These are the versions of Nitrite that are currently being supported with security updates.
| Version | Supported |
|---|---|
| 4.x | ✅ |
| 3.x | ❌ |
If you want to report a vulnerability, raise a Github issue with the details.
Repository navigation
Security: nitrite/nitrite-java
Security
SECURITY.md
-
Unfiltered ObjectInputStream deserialization in NitriteJsonImporter.readEncodedObject (residual surface of GHSA-9297-g93h-86gg)GHSA-q86x-r2q3-vf4p published
Oct 22, 2026 by anidotnetHigh -
Unfiltered Java deserialization in the native MVStore read pathGHSA-7w7v-2j76-mqwp published
Oct 18, 2026 by anidotnetLow -
Unfiltered Java Deserialization in Legacy v1 Database Migration PathGHSA-9297-g93h-86gg published
Jul 2, 2026 by anidotnetCritical
Learn more about advisories related to nitrite/nitrite-java in the GitHub Advisory Database