IBM License Metric Tool v9: Multiple Vulnerabilities Remediated (ibm.com)

• Multiple vulnerabilities remediated in IBM License Metric Tool v9
• Affects WebSphere, Rails, Rack, Axios, Java SE, and others
• Highest CVSS score 10.0 for CVE-2026-42043

"IBM released a security bulletin for IBM License Metric Tool v9, addressing numerous vulnerabilities in third-party components including WebSphere, libxml2, Nokogiri, Addressable, Rails, Rack, Axios, Java SE, FreeType, Bouncy Castle, and Eclipse Open9J. The vulnerabilities range from denial of service and buffer overflows to XSS, SSRF, prototype pollution, and path traversal, with CVSS scores up to 10.0."