GHSA-6CQP-G7GG-8HR5 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, airbyte-server, apache-hop-fips, floci, kayenta, conductor-fips, elasticsearch, hono, metabase, request-9047-keycloak-fips, apache-nifi, keycloak, spark-kubernetes-operator-fips, s3proxy-fips, apicurio-registry-fips, apache-pulsar, conductor,...

GHSA-C69G-56F8-XWQJ vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, airbyte-server, apache-hop-fips, floci, kayenta, conductor-fips, elasticsearch, hono, metabase, request-9047-keycloak-fips, apache-nifi, keycloak, spark-kubernetes-operator-fips, s3proxy-fips, apicurio-registry-fips, apache-pulsar, conductor,...

GHSA-JPPX-W49H-X2QQ vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, airbyte-server, apache-hop-fips, floci, kayenta, conductor-fips, elasticsearch, hono, metabase, request-9047-keycloak-fips, apache-nifi, keycloak, spark-kubernetes-operator-fips, s3proxy-fips, apicurio-registry-fips, apache-pulsar, conductor,...

GHSA-MVH2-CRG5-V77C vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, airbyte-server, apache-hop-fips, floci, kayenta, conductor-fips, elasticsearch, hono, metabase, request-9047-keycloak-fips, apache-nifi, keycloak, spark-kubernetes-operator-fips, s3proxy-fips, apicurio-registry-fips, apache-pulsar, conductor,...

GHSA-Q4F6-JM68-57WW vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, airbyte-server, apache-hop-fips, floci, kayenta, conductor-fips, elasticsearch, hono, metabase, request-9047-keycloak-fips, apache-nifi, keycloak, spark-kubernetes-operator-fips, s3proxy-fips, apicurio-registry-fips, apache-pulsar, conductor,...

CVE-2026-59921 vulnerabilities

Vulnerabilities for packages: keycloak, wavefront-proxy, infinispan, logstash, apache-activemq-artemis, spark, management-api-for-apache-cassandra-5.0, celeborn, thingsboard, flyway, strimzi-kafka-operator, kserve-modelmesh, cloudwatch-exporter, akhq, tez, opensearch, apicurio-registry, trino,...

GHSA-GCJF-9MGH-3P7G vulnerabilities

Vulnerabilities for packages: keycloak, wavefront-proxy, infinispan, logstash, apache-activemq-artemis, spark, management-api-for-apache-cassandra-5.0, celeborn, thingsboard, flyway, strimzi-kafka-operator, kserve-modelmesh, cloudwatch-exporter, akhq, tez, opensearch, apicurio-registry, trino,...

GHSA-C69G-56F8-XWQJ vulnerabilities

Vulnerabilities for packages: keycloak, wavefront-proxy, infinispan, spark, management-api-for-apache-cassandra-5.0, celeborn, thingsboard, flyway, strimzi-kafka-operator, kserve-modelmesh, cloudwatch-exporter, akhq, opensearch, apicurio-registry, trino, apache-nifi, zipkin, neo4j, apache-pulsar,...

GHSA-MVH2-CRG5-V77C vulnerabilities

Vulnerabilities for packages: keycloak, wavefront-proxy, infinispan, logstash, apache-activemq-artemis, spark, management-api-for-apache-cassandra-5.0, celeborn, thingsboard, flyway, strimzi-kafka-operator, kserve-modelmesh, cloudwatch-exporter, akhq, tez, opensearch, apicurio-registry, trino,...

CVE-2026-55833 vulnerabilities

Vulnerabilities for packages: keycloak, wavefront-proxy, infinispan, logstash, apache-activemq-artemis, spark, management-api-for-apache-cassandra-5.0, celeborn, thingsboard, flyway, strimzi-kafka-operator, kserve-modelmesh, cloudwatch-exporter, akhq, tez, opensearch, apicurio-registry, trino,...

GHSA-JPPX-W49H-X2QQ vulnerabilities

Vulnerabilities for packages: keycloak, wavefront-proxy, infinispan, logstash, apache-activemq-artemis, spark, management-api-for-apache-cassandra-5.0, celeborn, thingsboard, flyway, strimzi-kafka-operator, kserve-modelmesh, cloudwatch-exporter, akhq, tez, opensearch, apicurio-registry, trino,...

CVE-2026-59900 vulnerabilities

Vulnerabilities for packages: keycloak, wavefront-proxy, infinispan, spark, management-api-for-apache-cassandra-5.0, celeborn, thingsboard, flyway, strimzi-kafka-operator, kserve-modelmesh, cloudwatch-exporter, akhq, opensearch, apicurio-registry, trino, apache-nifi, zipkin, neo4j, apache-pulsar,...

CVE-2026-56745 vulnerabilities

Vulnerabilities for packages: keycloak, wavefront-proxy, infinispan, logstash, apache-activemq-artemis, spark, management-api-for-apache-cassandra-5.0, celeborn, thingsboard, flyway, strimzi-kafka-operator, kserve-modelmesh, cloudwatch-exporter, akhq, tez, opensearch, apicurio-registry, trino,...

CVE-2026-59901 vulnerabilities

Vulnerabilities for packages: keycloak, wavefront-proxy, infinispan, cassandra, logstash, apache-activemq-artemis, cassandra-reaper, spark, management-api-for-apache-cassandra-5.0, celeborn, thingsboard, flyway, strimzi-kafka-operator, kserve-modelmesh, cloudwatch-exporter, akhq, tez, opensearch,...

GHSA-558V-64GR-WGG4 vulnerabilities

Vulnerabilities for packages: keycloak, wavefront-proxy, infinispan, cassandra, logstash, apache-activemq-artemis, cassandra-reaper, spark, management-api-for-apache-cassandra-5.0, celeborn, thingsboard, flyway, strimzi-kafka-operator, kserve-modelmesh, cloudwatch-exporter, akhq, tez, opensearch,...

Malicious code in lambda-cloudwatch-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d62c2ab5388572a03d3c4f28ee268d562675a2ebbff48cf1375728f837365f4 The package's preinstall script npm install @sentry/node && node examples/verify.js executes on npm install and initializes Sentry with a hardcoded...

MAL-2026-10922 Malicious code in lambda-cloudwatch-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d62c2ab5388572a03d3c4f28ee268d562675a2ebbff48cf1375728f837365f4 The package's preinstall script npm install @sentry/node && node examples/verify.js executes on npm install and initializes Sentry with a hardcoded...

CVE-2026-15737

AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore Python SDK versions 1.4.8 and...

CVE-2026-15737

CVE-2026-15737 affects the AWS Bedrock AgentCore Python SDK. Unintended logging of sensitive user content occurs in the OpenTelemetry instrumentation for SDK versions 1.4.8 and 1.5.0, where raw user prompts and complete agent responses were written into OpenTelemetry span attributes on every invo...

CVE-2026-15737

AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore Python SDK versions 1.4.8 and...