Medium severity5.3NVD Advisory· Published Jun 28, 2026· Updated Jun 29, 2026
CVE-2026-13501
CVE-2026-13501
Description
A security vulnerability has been detected in antlr ANTLR4 up to 4.13.2. Affected by this vulnerability is the function GoTarget of the file tool/src/org/antlr/v4/codegen/target/GoTarget.java of the component gofmt. The manipulation leads to command injection. The attack can only be performed from a local environment. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
5- osv-coords4 versionspkg:apk/wolfi/wildfly-openjdk-21pkg:apk/chainguard/wildfly-openjdk-17pkg:apk/wolfi/wildfly-openjdk-17pkg:apk/chainguard/wildfly-openjdk-21
< 0+ 3 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
Patches
Vulnerability mechanics
References
5News mentions
0No linked articles in our index yet.