CVE-2026-77121

Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository (affected versions not specified)

Description A user account with permissions to deploy artifacts to a hosted Maven repository can upload a POM file containing an oversized metadata field. This action results in a denial of service for the specific repository, causing all subsequent attempts to list or browse its components to fail permanently until an administrator repairs the underlying data. This issue only impacts the targeted repository, while other repositories and the general server health remain unaffected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.