CLEANSTART-2026-TZ04509 Security fixes for CVE-2024-57699, CVE-2025-59250, CVE-2025-67735, CVE-2026-1002, ghsa-72hv-8253-57qq, ghsa-m494-w24q-6f7w applied in versions: 3.1.7-r6

🗓️ 01 Apr 2026 09:44:59Reported by GoogleType

osv🔗 osv.dev👁 13 Views

Security fixes for multiple CVEs in apicurio-registry are resolved in later releases for version 3.1.7-r6.

Reporter	Title	Published	Views	Family All 402
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Security QRadar EDR Software	11 Feb 202616:52	–	ibm
IBM Security Bulletins	Security Bulletin: A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1, affects watsonx.data	12 Jun 202510:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to Denial of Service vulnerability in Json-smart (CVE-2024-57699)	27 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Processing is vulnerable to a CRLF injection vulnerability in Netty (CVE-2025-67735)	4 Jun 202607:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in netty-codec-4.1.124.Final.jar, netty-codec-http-4.1.108.Final.jar, netty-codec-http2-4.1.124.Final.jar affecting MongoDB Enterprised Advanced (CVE-2025-58056, CVE-2025-58057, CVE-2025-67735)	24 Feb 202619:17	–	ibm
IBM Security Bulletins	Security Bulletin: A denial-of-service attack, heap use after free, network server exploit, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	8 Jul 202517:32	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Test Automation Server is vulnerable to request smuggling using CRLF injection due to netty-codec-http (CVE-2025-67735)	22 Apr 202613:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities	15 Apr 202615:10	–	ibm
IBM Security Bulletins	Security Bulletin: tCRLF Injection Vulnerability in Netty HttpRequestEncoder Leading to Request Smuggling, affects watsonx.data	7 Apr 202610:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to a vulnerability found in Node.js	6 May 202509:46	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-TZ04509.json
osv	www.osv.dev/vulnerability/CVE-2024-57699
osv	www.osv.dev/vulnerability/CVE-2025-59250
osv	www.osv.dev/vulnerability/CVE-2025-67735
osv	www.osv.dev/vulnerability/CVE-2026-1002
osv	www.osv.dev/vulnerability/ghsa-72hv-8253-57qq
osv	www.osv.dev/vulnerability/ghsa-m494-w24q-6f7w
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-57699
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-59250
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-67735

20 May 2026 18:15Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.18.1

CVSS 46.9

EPSS0.00685

SSVC