13 matches found
GHSA-PMHH-3W7G-XQP8 vulnerabilities
Vulnerabilities for packages: apache-hop, conductor-fips, elasticsearch, wazuh-indexer, elasticsearch-fips, apache-hop-fips, scala, gradle, copybara, metabase, opensearch-fips, apache-tika-fips, nextflow, copybara-fips, opensearch, apache-tika, jbang, conductor, spdx-tools-java...
CVE-2026-71497 vulnerabilities
Vulnerabilities for packages: apache-hop, conductor-fips, elasticsearch, wazuh-indexer, elasticsearch-fips, apache-hop-fips, scala, gradle, copybara, metabase, opensearch-fips, apache-tika-fips, nextflow, copybara-fips, opensearch, apache-tika, jbang, conductor, spdx-tools-java...
GHSA-PMHH-3W7G-XQP8 vulnerabilities
Vulnerabilities for packages: apache-tika, opensearch, nextflow, spdx-tools-java, gradle...
CVE-2026-71497 vulnerabilities
Vulnerabilities for packages: apache-tika, opensearch, nextflow, spdx-tools-java, gradle...
GHSA-P47F-322F-WHFH vulnerabilities
Vulnerabilities for packages: ranger, management-api-for-apache-cassandra-5.0, zookeeper-fips, knative-kafka-broker-fips, keycloak-config-cli, ontop-fips, management-api-for-apache-cassandra-4.1, airbyte-server, s3proxy, sonarqube, cassandra-fips, management-api-for-apache-cassandra-4.0,...
CVE-2026-9828 vulnerabilities
Vulnerabilities for packages: ranger, management-api-for-apache-cassandra-5.0, zookeeper-fips, knative-kafka-broker-fips, keycloak-config-cli, ontop-fips, management-api-for-apache-cassandra-4.1, airbyte-server, s3proxy, sonarqube, cassandra-fips, management-api-for-apache-cassandra-4.0,...
GHSA-P47F-322F-WHFH vulnerabilities
Vulnerabilities for packages: cassandra, zookeeper, akhq, management-api-for-apache-cassandra-5.0, sonarqube, cassandra-reaper, kserve-modelmesh, sonar-scanner-cli, nextflow, keycloak-config-cli...
CVE-2026-9828 vulnerabilities
Vulnerabilities for packages: cassandra, zookeeper, akhq, management-api-for-apache-cassandra-5.0, sonarqube, cassandra-reaper, kserve-modelmesh, sonar-scanner-cli, nextflow, keycloak-config-cli...
GHSA-92QF-FCPH-V5WR nextflow auth login command has incorrect default permissions
Impact nextflow auth login persists Seqera Platform OIDC tokens to $NXFHOME:-/.nextflow/seqera-auth.config. The file is created via Java NIO without specifying file permissions, so under the default umask 022 it lands at mode 0644 world-readable. On a multi-user POSIX host — typically an HPC logi...
CVE-2025-70952 vulnerabilities
Vulnerabilities for packages: nextflow...
GHSA-5458-7HH9-V7P4 vulnerabilities
Vulnerabilities for packages: nextflow...