dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

CVE-2026-46457

CVE-2026-46457 — camel-nats Inbound Header Injection SSRF Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2 Camel Quarkus|...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nats-server2.12: nats-server2.12-2.12.15-0.3.hum1 aarch64, s390x, x8664 nats-server2.12-2.12.15-0.3.hum1.src src Security Fixes: nats-server2.12: CVE-2026-111943...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nats-server2.14: nats-server2.14-2.14.8-0.2.hum1 aarch64, s390x, x8664 nats-server2.14-2.14.8-0.2.hum1.src src Security Fixes: nats-server2.14: CVE-2026-111943...

CLEANSTART-2026-XD30138 NATS-Server is a High-Performance server for NATS

Security vulnerability affects the nats-server package. NATS-Server is a High-Performance server for NATS...

CLEANSTART-2026-VY06816 In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack ...

Security vulnerability affects the nats-server package. In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to...

CLEANSTART-2026-ST31777 NATS

Security vulnerability affects the nats-server package. NATS...

GO-2026-6607 vulnerabilities

Vulnerabilities for packages: influxd, commercial-nginx-ingress, crossplane-provider-aws-cognitoidp-fips, prometheus-statsd-exporter-fips, syncthing, knative-operator, crossplane-provider-aws-resourcegroups, ytt-fips, certificate-transparency, knative-serving-fips,...

GHSA-F5VF-8PVC-394G vulnerabilities

Vulnerabilities for packages: influxd, commercial-nginx-ingress, crossplane-provider-aws-cognitoidp-fips, syncthing, knative-operator, crossplane-provider-aws-resourcegroups, ytt-fips, certificate-transparency, knative-serving-fips, crossplane-provider-keycloak-fips, kubernetes, neuvector-scanner...

CVE-2026-56866 vulnerabilities

Vulnerabilities for packages: influxd, commercial-nginx-ingress, crossplane-provider-aws-cognitoidp-fips, syncthing, knative-operator, crossplane-provider-aws-resourcegroups, ytt-fips, certificate-transparency, knative-serving-fips, crossplane-provider-keycloak-fips, kubernetes, neuvector-scanner...

camel-nats: Apache Camel: Camel-NATS: Inbound NATS message headers are mapped into the Exchange without a configured HeaderFilterStrategy, allowing a client that can publish to the subject to inject Camel control headers

A flaw was found in Apache Camel NATS component. Due to improper input validation, a client capable of publishing to a NATS subject can inject arbitrary Camel control headers into the Camel Exchange. These injected headers can then influence the behavior of downstream producers in the route,...

EUVD-2026-86328

OpenObserve is a cloud-native observability platform. Prior to 0.90.3, OpenObserve registers the /config/runtime endpoint without authentication and serializes the complete server configuration after applying the hidesensitivefields keyword filter. The filter does not recognize dsn or creds field...

CLEANSTART-2025-FI25096 Security fix for GHSA-fhg8-qxh5-7q3w applied in: prometheus-nats-exporter 0.15.0-r0, prometheus-nats-exporter 0.16.0-r0

GHSA-fhg8-qxh5-7q3w affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JI58569 Security fix for CVE-2023-46129 applied in: nats-server-fips 2.10.4-r0

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QF31649 Security fix for CVE-2026-33249 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QU10811 Security fix for CVE-2026-33247 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YK24413 Security fix for CVE-2026-33248 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OV69039 Security fix for CVE-2026-33223 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YB47349 Security fix for CVE-2026-33222 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YJ62834 Security fix for CVE-2026-33219 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...