GHSA-2HMJ-97JW-28JH vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, apache-pulsar, thingsboard, spark, trino, solr, apache-activemq-artemis...

GHSA-2HMJ-97JW-28JH vulnerabilities

Vulnerabilities for packages: apache-pulsar, apache-activemq-artemis, spark-fips, thingsboard, strimzi-kafka-operator, spark, solr, trino...

CVE-2025-58457 vulnerabilities

Vulnerabilities for packages: apache-pulsar, apache-activemq-artemis, spark-fips, thingsboard, strimzi-kafka-operator, spark, solr, trino...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: kapp, cluster-api-helm-controller, cerbos, rancher-system-upgrade-controller, tflint, dragonfly-operator, prometheus-operator, vault, helm-push, spire-controller-manager, nodetaint, buildkitd, conftest, chart-testing, kubernetes-dashboard, rancher, steampipe,...

CVE-2025-10250 DJI Mavic Spark/Mavic Air/Mavic Mini Telemetry Channel hard-coded key

A weakness has been identified in DJI Mavic Spark, Mavic Air and Mavic Mini 01.00.0500. Affected is an unknown function of the component Telemetry Channel. Executing manipulation can lead to use of hard-coded cryptographic key . The attacker needs to be present on the local network. A high...

CVE-2025-10250 DJI Mavic Spark/Mavic Air/Mavic Mini Telemetry Channel hard-coded key

A weakness has been identified in DJI Mavic Spark, Mavic Air and Mavic Mini 01.00.0500. Affected is an unknown function of the component Telemetry Channel. Executing manipulation can lead to use of hard-coded cryptographic key . The attacker needs to be present on the local network. A high...

CVE-2025-10250

CVE-2025-10250 affects DJI Mavic Spark/Mavic Air/Mavic Mini (firmware 01.00.0500) due to a hard-coded cryptographic key in the Telemetry Channel. A local-network attacker can exploit this, with the vulnerability described as high attack complexity and publicly released exploit; affected products ...

PT-2025-37174

Name of the Vulnerable Software and Affected Versions: DJI Mavic Spark version 01.00.0500 DJI Mavic Air version 01.00.0500 DJI Mavic Mini version 01.00.0500 Description: A weakness exists in the Telemetry Channel component due to the use of a hard-coded cryptographic key. An attacker present on t...

CVE-2025-58056 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, hadoop-fips, seata, spark-fips, thingsboard, apache-hop, selenium, strimzi-kafka-operator, spark, infinispan, elasticsearch, camunda-zeebe, trino, celeborn, zipkin, druid, tez, kserve-modelmesh, grpc-java-fips, docker-selenium, localstack,...

GHSA-FGHV-69VJ-QJ49 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, hadoop-fips, seata, spark-fips, thingsboard, apache-hop, selenium, strimzi-kafka-operator, spark, infinispan, elasticsearch, camunda-zeebe, trino, celeborn, zipkin, druid, tez, kserve-modelmesh, grpc-java-fips, docker-selenium, localstack,...

Malicious code in spark-webpack-react-app (npm)

The package spark-webpack-react-app was found to contain malicious code...

Malicious code in artillery-engine-spark (npm)

The package artillery-engine-spark was found to contain malicious code...

Malicious code in spark-browser-extension (npm)

The package spark-browser-extension was found to contain malicious code...

MAL-2025-43516 Malicious code in artillery-engine-spark (npm)

The package artillery-engine-spark was found to contain malicious code...

MAL-2025-46117 Malicious code in spark-webpack-react-app (npm)

The package spark-webpack-react-app was found to contain malicious code...

Malicious code in spark-nextjs-app (npm)

The package spark-nextjs-app was found to contain malicious code...

MAL-2025-46115 Malicious code in spark-browser-extension (npm)

The package spark-browser-extension was found to contain malicious code...

MAL-2025-46116 Malicious code in spark-nextjs-app (npm)

The package spark-nextjs-app was found to contain malicious code...

Security Bulletin: Common vulnerabilities discovered in Spark2 executables released with Cloudera Observability on Premises with IBM Version 3.5.3

Summary Cloudera Observability on premises with IBM 3.5.3 ships with Spark 2 executables, however, the application runs on Spark 3. This security bulletin identifies a set of common vulnerabilities found in the Spark 2 libraries. Spark 2 has reached End of Support EOS. Clients are advised to use...

Security Bulletin: Common vulnerabilities discovered in Spark2 executables released with Cloudera Observability on Premises with IBM Version 3.5.3

Summary Cloudera Observability on premises with IBM 3.5.3 ships with Spark 2 executables, however, the application runs on Spark 3. This security bulletin identifies a set of common vulnerabilities found in the Spark 2 libraries. Spark 2 has reached End of Support EOS. Clients are advised to use...