GHSA-5843-P793-GHMM vulnerabilities

Vulnerabilities for packages: thingsboard...

GHSA-RGRR-P7GP-5XJ7 vulnerabilities

Vulnerabilities for packages: celeborn, thingsboard, tez, management-api-for-apache-cassandra-5.0, trino, druid...

GHSA-6P4F-WCWH-5VVM vulnerabilities

Vulnerabilities for packages: thingsboard, apache-nifi-registry...

GHSA-WG35-8JPF-2XV3 vulnerabilities

Vulnerabilities for packages: thingsboard, apache-nifi-registry...

GHSA-JFG9-48MV-9QGX vulnerabilities

Vulnerabilities for packages: celeborn, apache-activemq-artemis, thingsboard, tez, management-api-for-apache-cassandra-5.0, trino, druid...

CVE-2026-42586 vulnerabilities

Vulnerabilities for packages: celeborn, thingsboard, tez, management-api-for-apache-cassandra-5.0, trino, druid...

CVE-2026-44248 vulnerabilities

Vulnerabilities for packages: celeborn, apache-activemq-artemis, thingsboard, tez, management-api-for-apache-cassandra-5.0, trino, druid...

CVE-2026-40973 vulnerabilities

Vulnerabilities for packages: thingsboard, zipkin, keycloak-config-cli, apache-nifi-registry...

GHSA-WWPQ-F5C3-7HVX vulnerabilities

Vulnerabilities for packages: thingsboard, zipkin, keycloak-config-cli, apache-nifi-registry...

GHSA-XXQH-MFJM-7MV9 vulnerabilities

Vulnerabilities for packages: flyway, spark, apache-nifi-registry, infinispan, logstash, selenium, celeborn, apache-activemq-artemis, apicurio-registry, opensearch, akhq, keycloak, trino, apache-pulsar, druid, zipkin, tez, strimzi-kafka-operator, wavefront-proxy, kserve-modelmesh, neo4j, sonarqub...

GHSA-57RV-R2G8-2CJ3 vulnerabilities

Vulnerabilities for packages: flyway, spark, apache-nifi-registry, infinispan, logstash, selenium, celeborn, apache-activemq-artemis, apicurio-registry, opensearch, akhq, keycloak, trino, apache-pulsar, druid, zipkin, tez, strimzi-kafka-operator, wavefront-proxy, kserve-modelmesh, neo4j, sonarqub...

GHSA-M4CV-J2PX-7723 vulnerabilities

Vulnerabilities for packages: flyway, spark, apache-nifi-registry, infinispan, logstash, selenium, celeborn, apache-activemq-artemis, apicurio-registry, opensearch, akhq, keycloak, trino, apache-pulsar, druid, zipkin, tez, strimzi-kafka-operator, wavefront-proxy, kserve-modelmesh, neo4j, sonarqub...

CVE-2026-42580 vulnerabilities

Vulnerabilities for packages: flyway, spark, apache-nifi-registry, infinispan, logstash, selenium, celeborn, apache-activemq-artemis, apicurio-registry, opensearch, akhq, keycloak, trino, apache-pulsar, druid, zipkin, tez, strimzi-kafka-operator, wavefront-proxy, kserve-modelmesh, neo4j, sonarqub...

GHSA-38F8-5428-X5CV vulnerabilities

Vulnerabilities for packages: flyway, spark, apache-nifi-registry, infinispan, logstash, selenium, celeborn, apache-activemq-artemis, apicurio-registry, opensearch, akhq, keycloak, trino, apache-pulsar, druid, zipkin, tez, strimzi-kafka-operator, wavefront-proxy, kserve-modelmesh, neo4j, sonarqub...

CVE-2026-42585 vulnerabilities

Vulnerabilities for packages: flyway, spark, apache-nifi-registry, infinispan, logstash, selenium, celeborn, apache-activemq-artemis, apicurio-registry, opensearch, akhq, keycloak, trino, apache-pulsar, druid, zipkin, tez, strimzi-kafka-operator, wavefront-proxy, kserve-modelmesh, neo4j, sonarqub...

CVE-2026-42581 vulnerabilities

Vulnerabilities for packages: flyway, spark, apache-nifi-registry, infinispan, logstash, selenium, celeborn, apache-activemq-artemis, apicurio-registry, opensearch, akhq, keycloak, trino, apache-pulsar, druid, zipkin, tez, strimzi-kafka-operator, wavefront-proxy, kserve-modelmesh, neo4j, sonarqub...

CVE-2026-42584 vulnerabilities

Vulnerabilities for packages: flyway, spark, apache-nifi-registry, infinispan, logstash, selenium, celeborn, apache-activemq-artemis, apicurio-registry, opensearch, akhq, keycloak, trino, apache-pulsar, druid, zipkin, tez, strimzi-kafka-operator, wavefront-proxy, kserve-modelmesh, neo4j, sonarqub...

📄 ThingsBoard IoT Platform 4.2.0 Server-Side Request Forgery

ThingsBoard IoT Platform version 4.2.0 suffers from a server-side request forgery vulnerability. Exploit Title: ThingsBoard IoT Platform 4.2.0 - Server-Side Request Forgery SSRF Date: 2026-03-25 Exploit Author: Tamil Mathi T. Vendor Homepage: https://thingsboard.io Software Link:...

ThingsBoard IoT Platform 4.2.0 - Server-Side Request Forgery (SSRF)

Exploit Title: ThingsBoard IoT Platform 4.2.0 - Server-Side Request Forgery SSRF Date: 2026-03-25 Exploit Author: Tamil Mathi T. Vendor Homepage: https://thingsboard.io Software Link: https://github.com/thingsboard/thingsboard Version: . When ThingsBoard processes the uploaded SVG server-side, it...

CLEANSTART-2026-IS05941 CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native

Multiple security vulnerabilities affect the thingsboard package. CLIENTCERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native. See references for individual vulnerability details...