EUVD-2023-3281

Malicious code in bioql PyPI...

CVE-2025-58056 vulnerabilities

Vulnerabilities for packages: apicurio-registry, opensearch, flyway, apache-nifi, tez, selenium, docker-selenium, wildfly, apache-pulsar, apache-activemq-artemis, celeborn, trino, kserve-modelmesh, zipkin, akhq, strimzi-kafka-operator, sonarqube, druid, wavefront-proxy, thingsboard...

GHSA-FGHV-69VJ-QJ49 vulnerabilities

Vulnerabilities for packages: apicurio-registry, opensearch, flyway, apache-nifi, tez, selenium, docker-selenium, wildfly, apache-pulsar, apache-activemq-artemis, celeborn, trino, kserve-modelmesh, zipkin, akhq, strimzi-kafka-operator, sonarqube, druid, wavefront-proxy, thingsboard...

CVE-2025-58056 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, tez, strimzi-kafka-operator, apache-hop, management-api-for-apache-cassandra-4.0, apicurio-registry, elasticsearch-fips, localstack, management-api-for-apache-cassandra-4.1, apache-nifi, spark-fips, akhq, keycloak, kserve-modelmesh, zipkin,...

GHSA-FGHV-69VJ-QJ49 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, tez, strimzi-kafka-operator, apache-hop, management-api-for-apache-cassandra-4.0, apicurio-registry, elasticsearch-fips, localstack, management-api-for-apache-cassandra-4.1, apache-nifi, spark-fips, akhq, keycloak, kserve-modelmesh, zipkin,...

GHSA-3P8M-J85Q-PGMJ vulnerabilities

Vulnerabilities for packages: wavefront-proxy, cassandra, tez, strimzi-kafka-operator, apache-hop, management-api-for-apache-cassandra-4.0, apicurio-registry, logstash-input-beats, elasticsearch-fips, localstack, management-api-for-apache-cassandra-4.1, apache-nifi, cassandra-fips, spark-fips,...

GHSA-PRJ3-CCX8-P6X4 vulnerabilities

Vulnerabilities for packages: trino, apicurio-registry, kserve-modelmesh, management-api-for-apache-cassandra-5.0, keycloak, sonarqube, strimzi-kafka-operator, thingsboard, druid, spark, akhq, wildfly, flyway, apache-nifi, apache-pulsar, tez, celeborn...

CVE-2025-55163 vulnerabilities

Vulnerabilities for packages: trino, apicurio-registry, kserve-modelmesh, management-api-for-apache-cassandra-5.0, keycloak, sonarqube, strimzi-kafka-operator, thingsboard, druid, spark, akhq, wildfly, flyway, apache-nifi, apache-pulsar, tez, celeborn...

CVE-2025-55163 vulnerabilities

Vulnerabilities for packages: tez, strimzi-kafka-operator, apache-hop, management-api-for-apache-cassandra-4.0, apicurio-registry, elasticsearch-fips, localstack, management-api-for-apache-cassandra-4.1, apache-nifi, spark-fips, akhq, keycloak, kserve-modelmesh, infinispan, seata, elasticsearch,...

GHSA-PRJ3-CCX8-P6X4 vulnerabilities

Vulnerabilities for packages: tez, strimzi-kafka-operator, apache-hop, management-api-for-apache-cassandra-4.0, apicurio-registry, elasticsearch-fips, localstack, management-api-for-apache-cassandra-4.1, apache-nifi, spark-fips, akhq, keycloak, kserve-modelmesh, infinispan, seata, elasticsearch,...

infinispan: Credential Leakage in Infinispan CLI

A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found...

Sensitive Data Exposure

Infinispan CLI is vulnerable to sensitive data exposure. The vulnerability is due to processing a Base64-decoded Kubernetes secret password in plaintext and including it in a command string, which may expose the data in error messages when a command is not found, allowing attackers to exploit thi...

GHSA-CQM8-RG2P-JFCF Infinispan CLI vulnerable to Generation of Error Message Containing Sensitive Information

A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found...

Infinispan CLI vulnerable to Generation of Error Message Containing Sensitive Information

A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found...

CVE-2025-5731

A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the execute function in the CliRuntimeRunner.java file, which is included in a command string and may be exposed in an error message if a command is not found. An attacker can obtain sensitive credential...

CVE-2025-5731 Infinispan: credential leakage in infinispan cli

A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found...

CVE-2025-5731 Infinispan: credential leakage in infinispan cli

A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found...

CVE-2025-5731

Summary: CVE-2025-5731 affects the Infinispan CLI, where a credential decoded from a Kubernetes secret is handled in plaintext and can appear in a command string, potentially leaking data in an error message when a command is not found. Root cause: insecure processing/embedding of the decoded sec...

CVE-2025-5731 Infinispan: credential leakage in infinispan cli

A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed in plaintext and included in a command string that may expose the data in an error message when a command is not found...