pl.allegro.tech.boot:handlebars-spring-boot-starter (0.2.6) potentially affected by CVE-2026-63490 via com.github.jknack:handlebars-springmvc (2.3.1)

com.github.jknack:handlebars-springmvc MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars-springmvc and may be impacted: - pl.allegro.tech.boot:handlebars-spring-boot-starter 0.2.6 Source cves: CVE-2026-634...

pl.allegro.tech.boot:handlebars-spring-boot-starter (0.2.7) potentially affected by CVE-2026-63490 via com.github.jknack:handlebars-springmvc (2.3.2)

com.github.jknack:handlebars-springmvc MAVEN version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars-springmvc and may be impacted: - pl.allegro.tech.boot:handlebars-spring-boot-starter 0.2.7 Source cves: CVE-2026-634...

pl.allegro.tech.boot:handlebars-spring-boot-starter (0.2.2) potentially affected by CVE-2026-63490 via com.github.jknack:handlebars-springmvc (2.2.0)

com.github.jknack:handlebars-springmvc MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars-springmvc and may be impacted: - pl.allegro.tech.boot:handlebars-spring-boot-starter 0.2.2 Source cves: CVE-2026-634...

pl.allegro.tech.boot:handlebars-spring-boot-starter (>=0.2.0, <=0.2.1), pl.allegro.tech.boot:spring-boot-starter-handlebars (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-63490 via com.github.jknack:handlebars-springmvc (2.0.0)

com.github.jknack:handlebars-springmvc MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars-springmvc and may be impacted: - pl.allegro.tech.boot:handlebars-spring-boot-starter =0.2.0, =0.1.0, =0.1.1 Source...

pl.allegro.tech.boot:handlebars-spring-boot-starter (>=0.2.3, <=0.2.4) potentially affected by CVE-2026-63490 via com.github.jknack:handlebars-springmvc (2.2.3)

com.github.jknack:handlebars-springmvc MAVEN version 2.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars-springmvc and may be impacted: - pl.allegro.tech.boot:handlebars-spring-boot-starter =0.2.3, =0.2.4 Source cves:...

Security Bulletin: Multiple vulnerabilities found in spring-boot-3.3.11.jar - part of IBM webMethods API Management

Summary Multiple vulnerabilities found in spring-boot-3.3.11.jar - part of IBM webMethods API Management have been addressed Vulnerability Details CVEID:CVE-2026-40973 DESCRIPTION: A local attacker on the same host as the application may be able to take control of the directory used by...

CVE-2026-82265

A flaw was found in Zipkin. Unauthenticated attackers can exploit exposed Spring Boot Actuator endpoints on the tracing API port to access sensitive information. This allows them to read environment variables, bean configurations, and storage credentials. Additionally, attackers can modify log...

CLEANSTART-2026-AY54291 Security fixes in spring-boot 4.1.0-r0

Package spring-boot version 4.1.0-r0 fixes 3 vulnerabilities: CVE-2026-54399, CVE-2026-54428, CVE-2026-64607...

CLEANSTART-2026-TM54369 Security fixes in spring-boot 4.0.7-r0

Package spring-boot version 4.0.7-r0 fixes 3 vulnerabilities: CVE-2026-54399, CVE-2026-54428, CVE-2026-64607...

SUSE CVE-2025-70290

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or...

SUSE CVE-2025-70293

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of service,...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function through the Spring Boot Actuator endpoints exposed on the tracing API port in zipkin-server/src/main/resources/zipkin-server-shared.yml. An attacker can read sensitive runtime data by sending...

SUSE CVE-2026-72238

In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in...

be.personify.iam:personify-frontend (>=1.5.1.release, <=1.5.8.release), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-context (>=4.0.0-m1, <=5.0.0) +368 more potentially affected by CVE-2026-71257 via org.apache.wicket:wicket-core (>=10.0.0-m1, <=10.10.0)

org.apache.wicket:wicket-core MAVEN version =10.0.0-m1, =1.5.1.release, =4.0.0-m1, =4.0.0-m1, =5.0.0 - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 10.0.0-m1 - com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar 10.0.0-m1 - com.googlecode.wicket-jquery-ui:wicket-jquery-ui-core 10.0.0-m1...

be.personify.iam:personify-frontend (>=1.5.1.release, <=1.5.8.release), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-context (>=4.0.0-m1, <=5.0.0) +368 more potentially affected by CVE-2026-76984 via org.apache.wicket:wicket-core (>=10.0.0-m1, <=10.10.0)

org.apache.wicket:wicket-core MAVEN version =10.0.0-m1, =1.5.1.release, =4.0.0-m1, =4.0.0-m1, =5.0.0 - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 10.0.0-m1 - com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar 10.0.0-m1 - com.googlecode.wicket-jquery-ui:wicket-jquery-ui-core 10.0.0-m1...

be.personify.iam:personify-frontend (>=1.3.1.release, <=1.4.2.release), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=3.0.1-rc, <=3.1.7) +177 more potentially affected by CVE-2026-75802 via org.apache.wicket:wicket-extensions (>=9.0.0-m1, <=9.23.0)

org.apache.wicket:wicket-extensions MAVEN version =9.0.0-m1, =1.3.1.release, =3.0.1-rc, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m3, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.23.1...

CVE-2026-19702

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0.7 before 1.0.8...

CVE-2026-19702

CVE-2026-19702 is an OS command injection vulnerability in TÜBİTAK BİLGEM's Pardus Boot Repair , caused by improper neutralization of special elements used in an OS command. The issue affects versions 1.0.7 through 1.0.7 (fixed in 1.0.8 ). The CVSS 3.1 score is 7.8 (HIGH) with a local attack vect...

CVE-2026-19702 OS Command Injection in TÜBİTAK BİLGEM's Pardus Boot Repair

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0.7 before 1.0.8...

CVE-2026-19702 OS Command Injection in TÜBİTAK BİLGEM's Pardus Boot Repair

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0.7 before 1.0.8...