AZL-54020 CVE-2024-52798 affecting package reaper for versions less than 3.1.1-16

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated in the 0.1.x release of path-to-regexp. Upgra...

CBL Mariner 2.0 Security Update: reaper (CVE-2020-28458)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-28458 advisory. - All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for...

CVE-2020-28458 affecting package reaper for versions less than 3.1.1-15

CVE-2020-28458 affecting package reaper for versions less than 3.1.1-15. A patched version of the package is available...

CVE-2024-21538 affecting package reaper for versions less than 3.1.1-15

CVE-2024-21538 affecting package reaper for versions less than 3.1.1-15. A patched version of the package is available...

GHSA-XQ3W-V528-46RV vulnerabilities

Vulnerabilities for packages: keycloak, apicurio-registry, sonarqube...

CVE-2024-47535 vulnerabilities

Vulnerabilities for packages: keycloak, apicurio-registry, sonarqube...

AZL-52561 CVE-2024-21538 affecting package reaper for versions less than 3.1.1-15

Versions of the package cross-spawn before 6.0.6, from 7.0.0 and before 7.0.5 are vulnerable to Regular Expression Denial of Service ReDoS due to improper input sanitization. An attacker can increase the CPU usage and crash the program by crafting a very large and well crafted string...

CBL Mariner 2.0 Security Update: reaper (CVE-2024-45296)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45296 advisory. - path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a...

CBL Mariner 2.0 Security Update: python-tensorboard / reaper (CVE-2024-45590)

The version of python-tensorboard / reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45590 advisory. - body-parser is Node.js body parsing middleware. body-parser 1.20.3 is vulnerable to...

CBL Mariner 2.0 Security Update: reaper (CVE-2024-43799)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43799 advisory. - Send is a library for streaming files from the file system as a http response. Send passes untrusted user...

CBL Mariner 2.0 Security Update: reaper (CVE-2024-48949)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-48949 advisory. - The verify function in lib/elliptic/eddsa/index.js in the Elliptic package before 6.5.6 for Node.js omits...

CBL Mariner 2.0 Security Update: reaper (CVE-2024-43800)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43800 advisory. - serve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to...

CVE-2024-43799 affecting package reaper for versions less than 3.1.1-13

CVE-2024-43799 affecting package reaper for versions less than 3.1.1-13. A patched version of the package is available...

CVE-2024-45296 affecting package reaper for versions less than 3.1.1-13

CVE-2024-45296 affecting package reaper for versions less than 3.1.1-13. A patched version of the package is available...

CVE-2024-43800 affecting package reaper for versions less than 3.1.1-13

CVE-2024-43800 affecting package reaper for versions less than 3.1.1-13. A patched version of the package is available...

CVE-2024-48949 affecting package reaper for versions less than 3.1.1-13

CVE-2024-48949 affecting package reaper for versions less than 3.1.1-13. A patched version of the package is available...

CVE-2024-45590 affecting package reaper for versions less than 3.1.1-13

CVE-2024-45590 affecting package reaper for versions less than 3.1.1-13. A patched version of the package is available...

CVE-2024-47764 affecting package reaper for versions less than 3.1.1-13

CVE-2024-47764 affecting package reaper for versions less than 3.1.1-13. A patched version of the package is available...

GHSA-G8M5-722R-8WHQ vulnerabilities

Vulnerabilities for packages: cassandra-reaper, kafka, solr, zookeeper, apache-tika, cloudwatch-exporter, spark, celeborn, zookeeper-fips, druid, strimzi-kafka-operator, confluent-kafka, apache-nifi, spark-fips, confluent-kafka-jre-bcfips...

CVE-2024-8184 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, kafka, solr, zookeeper, apache-tika, cloudwatch-exporter, spark, celeborn, zookeeper-fips, druid, strimzi-kafka-operator, confluent-kafka, apache-nifi, spark-fips, confluent-kafka-jre-bcfips...