bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

tools-python

Biblioteca Python para analizar, validar y crear documentos SPDX Estado de CI Linux, macOS y Windows: Cambios importantes v0.7 - v0.8 Tenga en cuenta que la próxima versión 0.8 ha experimentado una refactorización significativa en preparación para el lanzamiento de SPDX v3.0, lo que conlleva...

GHSA-642R-3GJ9-2PJ5 vulnerabilities

Vulnerabilities for packages: scala, apache-tika, druid, sonarqube, keycloak-config-cli, apicurio-registry, flyway, infinispan, dependency-track, apache-nifi, wildfly, spdx-tools-java, keycloak, apache-nifi-registry, spark, opensearch, akhq, logstash, trino, gradle, strimzi-kafka-operator, tez,...

CVE-2026-68494 vulnerabilities

Vulnerabilities for packages: scala, apache-tika, druid, sonarqube, keycloak-config-cli, apicurio-registry, flyway, infinispan, dependency-track, apache-nifi, wildfly, spdx-tools-java, keycloak, apache-nifi-registry, spark, opensearch, akhq, logstash, trino, gradle, strimzi-kafka-operator, tez,...

bom-view

BOM View Una aplicación web estática y sencilla para visualizar dependencias de software a partir de archivos de Lista de Materiales de Software SBOM. Al ser un sitio estático, se puede alojar fácilmente en cualquier servicio de alojamiento web estático, como GitLab Pages, GitHub Pages o Netlify...

GHSA-WJGM-6HV5-3CVF vulnerabilities

Vulnerabilities for packages: solr, ruby3.4-jrjackson, celeborn, apache-tika, scala, ruby3.3-jrjackson, druid, sonarqube, keycloak-config-cli, apicurio-registry, confluent-kafka, kafka, ruby4.0-jrjackson, flyway, zipkin, infinispan, neo4j, dependency-track, thingsboard, ruby3.2-jrjackson,...

CVE-2026-83557 vulnerabilities

Vulnerabilities for packages: solr, ruby3.4-jrjackson, celeborn, apache-tika, scala, ruby3.3-jrjackson, druid, sonarqube, keycloak-config-cli, apicurio-registry, confluent-kafka, kafka, ruby4.0-jrjackson, flyway, zipkin, infinispan, neo4j, dependency-track, thingsboard, ruby3.2-jrjackson,...

CVE-2026-68497 vulnerabilities

Vulnerabilities for packages: solr, ruby3.4-jrjackson, celeborn, apache-tika, scala, ruby3.3-jrjackson, druid, sonarqube, keycloak-config-cli, apicurio-registry, confluent-kafka, kafka, ruby4.0-jrjackson, flyway, zipkin, infinispan, neo4j, dependency-track, thingsboard, ruby3.2-jrjackson,...

GHSA-GX83-3VF8-GH7J vulnerabilities

Vulnerabilities for packages: solr, ruby3.4-jrjackson, celeborn, apache-tika, scala, ruby3.3-jrjackson, druid, sonarqube, keycloak-config-cli, apicurio-registry, confluent-kafka, kafka, ruby4.0-jrjackson, flyway, zipkin, infinispan, neo4j, dependency-track, thingsboard, ruby3.2-jrjackson,...

ndaal_public_SBOM_Auditor

ndaal SBOM Auditor A single-binary, offline web application to investigate SBOM Software Bill of Materials files. Upload an SBOM or import a folder of them, analyse each with an ensemble of independent tools, review the normalised findings in one local UI, and export the result in eight formats. ...

openSUSE 16 Security Update : syft (openSUSE-SU-2026:20928-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20928-1 advisory. Changes in syft: - Update to version 1.45.0: Added Features - Add support for ZapAddOns as jar files 4654 4932 @douglasclarke - MySQL binary classifier...

OPENSUSE-SU-2026:20928-1 Security update for syft

This update for syft fixes the following issues: Changes in syft: - Update to version 1.45.0: Added Features - Add support for ZapAddOns as jar files 4654 4932 @douglasclarke - MySQL binary classifier should distinguish between MySQL Cluster ndb and MySQL 3297 4907 @witchcraze - Catalog...

GHSA-72HV-8253-57QQ vulnerabilities

Vulnerabilities for packages: solr, ruby3.4-jrjackson, celeborn, apache-tika, scala, ruby3.3-jrjackson, management-api-for-apache-cassandra-5.0, druid, sonarqube, apicurio-registry, confluent-kafka, kafka, ruby4.0-jrjackson, flyway, zipkin, infinispan, neo4j, dependency-track, thingsboard,...

GHSA-72HV-8253-57QQ vulnerabilities

Vulnerabilities for packages: neo4j, wso2is, ruby3.3-jrjackson, nacos-docker, confluent-kafka-jre-bcfips, ontop, cassandra-reaper, apache-pulsar-fips, thingsboard, reposilite, airflow, kafka, zipkin, solr, kafka-bridge-fips, apache-hop, localstack, confluent-kafka, gradle-stage0, conductor,...

Ubuntu: Security Advisory (USN-7654-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: hadoop-fips, celeborn, akhq, neo4j, apache-activemq-artemis, apache-nifi, confluent-kafka-jre-bcfips, cassandra-reaper, wildfly, kafka, tez, sonarqube, druid, confluent-common-docker, opensearch, solr, solr-fips, strimzi-kafka-operator, trino, jenkins-plugin-manager,...

php:8.2 security update

php 8.2.28-1 - rebase to 8.2.28 8.2.25-1 - rebase to 8.2.25 RHEL-65837 8.2.13-1 - rebase to 8.2.13 RHEL-14699 - add %phpize and %phpconfig macros - move httpd/nginx wants directives to config files in /etc - php-fpm.conf: move include directive after global section following upstream example,...

openSUSE Security Advisory (SUSE-SU-2024:2135-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:2802-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 37 : woff (2022-c30d362ce5)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-c30d362ce5 advisory. Fix a possible double free in woffEncode. - Update License to SPDX - improved summary and description - Add hand-written man pages - Install HTML format...