GHSA-H383-GMXW-35V2 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, spark, flink, druid, logstash, akhq, sonarqube, celeborn, kafka, solr...

GHSA-H383-GMXW-35V2 vulnerabilities

Vulnerabilities for packages: geoserver, kafka-fips, flink, akhq, spark-fips, solr, opensearch, sonarqube, pinot-fips, spark, logstash-fips, druid, zaproxy, elasticsearch, celeborn, logstash, nuxeo, elasticsearch-fips, pinot, kafka, hadoop-fips, commercial-elasticsearch, kserve-modelmesh...

CVE-2026-34479 vulnerabilities

Vulnerabilities for packages: geoserver, kafka-fips, flink, akhq, spark-fips, solr, opensearch, sonarqube, pinot-fips, spark, logstash-fips, druid, zaproxy, elasticsearch, celeborn, logstash, nuxeo, elasticsearch-fips, pinot, kafka, hadoop-fips, commercial-elasticsearch, kserve-modelmesh...

CVE-2026-34481 vulnerabilities

Vulnerabilities for packages: spark, flink, strimzi-kafka-operator, neo4j, apache-pulsar, solr...

CVE-2026-34481 vulnerabilities

Vulnerabilities for packages: spark-kubernetes-operator-fips, flink, apache-camel-karavan-devmode, spark, wso2is, neo4j, kafka-bridge-fips, spark-kubernetes-operator, strimzi-kafka-operator, spark-fips, hadoop-fips, solr, kafka-bridge, apache-pulsar, camunda-zeebe, apache-pulsar-fips, camunda...

GHSA-W35J-PV5H-Q9Q9 vulnerabilities

Vulnerabilities for packages: spark-kubernetes-operator-fips, flink, apache-camel-karavan-devmode, spark, wso2is, neo4j, kafka-bridge-fips, spark-kubernetes-operator, strimzi-kafka-operator, spark-fips, hadoop-fips, solr, kafka-bridge, apache-pulsar, camunda-zeebe, apache-pulsar-fips, camunda...

GHSA-3PXV-7CMR-FJR4 vulnerabilities

Vulnerabilities for packages: infinispan, lmcache-cuda-12.8, neo4j, apache-activemq-artemis, geoserver, opensearch-fips, camunda-zeebe, apache-camel-karavan-devmode, apache-pulsar-fips, kafka-fips, flink, spark-kubernetes-operator-fips, akhq, ghidra, wso2is, apache-activemq-fips, spark-fips, solr...

CVE-2026-34480 vulnerabilities

Vulnerabilities for packages: infinispan, lmcache-cuda-12.8, neo4j, apache-activemq-artemis, geoserver, opensearch-fips, camunda-zeebe, apache-camel-karavan-devmode, apache-pulsar-fips, kafka-fips, flink, spark-kubernetes-operator-fips, akhq, ghidra, wso2is, apache-activemq-fips, spark-fips, solr...

CVE-2026-34480 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, opensearch, logstash, akhq, apache-pulsar, airflow, spark, flink, druid, infinispan, celeborn, zipkin, kafka, apache-tika, apache-activemq-artemis, sonarqube, strimzi-kafka-operator, solr, wavefront-proxy, neo4j...

GHSA-3PXV-7CMR-FJR4 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, opensearch, logstash, akhq, apache-pulsar, airflow, spark, flink, druid, infinispan, celeborn, zipkin, kafka, apache-tika, apache-activemq-artemis, sonarqube, strimzi-kafka-operator, solr, wavefront-proxy, neo4j...

CLEANSTART-2026-ZR74513 Security fixes for CVE-2025-68161 applied in versions: 2.2.0-r0

Security vulnerability affects the flink package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-3052

A vulnerability was found in DataLinkDC dinky up to 1.2.5. The impacted element is the function proxyUba of the file dinky-admin/src/main/java/org/dinky/controller/FlinkProxyController.java of the component Flink Proxy Controller. Performing a manipulation results in server-side request forgery. ...

CVE-2026-3052

A vulnerability was found in DataLinkDC dinky up to 1.2.5. The impacted element is the function proxyUba of the file dinky-admin/src/main/java/org/dinky/controller/FlinkProxyController.java of the component Flink Proxy Controller. Performing a manipulation results in server-side request forgery. ...

CVE-2026-3052 DataLinkDC dinky Flink Proxy Controller FlinkProxyController.java proxyUba server-side request forgery

A vulnerability was found in DataLinkDC dinky up to 1.2.5. The impacted element is the function proxyUba of the file dinky-admin/src/main/java/org/dinky/controller/FlinkProxyController.java of the component Flink Proxy Controller. Performing a manipulation results in server-side request forgery. ...

CVE-2026-3052 DataLinkDC dinky Flink Proxy Controller FlinkProxyController.java proxyUba server-side request forgery

A vulnerability was found in DataLinkDC dinky up to 1.2.5. The impacted element is the function proxyUba of the file dinky-admin/src/main/java/org/dinky/controller/FlinkProxyController.java of the component Flink Proxy Controller. Performing a manipulation results in server-side request forgery. ...

EUVD-2026-7433

A vulnerability was found in DataLinkDC dinky up to 1.2.5. The impacted element is the function proxyUba of the file dinky-admin/src/main/java/org/dinky/controller/FlinkProxyController.java of the component Flink Proxy Controller. Performing a manipulation results in server-side request forgery. ...

CVE-2026-3052

DataLinkDC dinky up to 1.2.5 is affected. The vulnerable component is the Flink Proxy Controller (dinky-admin/src/main/java/org/dinky/controller/FlinkProxyController.java) and its proxyUba function. The issue enables server-side request forgery (SSRF) and is exploitable remotely. The exploit has ...

CVE-2026-3052 DataLinkDC dinky Flink Proxy Controller FlinkProxyController.java proxyUba server-side request forgery

A vulnerability was found in DataLinkDC dinky up to 1.2.5. The impacted element is the function proxyUba of the file dinky-admin/src/main/java/org/dinky/controller/FlinkProxyController.java of the component Flink Proxy Controller. Performing a manipulation results in server-side request forgery. ...

PT-2026-21638

A vulnerability was found in DataLinkDC dinky up to 1.2.5. The impacted element is the function proxyUba of the file dinky-admin/src/main/java/org/dinky/controller/FlinkProxyController.java of the component Flink Proxy Controller. Performing a manipulation results in server-side request forgery. ...

Security Bulletin: IBM Event Processing is affected by multiple Vulnerabilities in IBM Operator for Apache Flink

Summary IBM Event Processing is affected by multiple Vulnerabilities in IBM Operator for Apache Flink 1.4.5 Vulnerability Details CVEID:CVE-2025-58056 DESCRIPTION: Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers...