Liberica Native Image Kit 23.1.13-1 (21.0.13.0.3+6): Release Notes
Published: November, 2026
1. Introduction
This document provides information about Liberica NIK release.
This particular version of Liberica NIK 23.1.13-1 is based on Liberica JDK 21.0.13.0.3+6.
|
Note:
| For more information about Liberica JDK release, see Liberica JDK Release Notes. |
Liberica Native Image Kit is a utility Based on GraalVM Open Source that is capable of converting your JVM-based application into a fully compiled native executable ahead-of-time under the closed-world assumption with an almost instant startup time.
Liberica NIK supports the following platforms:
-
Linux x86_64 (glibc)
-
Linux Alpine x86_64 (musl)
-
Linux AArch64 (glibc)
-
Linux Alpine AArch64 (musl)
-
Mac OS x86_64
-
Mac OS AArch64
-
Windows x86_64
Liberica NIK distribution
Liberica NIK is distributed as .apk, .deb, .dmg, .msi, .pkg, .rpm, .tar.gz, and .zip packages. Please select the most appropriate for your purposes.
2. What’s New
This release contains the following updates and new features.
Notable Issues
This release does not contain any notable issues. For the list of Liberica JDK notable issues, see Liberica JDK Release Notes.
Language and framework versions
Languages and frameworks for Liberica NIK 23.1.13 are updated to the following versions:
| Component | Version |
|---|---|
Java | Liberica JDK 21.0.13.0.3+6 |
LLVM | 16.0.1 (GraalVM CE Native 23.1.13) |
Python | 3.10.8 (GraalVM CE Native 23.1.13) |
Node.js | 18.20.6 |
Java | Liberica JDK 21.0.13.0.3+6 |
Java Script | GraalVM JavaScript (GraalVM CE Native 23.1.13) |
TruffleRuby | 23.1.13 (Ruby 3.2.2) |
Native Image | GraalVM version 23.1.13 (Liberica JDK 21.0.13.0.3+6, LTS) |
Wasm | WebAssembly (GraalVM CE Native 23.1.13) |
3. Known Issues
This release does not contain any known issues. For the list of Liberica JDK known issues, see Liberica JDK Release Notes.
4. CVEs
This is the list of the security issues fixed in this release. CVSS scores are provided using the CVSS version 3.1 scoring system.
| CVE ID | CVSS score | Component | Module | Attack Vector | Complexity | Privileges | User Interaction | Scope | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|---|---|---|---|---|---|
CVE-2026-101516 | 6.5 | security-libs | java.security | network | low | none | none | unchanged | low | low | none |
CVE-2026-114820 | 9.1 | security-libs | java.security | network | low | none | none | unchanged | high | high | none |
CVE-2026-6732 | 5.9 | javafx | libxml2 | network | high | none | none | unchanged | none | none | high |
CVE-2026-83374 | 5.9 | security-libs | javax.crypto | network | high | none | none | unchanged | none | high | none |
CVE-2026-83376 | 3.7 | security-libs | java.security | network | high | none | none | unchanged | none | low | none |
CVE-2026-83378 | 3.7 | hotspot | compiler | network | high | none | none | unchanged | none | low | none |
CVE-2026-83380 | 5.3 | security-libs | javax.security | network | low | none | none | unchanged | low | none | none |
CVE-2026-83381 | 4.8 | security-libs | javax.security | network | high | none | none | unchanged | low | low | none |
CVE-2026-83387 | 5.9 | core-libs | java.sql | network | high | none | none | unchanged | high | none | none |
CVE-2026-83395 | 3.7 | core-libs | java.net | network | high | none | none | unchanged | none | low | none |
CVE-2026-83400 | 5.3 | xml | jaxp | network | low | none | none | unchanged | none | none | low |
CVE-2026-87290 | 3.7 | xml | jaxp | network | high | none | none | unchanged | low | none | none |
CVE-2026-87291 | 5.3 | core-libs | java.net | network | low | none | none | unchanged | low | none | none |
CVE-2026-87292 | 3.7 | core-libs | java.net | network | high | none | none | unchanged | none | low | none |
CVE-2026-87294 | 6.5 | security-libs | java.security | network | low | none | none | unchanged | low | low | none |
CVE-2026-87367 | 3.7 | xml | jaxp | network | high | none | none | unchanged | none | low | none |
CVE-2026-91332 | 5.3 | core-libs | java.net | network | low | none | none | unchanged | none | low | none |
CVE-2026-91333 | 3.7 | security-libs | javax.crypto | network | high | none | none | unchanged | none | low | none |
CVE-2026-91334 | 3.7 | client-libs | javax.imageio | network | high | none | none | unchanged | low | none | none |
CVE-2026-91335 | 2.6 | client-libs | java.awt | network | high | low | required | unchanged | low | none | none |
CVE-2026-91373 | 5.3 | security-libs | java.security | network | low | none | none | unchanged | none | none | low |
CVE-2026-91374 | 4.8 | core-svc | tools | network | high | none | none | unchanged | low | low | none |
CVE-2026-91375 | 4.7 | tools | jlink | local | high | none | required | unchanged | none | high | none |
CVE-2026-91379 | 4.7 | tools | jshell | local | high | none | required | unchanged | none | high | none |
CVE-2026-91380 | 4.0 | core-libs | java.util | local | high | none | none | unchanged | low | low | none |
CVE-2026-91382 | 6.5 | client-libs | 2d | network | high | none | none | unchanged | none | high | low |
CVE-2026-91394 | 5.9 | core-libs | java.net | network | high | none | none | unchanged | high | none | none |
CVE-2026-91397 | 3.6 | core-svc | tools | local | high | none | required | unchanged | none | low | low |
CVE-2026-91398 | 6.8 | core-libs | java.net | network | high | none | none | changed | none | high | none |
CVE-2026-91400 | 3.1 | client-libs | javax.sound | network | high | none | required | unchanged | none | none | low |
CVE-2026-91402 | 3.1 | javafx | graphics | network | high | none | required | unchanged | low | none | none |
CVE-2026-91403 | 9.1 | security-libs | java.security | network | low | none | none | unchanged | high | high | none |
CVE-2026-91410 | 5.3 | core-libs | java.nio | network | low | none | none | unchanged | none | none | low |
CVE-2026-91411 | 6.5 | security-libs | org.ietf.jgss | network | high | none | none | unchanged | none | low | high |
CVE-2026-91415 | 4.8 | client-libs | 2d | network | high | none | none | unchanged | low | low | none |
CVE-2026-91418 | 5.3 | client-libs | javax.imageio | network | low | none | none | unchanged | none | none | low |
CVE-2026-91451 | 5.3 | core-libs | java.net | network | low | none | none | unchanged | none | low | none |
CVE-2026-91452 | 5.3 | core-libs | java.net | network | low | none | none | unchanged | none | low | none |
CVE-2026-91453 | 5.3 | core-libs | java.net | network | low | none | none | unchanged | none | low | none |
CVE-2026-91461 | 3.7 | security-libs | javax.net.ssl | network | high | none | none | unchanged | none | low | none |
CVE-2026-91462 | 5.9 | security-libs | org.ietf.jgss | network | high | none | none | unchanged | none | high | none |
CVE-2026-91463 | 5.3 | security-libs | org.ietf.jgss | network | high | none | required | unchanged | high | none | none |
CVE-2026-91464 | 5.3 | security-libs | org.ietf.jgss | network | high | none | required | unchanged | high | none | none |
CVE-2026-91487 | 4.8 | hotspot | compiler | network | high | none | none | unchanged | low | low | none |
5. Resolved Issues
This release does not contain any fixed issues. For the list of Liberica JDK fixed issues, see Liberica JDK Release Notes.
6. Upgrading to the New Version
To keep your Liberica NIK up-to-date and secure, always upgrade to the newest available version once it is released. To upgrade, install the new version over the previous one. For the installation instructions, see Liberica NIK Installation Guide.