433 matches found
GHSA-W67G-5RQW-F597 vulnerabilities
Vulnerabilities for packages: jitsucom-bulker, aws-node-termination-handler, infinispan-operator, guac, juicefs-csi-driver, op-geth, etcd, verticadb-operator...
CVE-2026-40858
camel-infinispan リモート集約リポジトリの安全でないデシリアライゼーション再現コード CVE-2026-40858 このプロジェクトは、Apache Camel の camel-infinispan コンポーネントにおける Java デシリアライゼーションの脆弱性 CVE-2026-40858 として追跡 を示しています。ProtoStream ベースの リモート集約リポジトリ は、集約された各 Exchange をリモートの Infinispan キャッシュにシリアライズし、エントリを読み戻すとき get / recover に...
GHSA-8C42-7QJ2-3J46 vulnerabilities
Vulnerabilities for packages: zipkin, management-api-for-apache-cassandra-5.0, apache-activemq-artemis, apache-pulsar, akhq, infinispan, opensearch, trino, thingsboard, apicurio-registry, druid, wavefront-proxy, wildfly, tez, neo4j, flyway, keycloak...
CVE-2026-59903 vulnerabilities
Vulnerabilities for packages: zipkin, management-api-for-apache-cassandra-5.0, apache-activemq-artemis, apache-pulsar, akhq, infinispan, opensearch, trino, thingsboard, apicurio-registry, druid, wavefront-proxy, wildfly, tez, neo4j, flyway, keycloak...
GHSA-QV9R-C865-CP47 vulnerabilities
Vulnerabilities for packages: zipkin, spark, apache-tika, celeborn, wildfly, neo4j, flink, opensearch, thingsboard, spdx-tools-java, keycloak-config-cli, apache-pulsar, infinispan, kafka, druid, solr, sonarqube, strimzi-kafka-operator, apache-activemq-artemis, akhq...
CVE-2026-49844 vulnerabilities
Vulnerabilities for packages: zipkin, spark, apache-tika, celeborn, wildfly, neo4j, flink, opensearch, thingsboard, spdx-tools-java, keycloak-config-cli, apache-pulsar, infinispan, kafka, druid, solr, sonarqube, strimzi-kafka-operator, apache-activemq-artemis, akhq...
jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
CVE-2026-15555
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
CVE-2026-15555
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
CVE-2026-15555 Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
EUVD-2026-55982
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
CVE-2026-15555 Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
CVE-2026-15555
Technical details about CVE-2026-15555 are not publicly available in the provided documents. Monitor for updates on affected components, root cause specifics, vulnerable versions, and remediation guidance.
CVE-2026-15555
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
PT-2026-70089
Name of the Vulnerable Software and Affected Versions JBoss marshalling affected versions not specified Description A flaw exists in the Infinispan session replication path where replicated session data is deserialized using the JBoss Marshalling River unmarshaller without class filtering. This...
CVE-2026-40984 vulnerabilities
Vulnerabilities for packages: apicurio-registry, ontop-fips, airbyte-server, keycloak, apache-nifi, kafka-bridge-fips, dependency-track, hono, zipkin, airbyte-server-fips, camunda-zeebe, knative-kafka-broker, apicurio-registry-fips, nacos-docker, infinispan, keycloak-fips,...
CVE-2026-40983 vulnerabilities
Vulnerabilities for packages: apicurio-registry, keycloak-fips, dependency-track-apiserver, apicurio-registry-fips, infinispan, zipkin, airbyte-server-fips, airbyte-server, nacos-docker, request-9047-keycloak-fips, keycloak, apache-nifi, camunda-zeebe, nacos, dependency-track...
GHSA-G3PR-3P32-FP23 vulnerabilities
Vulnerabilities for packages: apicurio-registry, ontop-fips, airbyte-server, keycloak, apache-nifi, kafka-bridge-fips, dependency-track, hono, zipkin, airbyte-server-fips, camunda-zeebe, knative-kafka-broker, apicurio-registry-fips, nacos-docker, infinispan, keycloak-fips,...
GHSA-W737-WX49-QJ23 vulnerabilities
Vulnerabilities for packages: apicurio-registry, keycloak-fips, dependency-track-apiserver, apicurio-registry-fips, infinispan, zipkin, airbyte-server-fips, airbyte-server, nacos-docker, request-9047-keycloak-fips, keycloak, apache-nifi, camunda-zeebe, nacos, dependency-track...