CVE-2026-56818 vulnerabilities

Vulnerabilities for packages: pinot, tinkerpop, hadoop-fips...

DEBIAN-CVE-2026-56818

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, the RedisArrayAggregator Redis codec clears retained partial aggregate state when the maxNestedArrayDepth limit is exceeded, but it does not clear the same state when the sibling...

ai.spice:spiceai (0.6.0), ch.zzeekk.spark:spark-temporalquery_2.13 (4.0.0) +915 more potentially affected by CVE-2026-56818 via io.netty:netty-codec-redis (>=4.2.0.final, <=4.2.15.final)

io.netty:netty-codec-redis MAVEN version =4.2.0.final, =4.2.15.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty-codec-redis and may be impacted: - ai.spice:spiceai 0.6.0 - ch.zzeekk.spark:spark-temporalquery2.13 4.0.0 -...

ai.spice:spiceai (0.6.0), ch.zzeekk.spark:spark-temporalquery_2.13 (4.0.0) +915 more potentially affected by CVE-2026-56818 via io.netty:netty-codec-redis (>=4.2.0.final, <=4.2.15.final)

io.netty:netty-codec-redis MAVEN version =4.2.0.final, =4.2.15.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty-codec-redis and may be impacted: - ai.spice:spiceai 0.6.0 - ch.zzeekk.spark:spark-temporalquery2.13 4.0.0 -...

ai.spice:spiceai (0.6.0), ch.zzeekk.spark:spark-temporalquery_2.13 (4.0.0) +915 more potentially affected by CVE-2026-56818 via io.netty:netty-codec-redis (>=4.2.0.final, <=4.2.15.final)

io.netty:netty-codec-redis MAVEN version =4.2.0.final, =4.2.15.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty-codec-redis and may be impacted: - ai.spice:spiceai 0.6.0 - ch.zzeekk.spark:spark-temporalquery2.13 4.0.0 -...