CVE-2018-11694 affecting package reaper for versions less than 3.1.1-6

CVE-2018-11694 affecting package reaper for versions less than 3.1.1-6. A patched version of the package is available...

com.stratio.cassandra:cassandra-lucene-index-plugin (>=2.2.7.0, <=2.2.7.1), io.cassandrareaper:cassandra-reaper (>=1.0.2, <=1.1.0) potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (2.2.7)

org.apache.cassandra:cassandra-all MAVEN version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.stratio.cassandra:cassandra-lucene-index-plugin =2.2.7.0, =1.0.2, =1.1.0 Source cves:...

com.spotify:scio-cassandra2_2.11 (>=0.6.0, <=0.7.0-beta1), com.spotify:scio-cassandra2_2.12 (>=0.6.0, <=0.7.0-beta1) +1 more potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (2.2.12)

org.apache.cassandra:cassandra-all MAVEN version 2.2.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.spotify:scio-cassandra22.11 =0.6.0, =0.6.0, =1.2.2, =2.0 Source cves: CVE-2025-23015...

CVE-2023-0286 affecting package reaper 3.1.1-6

CVE-2023-0286 affecting package reaper 3.1.1-6. This CVE either no longer is or was never applicable...

GHSA-PR98-23F8-JWXV vulnerabilities

Vulnerabilities for packages: sonarqube-10, management-api-for-apache-cassandra-4.1, kserve-modelmesh, zookeeper-fips, sonar-scanner-cli, management-api-for-apache-cassandra-5.0, thingsboard, tez, ontop-fips, cassandra-fips, apache-nifi, trino, sonarqube, akhq, hadoop-fips, cassandra,...

GHSA-6V67-2WR5-GVF4 vulnerabilities

Vulnerabilities for packages: sonarqube-10, management-api-for-apache-cassandra-4.1, kserve-modelmesh, zookeeper-fips, sonar-scanner-cli, management-api-for-apache-cassandra-5.0, thingsboard, tez, ontop-fips, cassandra-fips, apache-nifi, trino, sonarqube, akhq, hadoop-fips, cassandra,...

CVE-2024-12801 vulnerabilities

Vulnerabilities for packages: sonarqube-10, management-api-for-apache-cassandra-4.1, kserve-modelmesh, zookeeper-fips, sonar-scanner-cli, management-api-for-apache-cassandra-5.0, thingsboard, tez, ontop-fips, cassandra-fips, apache-nifi, trino, sonarqube, akhq, hadoop-fips, cassandra,...

CVE-2024-12798 vulnerabilities

Vulnerabilities for packages: sonarqube-10, management-api-for-apache-cassandra-4.1, kserve-modelmesh, zookeeper-fips, sonar-scanner-cli, management-api-for-apache-cassandra-5.0, thingsboard, tez, ontop-fips, cassandra-fips, apache-nifi, trino, sonarqube, akhq, hadoop-fips, cassandra,...

AZL-54020 CVE-2024-52798 affecting package reaper for versions less than 3.1.1-16

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated in the 0.1.x release of path-to-regexp. Upgra...

CBL Mariner 2.0 Security Update: reaper (CVE-2020-28458)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-28458 advisory. - All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for...

CVE-2020-28458 affecting package reaper for versions less than 3.1.1-15

CVE-2020-28458 affecting package reaper for versions less than 3.1.1-15. A patched version of the package is available...

CVE-2024-21538 affecting package reaper for versions less than 3.1.1-15

CVE-2024-21538 affecting package reaper for versions less than 3.1.1-15. A patched version of the package is available...

GHSA-XQ3W-V528-46RV vulnerabilities

Vulnerabilities for packages: sonarqube, apicurio-registry, keycloak...

CVE-2024-47535 vulnerabilities

Vulnerabilities for packages: sonarqube, apicurio-registry, keycloak...

AZL-52561 CVE-2024-21538 affecting package reaper for versions less than 3.1.1-15

Versions of the package cross-spawn before 6.0.6, from 7.0.0 and before 7.0.5 are vulnerable to Regular Expression Denial of Service ReDoS due to improper input sanitization. An attacker can increase the CPU usage and crash the program by crafting a very large and well crafted string...

CBL Mariner 2.0 Security Update: reaper (CVE-2024-45296)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45296 advisory. - path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a...

CBL Mariner 2.0 Security Update: python-tensorboard / reaper (CVE-2024-45590)

The version of python-tensorboard / reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45590 advisory. - body-parser is Node.js body parsing middleware. body-parser 1.20.3 is vulnerable to...

CBL Mariner 2.0 Security Update: reaper (CVE-2024-43800)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43800 advisory. - serve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to...

CBL Mariner 2.0 Security Update: reaper (CVE-2024-43799)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43799 advisory. - Send is a library for streaming files from the file system as a http response. Send passes untrusted user...

CBL Mariner 2.0 Security Update: reaper (CVE-2024-48949)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-48949 advisory. - The verify function in lib/elliptic/eddsa/index.js in the Elliptic package before 6.5.6 for Node.js omits...