GHSA-MVH2-CRG5-V77C vulnerabilities

Vulnerabilities for packages: apicurio-registry, cloudwatch-exporter, floci, camunda-zeebe, wavefront-proxy, camunda, infinispan, apicurio-registry-fips, kayenta, knative-kafka-broker, neo4j, pinot-fips, nuxeo, s3proxy, kayenta-fips, flyway, traccar-fips, reposilite, wazuh-indexer,...

CVE-2026-59898 vulnerabilities

Vulnerabilities for packages: apicurio-registry, cloudwatch-exporter, floci, camunda-zeebe, wavefront-proxy, camunda, infinispan, apicurio-registry-fips, kayenta, knative-kafka-broker, neo4j, pinot-fips, nuxeo, s3proxy, kayenta-fips, flyway, traccar-fips, reposilite, wazuh-indexer,...

CVE-2026-59900 vulnerabilities

Vulnerabilities for packages: apicurio-registry, cloudwatch-exporter, floci, camunda-zeebe, wavefront-proxy, camunda, infinispan, apicurio-registry-fips, kayenta, pinot-fips, s3proxy, kayenta-fips, flyway, traccar-fips, reposilite, wazuh-indexer, request-9047-keycloak-fips,...

CVE-2026-59899 vulnerabilities

Vulnerabilities for packages: apicurio-registry, cloudwatch-exporter, floci, camunda-zeebe, wavefront-proxy, camunda, infinispan, apicurio-registry-fips, kayenta, knative-kafka-broker, neo4j, pinot-fips, nuxeo, s3proxy, kayenta-fips, flyway, traccar-fips, reposilite, wazuh-indexer,...

GHSA-JPPX-W49H-X2QQ vulnerabilities

Vulnerabilities for packages: flyway, apicurio-registry, cloudwatch-exporter, management-api-for-apache-cassandra-5.0, strimzi-kafka-operator, apache-nifi, apache-activemq-artemis, infinispan, wavefront-proxy, neo4j, thingsboard...

CVE-2026-56745 vulnerabilities

Vulnerabilities for packages: flyway, apicurio-registry, cloudwatch-exporter, management-api-for-apache-cassandra-5.0, strimzi-kafka-operator, apache-nifi, apache-activemq-artemis, infinispan, wavefront-proxy, neo4j, thingsboard...

GHSA-GCJF-9MGH-3P7G vulnerabilities

Vulnerabilities for packages: flyway, apicurio-registry, cloudwatch-exporter, management-api-for-apache-cassandra-5.0, strimzi-kafka-operator, apache-nifi, apache-activemq-artemis, infinispan, wavefront-proxy, neo4j, thingsboard...

GHSA-C69G-56F8-XWQJ vulnerabilities

Vulnerabilities for packages: flyway, apicurio-registry, cloudwatch-exporter, management-api-for-apache-cassandra-5.0, strimzi-kafka-operator, apache-nifi, infinispan, wavefront-proxy, thingsboard...

GHSA-MVH2-CRG5-V77C vulnerabilities

Vulnerabilities for packages: flyway, apicurio-registry, cloudwatch-exporter, management-api-for-apache-cassandra-5.0, strimzi-kafka-operator, apache-nifi, apache-activemq-artemis, infinispan, wavefront-proxy, neo4j, thingsboard...

CVE-2026-55833 vulnerabilities

Vulnerabilities for packages: flyway, apicurio-registry, cloudwatch-exporter, management-api-for-apache-cassandra-5.0, strimzi-kafka-operator, apache-nifi, apache-activemq-artemis, infinispan, wavefront-proxy, neo4j, thingsboard...

CVE-2026-59900 vulnerabilities

Vulnerabilities for packages: flyway, apicurio-registry, cloudwatch-exporter, management-api-for-apache-cassandra-5.0, strimzi-kafka-operator, apache-nifi, infinispan, wavefront-proxy, thingsboard...

CVE-2026-59921 vulnerabilities

Vulnerabilities for packages: flyway, apicurio-registry, cloudwatch-exporter, management-api-for-apache-cassandra-5.0, strimzi-kafka-operator, apache-nifi, apache-activemq-artemis, infinispan, wavefront-proxy, neo4j, thingsboard...

GHSA-558V-64GR-WGG4 vulnerabilities

Vulnerabilities for packages: flyway, apicurio-registry, cloudwatch-exporter, management-api-for-apache-cassandra-5.0, strimzi-kafka-operator, zookeeper, apache-nifi, cassandra, akhq, apache-activemq-artemis, infinispan, cassandra-reaper, wavefront-proxy, neo4j, keycloak, thingsboard...

CVE-2026-59901 vulnerabilities

Vulnerabilities for packages: flyway, apicurio-registry, cloudwatch-exporter, management-api-for-apache-cassandra-5.0, strimzi-kafka-operator, zookeeper, apache-nifi, cassandra, akhq, apache-activemq-artemis, infinispan, cassandra-reaper, wavefront-proxy, neo4j, keycloak, thingsboard...

MAL-2026-10922 Malicious code in lambda-cloudwatch-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12706a5899ff9e1862dfc4ff260b38860415e8e68511e7e7f8d98bd5d6406e04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-15737

AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore Python SDK versions 1.4.8 and...

CVE-2026-15737

AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore Python SDK versions 1.4.8 and...

EUVD-2026-44988

AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore Python SDK versions 1.4.8 and...

CVE-2026-15737

CVE-2026-15737 affects the AWS Bedrock AgentCore Python SDK. Unintended logging of sensitive user content occurs in the OpenTelemetry instrumentation for SDK versions 1.4.8 and 1.5.0, where raw user prompts and complete agent responses were written into OpenTelemetry span attributes on every invo...

CVE-2026-15737 Sensitive content disclosure via OpenTelemetry spans in AgentCore Python SDK

AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore Python SDK versions 1.4.8 and...