Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: jgroups (UTSA-2026-031601)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031601 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

EUVD-2012-2367

Malware in sbrugna...

EUVD-2013-2074

Malware in sbrugna...

EUVD-2022-5146

Malicious code in bioql PyPI...

EUVD-2025-0116

Malicious code in bioql PyPI...

EUVD-2025-0239

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2016-2141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw t...

org.elasticsearch:elasticsearch-analysis-icu (0.7.0), org.elasticsearch:elasticsearch-client-groovy (0.7.0) +3 more potentially affected by CVE-2024-52979 via org.elasticsearch:elasticsearch (0.7.0)

org.elasticsearch:elasticsearch MAVEN version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.7.0 - org.elasticsearch:elasticsearch-client-groov...

GHSA-G6QQ-C9F9-2772 Keycloak on Quarkus CLI option for encrypted JGroups ignored

The env option KCCACHEEMBEDDEDMTLSENABLED does not work and the jgroups replication configuration is always used in plain. This option worked before in 24 and 22. More info in public issue https://github.com/keycloak/keycloak/issues/34644...

Keycloak on Quarkus CLI option for encrypted JGroups ignored

The env option KCCACHEEMBEDDEDMTLSENABLED does not work and the jgroups replication configuration is always used in plain. This option worked before in 24 and 22. More info in public issue https://github.com/keycloak/keycloak/issues/34644...

org.infinispan.wildfly:infinispan-server-commons (>=10.0.0.cr3, <=11.0.0.dev04), org.infinispan.wildfly:infinispan-server-jgroups (>=10.0.0.cr3, <=11.0.0.dev04) +75 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (10.0.0.final)

org.wildfly.core:wildfly-server MAVEN version 10.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.infinispan.wildfly:infinispan-server-commons =10.0.0.cr3, =10.0.0.cr3, =10.0.0.cr3,...

Sensitive Information Exposure

Infinispan is vulnerable to Sensitive Information Exposure. The vulnerability is due to improper logging due to the exposure of sensitive information, such as configuration details or credentials, through logging mechanisms when using JGroups with JDBCPING...

CVE-2025-0736

A flaw was found in Infinispan, when using JGroups with JDBCPING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by maliciou...

CVE-2025-0736 Org.infinispan-infinispan-parent: exposure of sensitive information in application logs

A flaw was found in Infinispan, when using JGroups with JDBCPING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by maliciou...

CVE-2025-0736: Insertion of Sensitive Information into Log File

A flaw was found in Infinispan, when using JGroups with JDBCPING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by maliciou...

CVE-2025-0736

A flaw was found in Infinispan, when using JGroups with JDBCPING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by maliciou...

PT-2025-4027

Name of the Vulnerable Software and Affected Versions Infinispan affected versions not specified Description A flaw was found in Infinispan when using JGroups with JDBC PING, causing the exposure of sensitive information such as configuration details or credentials through logging mechanisms. Thi...

org.elasticsearch:elasticsearch-analysis-icu (0.8.0), org.elasticsearch:elasticsearch-client-groovy (0.8.0) +4 more potentially affected by CVE-2024-43709 via org.elasticsearch:elasticsearch (0.8.0)

org.elasticsearch:elasticsearch MAVEN version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.8.0 - org.elasticsearch:elasticsearch-client-groov...

org.elasticsearch:elasticsearch-analysis-icu (0.7.1), org.elasticsearch:elasticsearch-client-groovy (0.7.1) +3 more potentially affected by CVE-2024-43709 via org.elasticsearch:elasticsearch (0.7.1)

org.elasticsearch:elasticsearch MAVEN version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.7.1 - org.elasticsearch:elasticsearch-client-groov...

Cleartext Transmission Of Sensitive Information

Keycloak is vulnerable to plain text replication. The vulnerability is due to the environment option KCCACHEEMBEDDEDMTLSENABLED not functioning as intended, resulting in JGroups replication configuration always using plain text, which allows attackers on adjacent networks to intercept and read...