570 matches found
org.apache.camel.kafkaconnector:camel-jms-amqp-10-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-jms-amqp-10-source-kafka-connector (4.18.0) +5 more potentially affected by CVE-2026-40860 via org.apache.camel:camel-amqp (>=4.15.0, <=4.18.1)
org.apache.camel:camel-amqp MAVEN version =4.15.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.1 Source cves: CVE-2026-40860 Source advisory: MEND:CVE-2026-40860...
org.apache.camel.kafkaconnector:camel-infinispan-sink-kafka-connector (>=4.0.0, <=4.18.0), org.apache.camel.kafkaconnector:camel-infinispan-source-kafka-connector (>=4.0.0, <=4.18.0) +11 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (>=4.0.0-m1, <=4.19.0)
org.apache.camel:camel-infinispan MAVEN version =4.0.0-m1, =4.0.0, =4.0.0, =4.7.0, =3.0.0-m1, =3.32.0, =3.32.0, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.32.0, =4.6.0, =4.0.0-m1, =4.19.0 Source cves: CVE-2026-6857 Source advisory: OSV:G...
org.apache.camel.quarkus:camel-quarkus-infinispan (>=1.0.0-m1, <=1.0.0-m2), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (>=1.0.0-m1, <=1.0.0-m2) +2 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.0.0)
org.apache.camel:camel-infinispan MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan =1.0.0-m1, =1.0.0-m1, =1.0.0-m1, =1.0.0-m2 ...
org.apache.camel.quarkus:camel-quarkus-infinispan (2.7.0), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (2.7.0) +2 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.14.1)
org.apache.camel:camel-infinispan MAVEN version 3.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan 2.7.0 -...
org.apache.camel.kafkaconnector:camel-infinispan-sink-kafka-connector (3.18.2), org.apache.camel.kafkaconnector:camel-infinispan-source-kafka-connector (3.18.2) +4 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.18.2)
org.apache.camel:camel-infinispan MAVEN version 3.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.kafkaconnector:camel-infinispan-sink-kafka-connector 3.18.2 -...
org.apache.camel.quarkus:camel-quarkus-infinispan (>=2.13.1, <=2.13.2), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (>=2.13.1, <=2.13.2) +2 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.18.3)
org.apache.camel:camel-infinispan MAVEN version 3.18.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan =2.13.1, =2.13.1, =2.13.1, =2.13.2 -...
org.apache.camel.quarkus:camel-quarkus-infinispan (1.0.0-cr3), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (1.0.0-cr3) +2 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.4.0)
org.apache.camel:camel-infinispan MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan 1.0.0-cr3 -...
org.apache.camel.quarkus:camel-quarkus-infinispan (2.13.3), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (2.13.3) +2 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.18.6)
org.apache.camel:camel-infinispan MAVEN version 3.18.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan 2.13.3 -...
org.apache.camel.quarkus:camel-quarkus-infinispan (>=2.0.0, <=2.1.0), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (>=2.0.0, <=2.1.0) +2 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.11.0)
org.apache.camel:camel-infinispan MAVEN version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan =2.0.0, =2.0.0, =2.0.0, =2.1.0 -...
org.apache.camel.quarkus:camel-quarkus-infinispan (2.5.0), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (2.5.0) +2 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.13.0)
org.apache.camel:camel-infinispan MAVEN version 3.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan 2.5.0 -...
com.buession.security:buession-security-pac4j (>=1.3.0, <=1.3.1), com.buession.springboot:buession-springboot-cas (>=1.3.0, <=1.3.1) +25 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (4.5.1)
org.pac4j:pac4j-core MAVEN version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - com.buession.security:buession-security-pac4j =1.3.0, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0,...
org.apache.camel.quarkus:camel-quarkus-integration-test-keycloak (3.31.0), org.apache.camel.quarkus:camel-quarkus-keycloak (>=3.29.0, <=3.31.0) +2 more potentially affected by CVE-2026-23552 via org.apache.camel:camel-keycloak (>=4.15.0, <=4.17.0)
org.apache.camel:camel-keycloak MAVEN version =4.15.0, =3.29.0, =3.29.0, =4.15.0, =4.17.0 Source cves: CVE-2026-23552 Source advisory: GHSA-C3F3-CC42-XR9V...
com.buession.security:buession-security-pac4j (2.3.1), com.buession.security:buession-security-shiro (2.3.1) +259 more potentially affected by CVE-2026-23901 via org.apache.shiro:shiro-core (1.12.0)
org.apache.shiro:shiro-core MAVEN version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - com.buession.security:buession-security-pac4j 2.3.1 - com.buession.security:buession-security-shiro 2.3....
CVE-2024-41600
Insecure Permissions vulnerability in lin-CMS Springboot v.0.2.1 and before allows a remote attacker to obtain sensitive information via the login method in the UserController.java component...
CVE-2025-55948
The yzcheng90 X-SpringBoot 6.0 platform suffers from an incorrect privilege assignment vulnerability (CWE-266) within its role-based access control (RBAC) system. The root cause is a lack of atomic synchronization between frontend menu systems and backend permission tables . Specifically, when pr...
CVE-2025-55948: Incorrect Privilege Assignment
This vulnerability fundamentally arises from yzcheng90 X-SpringBoot 6.0's implementation of role-based access control RBAC through dual dependency on frontend menu systems and backend permission tables, without enforcing atomic synchronization between these components. The critical flaw manifests...
X-SpringBoot security vulnerabilities
X-SpringBoot is a lightweight Java rapid development platform for czx individual developers. A security vulnerability exists in X-SpringBoot version 6.0, which stems from the unsynchronized front-end and back-end privilege components and could lead to an elevation of privilege attack...
CVE-2025-60354
Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot...