com.lightbend.akka:akka-stream-alpakka-geode_2.11 (0.10), com.lightbend.akka:akka-stream-alpakka-geode_2.12 (0.10) +37 more potentially affected by CVE-2026-49268 via org.apache.shiro:shiro-core (1.3.1)

org.apache.shiro:shiro-core MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - com.lightbend.akka:akka-stream-alpakka-geode2.11 0.10 - com.lightbend.akka:akka-stream-alpakka-geode2.12...

CVE-2023-29471

Lightbend Alpakka Kafka before 5.0.0 logs its configuration as debug information, and thus log files may contain credentials if plain cleartext login is configured. This occurs in akka.kafka.internal.KafkaConsumerActor...

EUVD-2023-1201

Malicious code in bioql PyPI...

GHSA-55VQ-XPJF-R2XC Lightbend Alpakka Kafka logs credentials on debug level

Lightbend Alpakka Kafka before 4.0.2 logs its configuration as debug information, and thus log files may contain credentials if plain cleartext login is configured. This occurs in akka.kafka.internal.KafkaConsumerActor...

Lightbend Alpakka Kafka logs credentials on debug level

Lightbend Alpakka Kafka before 4.0.2 logs its configuration as debug information, and thus log files may contain credentials if plain cleartext login is configured. This occurs in akka.kafka.internal.KafkaConsumerActor...

CVE-2023-29471

Lightbend Alpakka Kafka before 5.0.0 logs its configuration as debug information, and thus log files may contain credentials if plain cleartext login is configured. This occurs in akka.kafka.internal.KafkaConsumerActor...

Design/Logic Flaw

Lightbend Alpakka Kafka before 5.0.0 logs its configuration as debug information, and thus log files may contain credentials if plain cleartext login is configured. This occurs in akka.kafka.internal.KafkaConsumerActor...

CVE-2023-29471

Lightbend Alpakka Kafka before 5.0.0 logs its configuration as debug information, and thus log files may contain credentials if plain cleartext login is configured. This occurs in akka.kafka.internal.KafkaConsumerActor...

CVE-2023-29471

Lightbend Alpakka Kafka before 5.0.0 logs its configuration as debug information, and thus log files may contain credentials if plain cleartext login is configured. This occurs in akka.kafka.internal.KafkaConsumerActor...

CVE-2023-29471: Cleartext Storage of Sensitive Information

Lightbend Alpakka Kafka before 5.0.0 logs its configuration as debug information, and thus log files may contain credentials if plain cleartext login is configured. This occurs in akka.kafka.internal.KafkaConsumerActor...

Lightbend Alpakka Kafka security vulnerabilities

Lightbend Alpakka Kafka is a powerful connector from Lightbend USA. A security vulnerability exists in Lightbend Alpakka Kafka versions prior to 5.0.0 that stems from log files containing sensitive information...

CVE-2023-29471

Lightbend Alpakka Kafka before 5.0.0 stores configuration in debug logs, potentially exposing credentials in log files via akka.kafka.internal.KafkaConsumerActor. AFFECTED: Lightbend Alpakka Kafka versions prior to 5.0.0. IMPACT: credential exposure in log files. REMEDIATION: upgrade to 5.0.0 or ...

CVE-2023-29471

Lightbend Alpakka Kafka before 5.0.0 logs its configuration as debug information, and thus log files may contain credentials if plain cleartext login is configured. This occurs in akka.kafka.internal.KafkaConsumerActor...

PT-2023-22270 · Lightbend · Alpakka Kafka

Name of the Vulnerable Software and Affected Versions: Lightbend Alpakka Kafka versions prior to 5.0.0 Description: The issue allows log files to contain credentials if plain cleartext login is configured, as the configuration is logged as debug information. This occurs in the...

CVE-2023-29471

Lightbend Alpakka Kafka before 5.0.0 logs its configuration as debug information, and thus log files may contain credentials if plain cleartext login is configured. This occurs in akka.kafka.internal.KafkaConsumerActor...

com.lightbend.akka:akka-stream-alpakka-geode_2.11 (2.0.2), com.lightbend.akka:akka-stream-alpakka-geode_2.12 (>=2.0.2, <=3.0.4) +41 more potentially affected by CVE-2022-37021 via org.apache.geode:geode-core (>=1.13.0, <=1.13.4)

org.apache.geode:geode-core MAVEN version =1.13.0, =2.0.2, =2.0.2, =1.13.0, =1.13.0, =1.13.0, =1.13.0, =1.13.0, =1.13.0, =1.13.0, =1.13.2, =1.13.2, =1.13.2, =1.13.0, =1.13.0, =1.13.4 and more Source cves: CVE-2022-37021 Source advisory: OSV:GHSA-Q4Q3-R45F-7GWG...

com.lightbend.akka:akka-stream-alpakka-geode_2.11 (2.0.2), com.lightbend.akka:akka-stream-alpakka-geode_2.12 (>=2.0.2, <=3.0.4) +41 more potentially affected by CVE-2022-37021 via org.apache.geode:geode-core (>=1.13.0, <=1.13.4)

org.apache.geode:geode-core MAVEN version =1.13.0, =2.0.2, =2.0.2, =1.13.0, =1.13.0, =1.13.0, =1.13.0, =1.13.0, =1.13.0, =1.13.0, =1.13.2, =1.13.2, =1.13.2, =1.13.0, =1.13.0, =1.13.4 and more Source cves: CVE-2022-37021 Source advisory: MEND:CVE-2022-37021...

com.lightbend.akka:akka-stream-alpakka-geode_2.11 (>=0.10, <=0.14), com.lightbend.akka:akka-stream-alpakka-geode_2.12 (>=0.10, <=0.14) +36 more potentially affected by CVE-2017-12622 via org.apache.geode:geode-core (>=1.0.0-incubating.m2, <=1.2.1)

org.apache.geode:geode-core MAVEN version =1.0.0-incubating.m2, =0.10, =0.10, =0.3.12, =0.3.5, =0.1.9, =1.0.0-incubating.m2, =1.0.0-incubating.m2, =1.0.0-incubating.m2, =1.0.0-incubating.m3, =1.0.0-incubating.m2, =1.0.0-incubating, =1.0.0-incubating, =0.9.0, =0.10.1 and more Source cves:...

com.lightbend.akka:akka-stream-alpakka-geode_2.11 (>=0.10, <=0.14), com.lightbend.akka:akka-stream-alpakka-geode_2.12 (>=0.10, <=0.14) +36 more potentially affected by CVE-2017-12622 via org.apache.geode:geode-core (>=1.0.0-incubating.m2, <=1.2.1)

org.apache.geode:geode-core MAVEN version =1.0.0-incubating.m2, =0.10, =0.10, =0.3.12, =0.3.5, =0.1.9, =1.0.0-incubating.m2, =1.0.0-incubating.m2, =1.0.0-incubating.m2, =1.0.0-incubating.m3, =1.0.0-incubating.m2, =1.0.0-incubating, =1.0.0-incubating, =0.9.0, =0.10.1 and more Source cves:...

com.lightbend.akka:akka-stream-alpakka-geode_2.11 (>=0.10, <=0.16), com.lightbend.akka:akka-stream-alpakka-geode_2.12 (>=0.10, <=0.16) +37 more potentially affected by CVE-2017-15696 via org.apache.geode:geode-core (>=1.0.0-incubating.m2, <=1.3.0)

org.apache.geode:geode-core MAVEN version =1.0.0-incubating.m2, =0.10, =0.10, =0.3.12, =0.3.5, =0.1.9, =1.16.0, =1.0.0-incubating.m2, =1.0.0-incubating.m2, =1.0.0-incubating.m2, =1.0.0-incubating.m3, =1.0.0-incubating.m2, =1.0.0-incubating, =1.0.0-incubating, =1.3.0 -...