals Vex vex allows Object Injection.This issue affects Vex: from n/a through < 1.2.9.