org.graylog.plugins:graylog-plugin-parent (2.2.0-beta.4), org.graylog.plugins:graylog-plugin-pipeline-processor (2.2.0-beta.4) +2 more potentially affected by unknown CVE via org.graylog2:graylog2-server (2.2.0-beta.4)

org.graylog2:graylog2-server MAVEN version 2.2.0-beta.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.0-beta.4 -...

org.graylog.plugins:graylog-plugin-parent (5.2.11), org.graylog.plugins:graylog-plugin-web-parent (5.2.11) potentially affected by unknown CVE via org.graylog2:graylog2-server (5.2.11)

org.graylog2:graylog2-server MAVEN version 5.2.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.2.11 - org.graylog.plugins:graylog-plugin-web-parent 5.2.1...

org.graylog.plugins:graylog-plugin-parent (4.3.7), org.graylog.plugins:graylog-plugin-web-parent (4.3.7) potentially affected by unknown CVE via org.graylog2:graylog2-server (4.3.7)

org.graylog2:graylog2-server MAVEN version 4.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.3.7 - org.graylog.plugins:graylog-plugin-web-parent 4.3.7...

org.graylog2:graylog2-rest-routes (1.2.0) potentially affected by unknown CVE via org.graylog2:graylog2-server (1.2.0)

org.graylog2:graylog2-server MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog2:graylog2-rest-routes 1.2.0 Source cves: unknown CVE Source advisory: OSV:GHSA-Q9Q2-3PPX-MW...

org.graylog2:graylog2-rest-routes (1.2.0-rc.3) potentially affected by unknown CVE via org.graylog2:graylog2-server (1.2.0-rc.3)

org.graylog2:graylog2-server MAVEN version 1.2.0-rc.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog2:graylog2-rest-routes 1.2.0-rc.3 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:graylog-plugin-parent (5.1.0), org.graylog.plugins:graylog-plugin-web-parent (5.1.0) potentially affected by unknown CVE via org.graylog2:graylog2-server (5.1.0)

org.graylog2:graylog2-server MAVEN version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.1.0 - org.graylog.plugins:graylog-plugin-web-parent 5.1.0...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=1.2.1, <=1.2.2), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=3.0.1, <=3.1.1) +4 more potentially affected by unknown CVE via org.graylog2:graylog2-server (3.0.2)

org.graylog2:graylog2-server MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count =1.2.1, =3.0.1, =1.0.0, =1.2.0, =1.3...

org.graylog.plugins:graylog-plugin-parent (5.2.0-rc.2), org.graylog.plugins:graylog-plugin-web-parent (5.2.0-rc.2) potentially affected by unknown CVE via org.graylog2:graylog2-server (5.2.0-rc.2)

org.graylog2:graylog2-server MAVEN version 5.2.0-rc.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.2.0-rc.2 - org.graylog.plugins:graylog-plugin-web-pare...

org.graylog.plugins:graylog-plugin-parent (3.3.15), org.graylog.plugins:graylog-plugin-web-parent (3.3.15) potentially affected by unknown CVE via org.graylog2:graylog2-server (3.3.15)

org.graylog2:graylog2-server MAVEN version 3.3.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 3.3.15 - org.graylog.plugins:graylog-plugin-web-parent 3.3.1...

org.graylog.plugins:graylog-plugin-parent (4.3.3), org.graylog.plugins:graylog-plugin-web-parent (4.3.3) potentially affected by unknown CVE via org.graylog2:graylog2-server (4.3.3)

org.graylog2:graylog2-server MAVEN version 4.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.3.3 - org.graylog.plugins:graylog-plugin-web-parent 4.3.3...

org.graylog.plugins:graylog-plugin-parent (3.0.0-rc.1), org.graylog.plugins:graylog-plugin-web-parent (3.0.0-rc.1) potentially affected by unknown CVE via org.graylog2:graylog2-server (3.0.0-rc.1)

org.graylog2:graylog2-server MAVEN version 3.0.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 3.0.0-rc.1 - org.graylog.plugins:graylog-plugin-web-pare...

org.graylog.plugins:graylog-plugin-parent (4.3.13), org.graylog.plugins:graylog-plugin-web-parent (4.3.13) potentially affected by unknown CVE via org.graylog2:graylog2-server (4.3.13)

org.graylog2:graylog2-server MAVEN version 4.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.3.13 - org.graylog.plugins:graylog-plugin-web-parent 4.3.1...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.0.0, <=6.1.7), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (>=6.0.0, <=6.1.0) +3 more potentially affected by unknown CVE via org.graylog2:graylog2-server (>=6.0.0, <=6.1.16)

org.graylog2:graylog2-server MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.1.16 Source cves: unknown CVE Source advisory: SNYK:JAVA-ORGGRAYLOG2-10121303...

org.graylog.plugins:graylog-plugin-parent (5.2.5), org.graylog.plugins:graylog-plugin-web-parent (5.2.5) potentially affected by unknown CVE via org.graylog2:graylog2-server (5.2.5)

org.graylog2:graylog2-server MAVEN version 5.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.2.5 - org.graylog.plugins:graylog-plugin-web-parent 5.2.5...

org.graylog.plugins:graylog-plugin-parent (2.2.0-alpha.4), org.graylog.plugins:graylog-plugin-web-parent (2.2.0-alpha.4) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.2.0-alpha.4)

org.graylog2:graylog2-server MAVEN version 2.2.0-alpha.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.0-alpha.4 -...

org.graylog.plugins:graylog-plugin-parent (3.3.4), org.graylog.plugins:graylog-plugin-web-parent (3.3.4) potentially affected by unknown CVE via org.graylog2:graylog2-server (3.3.4)

org.graylog2:graylog2-server MAVEN version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 3.3.4 - org.graylog.plugins:graylog-plugin-web-parent 3.3.4...

Authentication Bypass

org.graylog2, graylog2-server is vulnerable to Authentication Bypass. The vulnerability is due to HTTP Inputs not correctly rejecting messages when a specified header is missing or has an incorrect value, allowing the message to be ingested despite returning a 401 HTTP response...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.1.0, <=6.1.7), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.1.0) +3 more potentially affected by CVE-2025-30373 via org.graylog2:graylog2-server (>=6.1.0, <=6.1.8)

org.graylog2:graylog2-server MAVEN version =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.8 Source cves: CVE-2025-30373 Source advisory: OSV:GHSA-Q7G5-JQ6P-6WVX...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.1.0, <=6.1.7), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.1.0) +3 more potentially affected by CVE-2025-30373 via org.graylog2:graylog2-server (>=6.1.0, <=6.1.8)

org.graylog2:graylog2-server MAVEN version =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.8 Source cves: CVE-2025-30373 Source advisory: GHSA-Q7G5-JQ6P-6WVX...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=6.1.0, <=6.1.7), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (6.1.0) +3 more potentially affected by CVE-2025-30373 via org.graylog2:graylog2-server (>=6.1.0, <=6.1.8)

org.graylog2:graylog2-server MAVEN version =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.8 Source cves: CVE-2025-30373 Source advisory: SNYK:JAVA-ORGGRAYLOG2-9668945...