Security: openclover/clover
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
-
Java deserialization RCE when OpenClover reads an untrusted coverage database (`clover.db`)GHSA-7m7c-r4gw-hfjx published
Aug 5, 2026 by marek-parfianowiczHigh -
Unauthenticated Java deserialization RCE on OpenClover distributed per-test coverage *clients* via a rogue coverage *server*GHSA-cf4x-f57r-9vcc published
Aug 5, 2026 by marek-parfianowiczCritical -
Unauthenticated Java deserialization RCE on the OpenClover distributed per-test coverage *server*GHSA-gpx8-35pq-2545 published
Aug 5, 2026 by marek-parfianowiczCritical
Learn more about advisories related to openclover/clover in the GitHub Advisory Database