Sensitive Data Exposure

Infinispan CLI is vulnerable to sensitive data exposure. The vulnerability is due to processing a Base64-decoded Kubernetes secret password in plaintext and including it in a command string, which may expose the data in error messages when a command is not found, allowing attackers to exploit thi...

io.quarkus:quarkus-test-infinispan-client (>=2.15.2.final, <=2.16.0.cr1), org.infinispan:infinispan-server-integration (14.0.4.final) +6 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (14.0.4.final)

org.infinispan:infinispan-cli-client MAVEN version 14.0.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - io.quarkus:quarkus-test-infinispan-client =2.15.2.final, =2.16.0.cr1 -...

org.infinispan:infinispan-quarkus-cli (15.0.0.cr1), org.infinispan:infinispan-server-runtime (15.0.0.cr1) +3 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.0.0.cr1)

org.infinispan:infinispan-cli-client MAVEN version 15.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-quarkus-cli 15.0.0.cr1 -...

org.infinispan:infinispan-docs (15.2.6.final), org.infinispan:infinispan-quarkus-cli (15.2.6.final) +7 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.2.6.final)

org.infinispan:infinispan-cli-client MAVEN version 15.2.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-docs 15.2.6.final -...

org.infinispan:infinispan-persistence-cli (9.4.1.final) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (9.4.1.final)

org.infinispan:infinispan-cli-client MAVEN version 9.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-persistence-cli 9.4.1.final Source cves: CVE-2025-5731...

org.infinispan:infinispan-persistence-cli (8.2.8.final) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (8.2.8.final)

org.infinispan:infinispan-cli-client MAVEN version 8.2.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-persistence-cli 8.2.8.final Source cves: CVE-2025-5731...

org.infinispan:infinispan-server-integration (14.0.26.final), org.infinispan:infinispan-server-integrationtests-commons (14.0.26.final) +6 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (14.0.26.final)

org.infinispan:infinispan-cli-client MAVEN version 14.0.26.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-integration 14.0.26.final -...

org.infinispan:infinispan-server-runtime (10.0.1.final) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (10.0.1.final)

org.infinispan:infinispan-cli-client MAVEN version 10.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 10.0.1.final Source cves: CVE-2025-5731...

org.infinispan:infinispan-docs (15.0.17.final), org.infinispan:infinispan-quarkus-cli (15.0.17.final) +7 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.0.17.final)

org.infinispan:infinispan-cli-client MAVEN version 15.0.17.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-docs 15.0.17.final -...

org.infinispan:infinispan-persistence-cli (9.0.3.final) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (9.0.3.final)

org.infinispan:infinispan-cli-client MAVEN version 9.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-persistence-cli 9.0.3.final Source cves: CVE-2025-5731...

org.infinispan:infinispan-docs (15.2.5.final), org.infinispan:infinispan-quarkus-cli (15.2.5.final) +7 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.2.5.final)

org.infinispan:infinispan-cli-client MAVEN version 15.2.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-docs 15.2.5.final -...

org.infinispan:infinispan-server-integration (13.0.4.final), org.infinispan:infinispan-server-integrationtests-commons (13.0.4.final) +5 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (13.0.4.final)

org.infinispan:infinispan-cli-client MAVEN version 13.0.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-integration 13.0.4.final -...

org.infinispan:infinispan-persistence-cli (9.1.0.alpha1) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (9.1.0.alpha1)

org.infinispan:infinispan-cli-client MAVEN version 9.1.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-persistence-cli 9.1.0.alpha1 Source cves: CVE-2025-573...

org.infinispan:infinispan-server-integration (14.0.24.final), org.infinispan:infinispan-server-integrationtests-commons (14.0.24.final) +6 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (14.0.24.final)

org.infinispan:infinispan-cli-client MAVEN version 14.0.24.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-integration 14.0.24.final -...

org.infinispan:infinispan-persistence-cli (9.0.0.cr3) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (9.0.0.cr3)

org.infinispan:infinispan-cli-client MAVEN version 9.0.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-persistence-cli 9.0.0.cr3 Source cves: CVE-2025-5731 Sour...

org.infinispan:infinispan-server-runtime (11.0.5.final), org.infinispan:infinispan-server-testdriver-core (11.0.5.final) +2 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (11.0.5.final)

org.infinispan:infinispan-cli-client MAVEN version 11.0.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 11.0.5.final -...

org.infinispan:infinispan-server-integration (14.0.31.final), org.infinispan:infinispan-server-integrationtests-commons (14.0.31.final) +6 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (14.0.31.final)

org.infinispan:infinispan-cli-client MAVEN version 14.0.31.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-integration 14.0.31.final -...

org.infinispan:infinispan-persistence-cli (8.2.5.final) potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (8.2.5.final)

org.infinispan:infinispan-cli-client MAVEN version 8.2.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-persistence-cli 8.2.5.final Source cves: CVE-2025-5731...

org.infinispan:infinispan-quarkus-cli (15.1.4.final), org.infinispan:infinispan-server-integration (15.1.4.final) +6 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.1.4.final)

org.infinispan:infinispan-cli-client MAVEN version 15.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-quarkus-cli 15.1.4.final -...

org.infinispan:infinispan-server-runtime (11.0.14.final), org.infinispan:infinispan-server-testdriver-core (11.0.14.final) +2 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (11.0.14.final)

org.infinispan:infinispan-cli-client MAVEN version 11.0.14.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 11.0.14.final -...