GHSA-MJ4R-2HFC-F8P6 vulnerabilities

Vulnerabilities for packages: neo4j, thingsboard, apache-activemq-artemis, management-api-for-apache-cassandra-5.0, keycloak, akhq, kserve-modelmesh, docker-selenium, infinispan, apache-nifi-registry, trino, kafka, apache-pulsar, opensearch, spark, druid, cassandra, wildfly, strimzi-kafka-operato...

GHSA-M4CV-J2PX-7723 vulnerabilities

Vulnerabilities for packages: neo4j, thingsboard, apache-activemq-artemis, management-api-for-apache-cassandra-5.0, keycloak, akhq, kserve-modelmesh, tez, docker-selenium, infinispan, apache-nifi-registry, trino, apache-pulsar, opensearch, spark, druid, strimzi-kafka-operator, zipkin,...

GHSA-V8H7-RR48-VMMV vulnerabilities

Vulnerabilities for packages: spark-fips, infinispan, apache-pulsar, knative-kafka-broker-fips, tez, druid, kafka-bridge, elasticsearch-fips, wavefront-proxy, docker-selenium, apache-camel-karavan-devmode, kayenta, pinot, apache-nifi-registry, flyway-fips, spark, strimzi-kafka-operator, selenium,...

org.apache.camel.kafkaconnector:camel-infinispan-sink-kafka-connector (>=4.0.0 <=4.14.5), org.apache.camel.kafkaconnector:camel-infinispan-source-kafka-connector (>=4.0.0 <=4.14.5) +8 more potentially affected by CVE-2026-40858 via org.apache.camel:camel-infinispan (>=4.0.0 <=4.14.6)

org.apache.camel:camel-infinispan MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.10.3, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.10.0, =4.0.0, =4.14.6 Source cves: CVE-2026-40858 Source advisory: OSV:GHSA-4XWX-HVV7-7PRJ...

EUVD-2022-4059

Malicious code in bioql PyPI...

EUVD-2024-54328

Malicious code in bioql PyPI...

CVE-2025-55163 vulnerabilities

Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-5.0, flyway, keycloak, akhq, keycloak-operator, kserve-modelmesh, tez, infinispan, sonarqube, trino, apache-pulsar, opensearch, spark, druid, debezium-connector-vitess, wildfly, strimzi-kafka-operator, apicurio-registr...

Infinispan CLI 安全漏洞

Infinispan CLI is a command line interface for the Infinispan organization. A security vulnerability exists in the Infinispan CLI that stems from the use of plaintext passwords when handling Base64-encoded Kubernetes secrets, which could lead to the disclosure of sensitive information...

Infinispan Potential Out of Memory Error via REST Compare API Buffer API

A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API...

CVE-2024-6875

A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API...

CVE-2024-6875 Infinispan: infinispan: rest compare api has buffer leak

A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API...

CVE-2024-6875 Infinispan: infinispan: rest compare api has buffer leak

A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API...

CVE-2024-6875

A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API...

Infinispan vulnerable to Insertion of Sensitive Information into Log File

A flaw was found in Infinispan, when using JGroups with JDBCPING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by maliciou...

CVE-2025-0736

CVE-2025-0736 concerns Infinispan when used with JGroups/JDBC_PING, where sensitive information (e.g., configuration data or credentials) can be exposed through logging. This logging exposure can enable unauthorized access. Affected product/impact: Infinispan (org.infinispan-infinispan-parent) wi...

CVE-2025-0736 Org.infinispan-infinispan-parent: exposure of sensitive information in application logs

A flaw was found in Infinispan, when using JGroups with JDBCPING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by maliciou...

CVE-2025-0736 Org.infinispan-infinispan-parent: exposure of sensitive information in application logs

A flaw was found in Infinispan, when using JGroups with JDBCPING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by maliciou...

CVE-2020-10746

A flaw was found in Infinispan org.infinispan:infinispan-server-runtime version 10, where it permits local access to controls via both REST and HotRod APIs. This flaw allows a user authenticated to the local machine to perform all operations on the caches, including the creation, update, deletion...

infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods

A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private methods in any class with Infinispan's privileges. The attacker can use reflection to introduce new, malicious behavior into the...

infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods

A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private methods in any class with Infinispan's privileges. The attacker can use reflection to introduce new, malicious behavior into the...