com.epam.reportportal:agent-java-cucumber (2.6.1), com.epam.reportportal:agent-java-jbehave (2.6.0) +29 more potentially affected by CVE-2026-41006 via org.springframework.hateoas:spring-hateoas (0.18.0.release)

org.springframework.hateoas:spring-hateoas MAVEN version 0.18.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - com.epam.reportportal:agent-java-cucumber 2.6.1 -...

com.epam.reportportal:agent-java-cucumber (2.6.1), com.epam.reportportal:agent-java-jbehave (2.6.0) +29 more potentially affected by CVE-2026-41007 via org.springframework.hateoas:spring-hateoas (0.18.0.release)

org.springframework.hateoas:spring-hateoas MAVEN version 0.18.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - com.epam.reportportal:agent-java-cucumber 2.6.1 -...

CVE-2023-25822

ReportPortal is an AI-powered test automation platform. Prior to version 5.10.0 of the com.epam.reportportal:service-api module, corresponding to ReportPortal version 23.2, the ReportPortal database becomes unstable and reporting almost fully stops except for small launches with approximately 1...

EUVD-2023-2774

Malicious code in bioql PyPI...

com.epam.reportportal:commons-dao (5.0.0), com.epam.reportportal:plugin-api (5.0.0) +2 more potentially affected by CVE-2025-59952 via io.minio:minio (6.0.10)

io.minio:minio MAVEN version 6.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on io.minio:minio and may be impacted: - com.epam.reportportal:commons-dao 5.0.0 - com.epam.reportportal:plugin-api 5.0.0 - com.epam.reportportal:service-api 5.0.0 -...

nl.praegus:toolchain-reportportal-listener (>=2.0.0, <=2.0.3) potentially affected by CVE-2024-42499 via org.fitnesse:fitnesse (20190110)

org.fitnesse:fitnesse MAVEN version 20190110 is affected by a known vulnerability. The following packages have a transitive dependency on org.fitnesse:fitnesse and may be impacted: - nl.praegus:toolchain-reportportal-listener =2.0.0, =2.0.3 Source cves: CVE-2024-42499 Source advisory:...

nl.praegus:toolchain-reportportal-listener (>=2.0.0, <=2.0.3) potentially affected by CVE-2024-39610 via org.fitnesse:fitnesse (20190110)

org.fitnesse:fitnesse MAVEN version 20190110 is affected by a known vulnerability. The following packages have a transitive dependency on org.fitnesse:fitnesse and may be impacted: - nl.praegus:toolchain-reportportal-listener =2.0.0, =2.0.3 Source cves: CVE-2024-39610 Source advisory:...

MAL-2024-8820 Malicious code in testcafe-reporter-ayx-reportportal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 56e9fb2a7d91d090c5daebf11bf839a8c406149a5eb97098ced6820c0285e4ea The OpenSSF Package Analysis project identified 'testcafe-reporter-ayx-reportportal' @ 3.9.11 npm as malicious. It is considered malicious...

Malicious code in testcafe-reporter-ayx-reportportal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 56e9fb2a7d91d090c5daebf11bf839a8c406149a5eb97098ced6820c0285e4ea The OpenSSF Package Analysis project identified 'testcafe-reporter-ayx-reportportal' @ 3.9.11 npm as malicious. It is considered malicious...

nl.praegus:toolchain-reportportal-listener (>=2.0.0, <=2.0.3) potentially affected by CVE-2024-28128 via org.fitnesse:fitnesse (20190110)

org.fitnesse:fitnesse MAVEN version 20190110 is affected by a known vulnerability. The following packages have a transitive dependency on org.fitnesse:fitnesse and may be impacted: - nl.praegus:toolchain-reportportal-listener =2.0.0, =2.0.3 Source cves: CVE-2024-28128 Source advisory:...

nl.praegus:toolchain-reportportal-listener (>=2.0.0, <=2.0.3) potentially affected by CVE-2024-28125 via org.fitnesse:fitnesse (20190110)

org.fitnesse:fitnesse MAVEN version 20190110 is affected by a known vulnerability. The following packages have a transitive dependency on org.fitnesse:fitnesse and may be impacted: - nl.praegus:toolchain-reportportal-listener =2.0.0, =2.0.3 Source cves: CVE-2024-28125 Source advisory:...

Denial Of Service (DoS)

ReportPortal is vulnerable to Denial Of Service. The vulnerability is due to exceeding the allowable ltree field type indexing limit in the testitem.path field which results in denial of service...

Denial of service vulnerability on creating a Launch with too many recursively nested elements in reportportal

Impact ReportPortal database becomes unstable and reporting almost fully stops except for small launches with approximately 1 test inside when the testitem.path field is exceeded the allowable "ltree" field type indexing limit path length=120 approximately, recursive nesting of the nested steps...

GHSA-MJ24-GPW7-23M9 Denial of service vulnerability on creating a Launch with too many recursively nested elements in reportportal

Impact ReportPortal database becomes unstable and reporting almost fully stops except for small launches with approximately 1 test inside when the testitem.path field is exceeded the allowable "ltree" field type indexing limit path length=120 approximately, recursive nesting of the nested steps...

CVE-2023-25822

ReportPortal is an AI-powered test automation platform. Prior to version 5.10.0 of the com.epam.reportportal:service-api module, corresponding to ReportPortal version 23.2, the ReportPortal database becomes unstable and reporting almost fully stops except for small launches with approximately 1...

Design/Logic Flaw

ReportPortal is an AI-powered test automation platform. Prior to version 5.10.0 of the com.epam.reportportal:service-api module, corresponding to ReportPortal version 23.2, the ReportPortal database becomes unstable and reporting almost fully stops except for small launches with approximately 1...

CVE-2023-25822 ReportPortal DoS vulnerability on creating a Launch with too many recursively nested elements

ReportPortal is an AI-powered test automation platform. Prior to version 5.10.0 of the com.epam.reportportal:service-api module, corresponding to ReportPortal version 23.2, the ReportPortal database becomes unstable and reporting almost fully stops except for small launches with approximately 1...

CVE-2023-25822 ReportPortal DoS vulnerability on creating a Launch with too many recursively nested elements

ReportPortal is an AI-powered test automation platform. Prior to version 5.10.0 of the com.epam.reportportal:service-api module, corresponding to ReportPortal version 23.2, the ReportPortal database becomes unstable and reporting almost fully stops except for small launches with approximately 1...

CVE-2023-25822 ReportPortal DoS vulnerability on creating a Launch with too many recursively nested elements

ReportPortal is an AI-powered test automation platform. Prior to version 5.10.0 of the com.epam.reportportal:service-api module, corresponding to ReportPortal version 23.2, the ReportPortal database becomes unstable and reporting almost fully stops except for small launches with approximately 1...

CVE-2023-25822

ReportPortal is an AI-powered test automation platform. Prior to version 5.10.0 of the com.epam.reportportal:service-api module, corresponding to ReportPortal version 23.2, the ReportPortal database becomes unstable and reporting almost fully stops except for small launches with approximately 1...