org.graylog.plugins:graylog-plugin-parent (4.3.10), org.graylog.plugins:graylog-plugin-web-parent (4.3.10) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (4.3.10)

org.graylog2:graylog2-server MAVEN version 4.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.3.10 - org.graylog.plugins:graylog-plugin-web-parent 4.3.1...

org.graylog.plugins:graylog-plugin-parent (5.0.1), org.graylog.plugins:graylog-plugin-web-parent (5.0.1) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (5.0.1)

org.graylog2:graylog2-server MAVEN version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.0.1 - org.graylog.plugins:graylog-plugin-web-parent 5.0.1...

org.graylog.plugins:graylog-plugin-parent (5.0.3), org.graylog.plugins:graylog-plugin-web-parent (5.0.3) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (5.0.3)

org.graylog2:graylog2-server MAVEN version 5.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.0.3 - org.graylog.plugins:graylog-plugin-web-parent 5.0.3...

com.github.exabrial:graylog-plugin-openwire (2.0.0), org.graylog.plugins:graylog-plugin-parent (5.0.5) +1 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (5.0.5)

org.graylog2:graylog2-server MAVEN version 5.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.github.exabrial:graylog-plugin-openwire 2.0.0 - org.graylog.plugins:graylog-plugin-parent 5.0.5 -...

org.graylog.plugins:graylog-plugin-parent (2.5.0-beta.1), org.graylog.plugins:graylog-plugin-pipeline-processor (2.5.0-beta.1) +2 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.5.0-beta.1)

org.graylog2:graylog2-server MAVEN version 2.5.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.5.0-beta.1 -...

org.graylog.plugins:graylog-plugin-parent (5.2.0-beta.1), org.graylog.plugins:graylog-plugin-web-parent (5.2.0-beta.1) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (5.2.0-beta.1)

org.graylog2:graylog2-server MAVEN version 5.2.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.2.0-beta.1 -...

org.graylog.plugins:graylog-plugin-parent (4.3.13), org.graylog.plugins:graylog-plugin-web-parent (4.3.13) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (4.3.13)

org.graylog2:graylog2-server MAVEN version 4.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.3.13 - org.graylog.plugins:graylog-plugin-web-parent 4.3.1...

org.graylog.plugins:graylog-plugin-parent (4.2.0), org.graylog.plugins:graylog-plugin-web-parent (4.2.0) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (4.2.0)

org.graylog2:graylog2-server MAVEN version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.2.0 - org.graylog.plugins:graylog-plugin-web-parent 4.2.0...

org.graylog.plugins:graylog-plugin-parent (4.2.5), org.graylog.plugins:graylog-plugin-web-parent (4.2.5) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (4.2.5)

org.graylog2:graylog2-server MAVEN version 4.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.2.5 - org.graylog.plugins:graylog-plugin-web-parent 4.2.5...

org.graylog.plugins:graylog-plugin-parent (5.0.4), org.graylog.plugins:graylog-plugin-web-parent (5.0.4) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (5.0.4)

org.graylog2:graylog2-server MAVEN version 5.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.0.4 - org.graylog.plugins:graylog-plugin-web-parent 5.0.4...

org.graylog.plugins:graylog-plugin-parent (4.2.12), org.graylog.plugins:graylog-plugin-web-parent (4.2.12) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (4.2.12)

org.graylog2:graylog2-server MAVEN version 4.2.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.2.12 - org.graylog.plugins:graylog-plugin-web-parent 4.2.1...

org.graylog.plugins:graylog-plugin-parent (5.2.0-rc.1), org.graylog.plugins:graylog-plugin-web-parent (5.2.0-rc.1) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (5.2.0-rc.1)

org.graylog2:graylog2-server MAVEN version 5.2.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 5.2.0-rc.1 - org.graylog.plugins:graylog-plugin-web-pare...

org.graylog.plugins:graylog-plugin-parent (3.0.0-alpha.4), org.graylog.plugins:graylog-plugin-web-parent (3.0.0-alpha.4) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (3.0.0-alpha.4)

org.graylog2:graylog2-server MAVEN version 3.0.0-alpha.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 3.0.0-alpha.4 -...

org.graylog.plugins:graylog-plugin-parent (2.3.0-rc.1), org.graylog.plugins:graylog-plugin-pipeline-processor (2.3.0-rc.1) +2 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.3.0-rc.1)

org.graylog2:graylog2-server MAVEN version 2.3.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.3.0-rc.1 -...

org.graylog.plugins:graylog-plugin-parent (4.0.0-rc.2), org.graylog.plugins:graylog-plugin-web-parent (4.0.0-rc.2) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (4.0.0-rc.2)

org.graylog2:graylog2-server MAVEN version 4.0.0-rc.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.0.0-rc.2 - org.graylog.plugins:graylog-plugin-web-pare...

org.graylog.plugins:graylog-plugin-parent (4.0.16), org.graylog.plugins:graylog-plugin-web-parent (4.0.16) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (4.0.16)

org.graylog2:graylog2-server MAVEN version 4.0.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.0.16 - org.graylog.plugins:graylog-plugin-web-parent 4.0.1...

org.graylog.plugins:graylog-plugin-parent (7.1.1), org.graylog.plugins:graylog-plugin-web-parent (7.1.1) potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (7.1.1)

org.graylog2:graylog2-server MAVEN version 7.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 7.1.1 - org.graylog.plugins:graylog-plugin-web-parent 7.1.1...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (7.0.0), com.airbus-cyber-security.graylog:graylog-plugin-correlation-count (7.0.0) +3 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (>=7.0.0, <=7.0.6)

org.graylog2:graylog2-server MAVEN version =7.0.0, =7.0.0, =7.0.0, =7.0.6 Source cves: CVE-2026-55841 Source advisory: MEND:CVE-2026-55841...

CVE-2026-55484 ALOS HTTP: Unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server

ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack. Prior to 0.0.0-20260617230736-314b6783e196, core/utils.go::sanitizeRequestPath calls splitPathQuery on a request path beginning with a question mark and then performs the unchecked p0 access...

io.spinnaker.rosco:rosco-web (main-272) potentially affected by CVE-2026-55175 via io.spinnaker.rosco:rosco-manifests (main-272)

io.spinnaker.rosco:rosco-manifests MAVEN version main-272 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.rosco:rosco-manifests and may be impacted: - io.spinnaker.rosco:rosco-web main-272 Source cves: CVE-2026-55175 Source advisory:...