CVE-2026-59899 vulnerabilities

Vulnerabilities for packages: apicurio-registry, druid, flyway, keycloak, cloudwatch-exporter, opensearch, wavefront-proxy, kserve-modelmesh, apache-nifi, apache-activemq-artemis, logstash, apache-pulsar, tez, zipkin, management-api-for-apache-cassandra-5.0, akhq, spark, thingsboard, neo4j,...

The vulnerability of the Infinispan component in the distributed data management system in Red Hat JBoss Data Grid allows a attacker to cause a service failure.

The vulnerability of the Infinispan distributed data management component in the Red Hat JBoss Data Grid is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause service interruptions...

CVE-2026-47244 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, camunda-zeebe, management-api-for-apache-cassandra-5.0, apache-hop-fips, elasticsearch-fips, infinispan, management-api-for-apache-cassandra-4.1, opensearch-fips, wazuh-indexer, airbyte-server-fips, strimzi-kafka-operator, apache-camel-karavan-devmod...

GHSA-5X3R-WRVG-RP6Q vulnerabilities

Vulnerabilities for packages: wavefront-proxy, camunda-zeebe, management-api-for-apache-cassandra-5.0, apache-hop-fips, elasticsearch-fips, infinispan, management-api-for-apache-cassandra-4.1, opensearch-fips, wazuh-indexer, airbyte-server-fips, strimzi-kafka-operator, apache-camel-karavan-devmod...

GHSA-MJ4R-2HFC-F8P6 vulnerabilities

Vulnerabilities for packages: apicurio-registry, docker-selenium, druid, flyway, keycloak, zookeeper, opensearch, wavefront-proxy, kserve-modelmesh, apache-nifi, trino, apache-activemq-artemis, wildfly, apache-nifi-registry, logstash, apache-pulsar, tez, zipkin, cassandra,...

GHSA-M4CV-J2PX-7723 vulnerabilities

Vulnerabilities for packages: apicurio-registry, docker-selenium, druid, flyway, keycloak, opensearch, wavefront-proxy, kserve-modelmesh, apache-nifi, trino, apache-activemq-artemis, apache-nifi-registry, logstash, apache-pulsar, tez, zipkin, management-api-for-apache-cassandra-5.0, akhq, spark,...

GHSA-V8H7-RR48-VMMV vulnerabilities

Vulnerabilities for packages: wavefront-proxy, camunda-zeebe, management-api-for-apache-cassandra-5.0, elasticsearch-fips, infinispan, opensearch-fips, management-api-for-apache-cassandra-4.1, wazuh-indexer, strimzi-kafka-operator, apache-camel-karavan-devmode, kayenta, localstack, keycloak-fips,...

EUVD-2022-4059

Malicious code in bioql PyPI...

EUVD-2024-54328

Malicious code in bioql PyPI...

CVE-2025-55163 vulnerabilities

Vulnerabilities for packages: wildfly, thingsboard, apicurio-registry, apache-pulsar, strimzi-kafka-operator, tez, druid, flyway, keycloak, sonarqube, celeborn, apache-nifi, kserve-modelmesh, management-api-for-apache-cassandra-5.0, trino, akhq, spark...

Infinispan CLI 安全漏洞

Infinispan CLI is a command line interface for the Infinispan organization. A security vulnerability exists in the Infinispan CLI that stems from the use of plaintext passwords when handling Base64-encoded Kubernetes secrets, which could lead to the disclosure of sensitive information...

Infinispan Potential Out of Memory Error via REST Compare API Buffer API

A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API...

CVE-2024-6875

A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API...

CVE-2024-6875 Infinispan: infinispan: rest compare api has buffer leak

A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API...

CVE-2024-6875 Infinispan: infinispan: rest compare api has buffer leak

A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API...

CVE-2024-6875

A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API...

Infinispan vulnerable to Insertion of Sensitive Information into Log File

A flaw was found in Infinispan, when using JGroups with JDBCPING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by maliciou...

CVE-2025-0736 Org.infinispan-infinispan-parent: exposure of sensitive information in application logs

A flaw was found in Infinispan, when using JGroups with JDBCPING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by maliciou...

CVE-2025-0736

CVE-2025-0736 concerns Infinispan when used with JGroups/JDBC_PING, where sensitive information (e.g., configuration data or credentials) can be exposed through logging. This logging exposure can enable unauthorized access. Affected product/impact: Infinispan (org.infinispan-infinispan-parent) wi...

CVE-2025-0736 Org.infinispan-infinispan-parent: exposure of sensitive information in application logs

A flaw was found in Infinispan, when using JGroups with JDBCPING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by maliciou...