CVE-2026-45673 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, s3proxy-fips, opensearch, knative-kafka-broker-fips, knative-kafka-broker, apicurio-registry, infinispan, management-api-for-apache-cassandra-4.0, tez, druid, zipkin, airbyte-server-fips, kafbat-ui, kafka-bridge-fips, commercial-elasticsearch, kayent...

CVE-2026-45536 vulnerabilities

Vulnerabilities for packages: grpc-java-fips, apache-hop-fips, solr, s3proxy-fips, infinispan, localstack, management-api-for-apache-cassandra-4.0, druid, neo4j, tez, zipkin, airbyte-server-fips, cassandra-fips, kafbat-ui, kayenta, management-api-for-apache-cassandra-5.0, wildfly, kafka,...

CVE-2026-47244 vulnerabilities

Vulnerabilities for packages: grpc-java-fips, apache-hop-fips, opensearch, knative-kafka-broker-fips, knative-kafka-broker, apicurio-registry, infinispan, localstack, management-api-for-apache-cassandra-4.0, druid, zipkin, airbyte-server-fips, kafbat-ui, kafka-bridge-fips, commercial-elasticsearc...

CVE-2026-45674 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, s3proxy-fips, opensearch, knative-kafka-broker-fips, knative-kafka-broker, apicurio-registry, infinispan, management-api-for-apache-cassandra-4.0, tez, druid, zipkin, airbyte-server-fips, kafbat-ui, kafka-bridge-fips, commercial-elasticsearch, kayent...

camel-infinispan: camel-infinispan: Remote Code Execution via Unsafe Deserialization

A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the ProtoStream remote aggregation repository. A remote attacker with low privileges could exploit this by sending specially crafted data, leading to arbitrary code execution. This allows the attacker to...

org.apache.camel/camel-infinispan: Apache Camel camel-infinispan: Arbitrary code execution via deserialization of untrusted data

A flaw was found in the camel-infinispan component of Apache Camel. A remote attacker, with the ability to write to the Infinispan cache, can inject a specially crafted serialized Java object. When this object is deserialized during normal aggregation repository operations, it can lead to arbitra...

Unity Linux 20.1070e Security Update: infinispan (UTSA-2026-016712)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016712 advisory. The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this...

Unity Linux 20.1070e Security Update: infinispan (UTSA-2026-016716)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016716 advisory. It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the cache. An authenticated attacker cou...

org.apache.camel/camel-infinispan: Apache Camel camel-infinispan: Arbitrary code execution via deserialization of untrusted data

A flaw was found in the camel-infinispan component of Apache Camel. A remote attacker, with the ability to write to the Infinispan cache, can inject a specially crafted serialized Java object. When this object is deserialized during normal aggregation repository operations, it can lead to arbitra...

camel-infinispan: camel-infinispan: Remote Code Execution via Unsafe Deserialization

A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the ProtoStream remote aggregation repository. A remote attacker with low privileges could exploit this by sending specially crafted data, leading to arbitrary code execution. This allows the attacker to...

CVE-2026-42583 vulnerabilities

Vulnerabilities for packages: wildfly, docker-selenium, strimzi-kafka-operator, druid, neo4j, apicurio-registry, apache-nifi-registry, zookeeper, zipkin, spark, keycloak, apache-pulsar, selenium, management-api-for-apache-cassandra-5.0, flyway, akhq, cassandra, sonarqube, logstash, trino,...

GHSA-MJ4R-2HFC-F8P6 vulnerabilities

Vulnerabilities for packages: wildfly, docker-selenium, strimzi-kafka-operator, druid, neo4j, apicurio-registry, apache-nifi-registry, zookeeper, zipkin, spark, keycloak, apache-pulsar, selenium, management-api-for-apache-cassandra-5.0, flyway, akhq, cassandra, sonarqube, logstash, trino,...

CVE-2026-42581 vulnerabilities

Vulnerabilities for packages: docker-selenium, strimzi-kafka-operator, druid, neo4j, apicurio-registry, apache-nifi-registry, zipkin, spark, keycloak, apache-pulsar, selenium, management-api-for-apache-cassandra-5.0, flyway, akhq, sonarqube, logstash, trino, kserve-modelmesh, tez, infinispan,...

CVE-2026-42580 vulnerabilities

Vulnerabilities for packages: docker-selenium, strimzi-kafka-operator, druid, neo4j, apicurio-registry, apache-nifi-registry, zipkin, spark, keycloak, apache-pulsar, selenium, management-api-for-apache-cassandra-5.0, flyway, akhq, sonarqube, logstash, trino, kserve-modelmesh, tez, infinispan,...

GHSA-57RV-R2G8-2CJ3 vulnerabilities

Vulnerabilities for packages: docker-selenium, strimzi-kafka-operator, druid, neo4j, apicurio-registry, apache-nifi-registry, zipkin, spark, keycloak, apache-pulsar, selenium, management-api-for-apache-cassandra-5.0, flyway, akhq, sonarqube, logstash, trino, kserve-modelmesh, tez, infinispan,...

GHSA-38F8-5428-X5CV vulnerabilities

Vulnerabilities for packages: docker-selenium, strimzi-kafka-operator, druid, neo4j, apicurio-registry, apache-nifi-registry, zipkin, spark, keycloak, apache-pulsar, selenium, management-api-for-apache-cassandra-5.0, flyway, akhq, sonarqube, logstash, trino, kserve-modelmesh, tez, infinispan,...

GHSA-F6HV-JMP6-3VWV vulnerabilities

Vulnerabilities for packages: wildfly, docker-selenium, strimzi-kafka-operator, druid, neo4j, apicurio-registry, apache-nifi-registry, zipkin, spark, keycloak, apache-pulsar, selenium, management-api-for-apache-cassandra-5.0, flyway, akhq, sonarqube, logstash, trino, kserve-modelmesh, tez,...

GHSA-XXQH-MFJM-7MV9 vulnerabilities

Vulnerabilities for packages: docker-selenium, strimzi-kafka-operator, druid, neo4j, apicurio-registry, apache-nifi-registry, zipkin, spark, keycloak, apache-pulsar, selenium, management-api-for-apache-cassandra-5.0, flyway, akhq, sonarqube, logstash, trino, kserve-modelmesh, tez, infinispan,...

GHSA-M4CV-J2PX-7723 vulnerabilities

Vulnerabilities for packages: docker-selenium, strimzi-kafka-operator, druid, neo4j, apicurio-registry, apache-nifi-registry, zipkin, spark, keycloak, apache-pulsar, selenium, management-api-for-apache-cassandra-5.0, flyway, akhq, sonarqube, logstash, trino, kserve-modelmesh, tez, infinispan,...

CVE-2026-42587 vulnerabilities

Vulnerabilities for packages: wildfly, docker-selenium, strimzi-kafka-operator, druid, neo4j, apicurio-registry, apache-nifi-registry, zipkin, spark, keycloak, apache-pulsar, selenium, management-api-for-apache-cassandra-5.0, flyway, akhq, sonarqube, logstash, trino, kserve-modelmesh, tez,...