CVE-2026-22745 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, thingsboard...

GHSA-WG35-8JPF-2XV3 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, thingsboard...

CVE-2026-22741 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, thingsboard...

GHSA-6P4F-WCWH-5VVM vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, thingsboard...

CVE-2026-40973 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, zipkin, apache-nifi-registry, thingsboard...

GHSA-WWPQ-F5C3-7HVX vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, zipkin, apache-nifi-registry, thingsboard...

CVE-2026-42581 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, tez, akhq, strimzi-kafka-operator, trino, keycloak, apicurio-registry, neo4j, sonarqube, apache-activemq-artemis, logstash, docker-selenium, management-api-for-apache-cassandra-5.0, spark, flyway, infinispan, selenium, opensearch,...

CVE-2026-42580 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, tez, akhq, strimzi-kafka-operator, trino, keycloak, apicurio-registry, neo4j, sonarqube, apache-activemq-artemis, logstash, docker-selenium, management-api-for-apache-cassandra-5.0, spark, flyway, infinispan, selenium, opensearch,...

CVE-2026-42584 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, tez, akhq, strimzi-kafka-operator, trino, keycloak, apicurio-registry, neo4j, sonarqube, apache-activemq-artemis, logstash, docker-selenium, management-api-for-apache-cassandra-5.0, spark, flyway, infinispan, selenium, opensearch,...

CVE-2026-42585 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, tez, akhq, strimzi-kafka-operator, trino, keycloak, apicurio-registry, neo4j, sonarqube, apache-activemq-artemis, logstash, docker-selenium, management-api-for-apache-cassandra-5.0, spark, flyway, infinispan, selenium, opensearch,...

GHSA-57RV-R2G8-2CJ3 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, tez, akhq, strimzi-kafka-operator, trino, keycloak, apicurio-registry, neo4j, sonarqube, apache-activemq-artemis, logstash, docker-selenium, management-api-for-apache-cassandra-5.0, spark, flyway, infinispan, selenium, opensearch,...

GHSA-M4CV-J2PX-7723 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, tez, akhq, strimzi-kafka-operator, trino, keycloak, apicurio-registry, neo4j, sonarqube, apache-activemq-artemis, logstash, docker-selenium, management-api-for-apache-cassandra-5.0, spark, flyway, infinispan, selenium, opensearch,...

GHSA-38F8-5428-X5CV vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, tez, akhq, strimzi-kafka-operator, trino, keycloak, apicurio-registry, neo4j, sonarqube, apache-activemq-artemis, logstash, docker-selenium, management-api-for-apache-cassandra-5.0, spark, flyway, infinispan, selenium, opensearch,...

GHSA-XXQH-MFJM-7MV9 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, tez, akhq, strimzi-kafka-operator, trino, keycloak, apicurio-registry, neo4j, sonarqube, apache-activemq-artemis, logstash, docker-selenium, management-api-for-apache-cassandra-5.0, spark, flyway, infinispan, selenium, opensearch,...

📄 ThingsBoard IoT Platform 4.2.0 Server-Side Request Forgery

ThingsBoard IoT Platform version 4.2.0 suffers from a server-side request forgery vulnerability. Exploit Title: ThingsBoard IoT Platform 4.2.0 - Server-Side Request Forgery SSRF Date: 2026-03-25 Exploit Author: Tamil Mathi T. Vendor Homepage: https://thingsboard.io Software Link:...

ThingsBoard IoT Platform 4.2.0 - Server-Side Request Forgery (SSRF)

Exploit Title: ThingsBoard IoT Platform 4.2.0 - Server-Side Request Forgery SSRF Date: 2026-03-25 Exploit Author: Tamil Mathi T. Vendor Homepage: https://thingsboard.io Software Link: https://github.com/thingsboard/thingsboard Version: . When ThingsBoard processes the uploaded SVG server-side, it...

CLEANSTART-2026-IS05941 CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native

Multiple security vulnerabilities affect the thingsboard package. CLIENTCERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native. See references for individual vulnerability details...

GHSA-H468-7PVH-8VR8 vulnerabilities

Vulnerabilities for packages: thingsboard...

CVE-2026-29146 vulnerabilities

Vulnerabilities for packages: thingsboard...

CLEANSTART-2026-CK64127 Security fixes for ghsa-6rw7-vpxm-498p, ghsa-73rr-hh4g-fpgx, ghsa-8qq5-rm4j-mr97, ghsa-wqch-xfxh-vrr4 applied in versions: 4.2.1.1-r1

Multiple security vulnerabilities affect the thingsboard package. These issues are resolved in later releases. See references for individual vulnerability details...