129 matches found
CLEANSTART-2026-BE42282 Security fix for CVE-2024-57699 applied in: apicurio-registry 3.1.7-r6
Security vulnerability affects the apicurio-registry package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-AL62330 Security fix for CVE-2025-11966 applied in: apicurio-registry 3.1.7-r6, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, keycloak 26.4.7-r5, keycloak 26.5.7-r4, kogito-apps 10.1.0-r0
CVE-2025-11966 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-WF23391 Security fix for CVE-2025-11965 applied in: apicurio-registry 3.1.7-r6, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, keycloak 26.4.7-r5, keycloak 26.5.7-r4, kogito-apps 10.1.0-r0
CVE-2025-11965 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
Apicurio/apicurio-registry: apicurio-registry: SSRF via wsdl4j import dereference in WSDL FULL validation
A flaw was found in Apicurio Registry. The WSDLReaderAccessor creates a wsdl4j WSDLReader without disabling the javax.wsdl.importDocuments feature. When the VALIDITY rule is set to FULL, an attacker with Developer-role access can upload a WSDL document containing attacker-controlled import...
Important: Red Hat Security Advisory: Apicurio Registry (container images) release and security update [ 3.3.1 GA ]
An update to the images for Red Hat build of Apicurio Registry is now available from the Red Hat Container Catalog. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of...
Apicurio/apicurio-registry: apicurio-registry: Unhardened SAXParser in content-type detection leads to blind XXE / SSRF / billion-laughs DoS
A flaw was found in Apicurio Registry. The ContentTypeUtil.isParsableXml method creates a SAXParserFactory without enabling secure processing features or disabling external entity resolution. An attacker with artifact-write permission or unauthenticated when the registry runs with default...
Apicurio/apicurio-registry: apicurio-registry: XML entity-expansion denial of service via internal DTD subset
A flaw was found in Apicurio Registry. The DocumentBuilderAccessor correctly blocks external DTD and schema access but does not disable DOCTYPE declarations or enable FEATURESECUREPROCESSING. An attacker with artifact-write permission can upload XML documents with internal entity-expansion payloa...
CVE-2026-54428 vulnerabilities
Vulnerabilities for packages: thingsboard, apicurio-registry, flyway, cassandra-reaper, druid, akhq, wavefront-proxy, zipkin, sonarqube, cloudwatch-exporter, logstash, kserve-modelmesh, opensearch, nrjmx...
GHSA-V3JC-474W-2WM6 vulnerabilities
Vulnerabilities for packages: thingsboard, apicurio-registry, flyway, cassandra-reaper, druid, akhq, wavefront-proxy, zipkin, sonarqube, cloudwatch-exporter, logstash, kserve-modelmesh, opensearch, nrjmx...
CVE-2026-54399 vulnerabilities
Vulnerabilities for packages: thingsboard, apicurio-registry, flyway, cassandra-reaper, druid, akhq, wavefront-proxy, zipkin, sonarqube, logstash, kserve-modelmesh, opensearch, nrjmx...
GHSA-HF6X-8P5F-CGMF vulnerabilities
Vulnerabilities for packages: thingsboard, apicurio-registry, flyway, cassandra-reaper, druid, akhq, wavefront-proxy, zipkin, sonarqube, logstash, kserve-modelmesh, opensearch, nrjmx...
CVE-2026-40984 vulnerabilities
Vulnerabilities for packages: request-9047-keycloak-fips, airbyte-server, hono, apicurio-registry-fips, apicurio-registry, dependency-track-apiserver, ontop-fips, keycloak, kafka-bridge-fips, apache-nifi, dependency-track, kafka-bridge, nacos-docker, zipkin, keycloak-fips, camunda-zeebe,...
GHSA-W737-WX49-QJ23 vulnerabilities
Vulnerabilities for packages: keycloak, camunda-zeebe, airbyte-server-fips, nacos, request-9047-keycloak-fips, apache-nifi, dependency-track, infinispan, zipkin, nacos-docker, airbyte-server, keycloak-fips, apicurio-registry-fips, apicurio-registry, dependency-track-apiserver...
CVE-2026-40983 vulnerabilities
Vulnerabilities for packages: keycloak, camunda-zeebe, airbyte-server-fips, nacos, request-9047-keycloak-fips, apache-nifi, dependency-track, infinispan, zipkin, nacos-docker, airbyte-server, keycloak-fips, apicurio-registry-fips, apicurio-registry, dependency-track-apiserver...
GHSA-G3PR-3P32-FP23 vulnerabilities
Vulnerabilities for packages: request-9047-keycloak-fips, airbyte-server, hono, apicurio-registry-fips, apicurio-registry, dependency-track-apiserver, ontop-fips, keycloak, kafka-bridge-fips, apache-nifi, dependency-track, kafka-bridge, nacos-docker, zipkin, keycloak-fips, camunda-zeebe,...
CVE-2026-40983 vulnerabilities
Vulnerabilities for packages: infinispan, apicurio-registry, dependency-track, keycloak, zipkin...
CVE-2026-40984 vulnerabilities
Vulnerabilities for packages: infinispan, apicurio-registry, dependency-track, keycloak, zipkin...
GHSA-W737-WX49-QJ23 vulnerabilities
Vulnerabilities for packages: infinispan, apicurio-registry, dependency-track, keycloak, zipkin...