org.apache.camel.quarkus:camel-quarkus-azure-eventhubs (>=3.35.0, <=3.38.0), org.apache.camel.quarkus:camel-quarkus-azure-eventhubs-deployment (>=3.35.0, <=3.38.0) +4 more potentially affected by CVE-2026-66906 via org.apache.camel:camel-azure-storage-blob (>=4.19.0, <=4.21.0)

org.apache.camel:camel-azure-storage-blob MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.21.0 Source cves: CVE-2026-66906 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-19350763...

org.apache.camel.quarkus:camel-quarkus-azure-eventhubs (>=3.35.0, <=3.38.0), org.apache.camel.quarkus:camel-quarkus-azure-eventhubs-deployment (>=3.35.0, <=3.38.0) +4 more potentially affected by CVE-2026-66906 via org.apache.camel:camel-azure-storage-blob (>=4.19.0, <=4.21.0)

org.apache.camel:camel-azure-storage-blob MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.21.0 Source cves: CVE-2026-66906 Source advisory: GHSA-2X37-89HJ-2J95...

Malware in azure-eventhubs-checkpointstore-blob

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in azure-eventhubs-checkpointstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89e36f03a0b1c87194aa5fc08a0563da3d709eb31bab4ee2be1008c9f3fcef5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-eventhubs-checkpointstore-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 446f07ebe7277743c5b75edd4e41ddee867b36339feabc5d6040ae83fb8c8ea8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in azure-eventhubs-checkpointstore

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

org.apache.nifi:nifi-azure-nar (>=1.0.0-beta, <=1.0.1), org.apache.nifi:nifi-azure-processors (>=1.0.0-beta, <=1.0.1) potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.7.1)

com.microsoft.azure:azure-eventhubs MAVEN version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - org.apache.nifi:nifi-azure-nar =1.0.0-beta, =1.0.0-beta, =1.0.1 Source cves: CVE-2020-169...

com.microsoft.azure:azure-eventhubs-eph (0.7.2) potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.7.2)

com.microsoft.azure:azure-eventhubs MAVEN version 0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:azure-eventhubs-eph 0.7.2 Source cves: CVE-2020-16971 Source advisory...

com.erudika:para-server (>=1.21.0, <=1.21.1), com.microsoft.azure.iot:iothub-react_2.11 (>=0.6.0, <=0.7.0) +2 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.8.2)

com.microsoft.azure:azure-eventhubs MAVEN version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.erudika:para-server =1.21.0, =0.6.0, =0.7.0 -...

com.microsoft.azure:spark-streaming-eventhubs_2.11 (>=2.0.8, <=2.1.4), com.microsoft.azure:spark-streaming-eventhubs_connector_2.11 (>=2.0.8, <=2.1.4) +1 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.14.3)

com.microsoft.azure:azure-eventhubs MAVEN version 0.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:spark-streaming-eventhubs2.11 =2.0.8, =2.0.8, =2.0.8, =2.1.4 Source...

com.microsoft.azure:azure-eventhubs-eph (0.14.4), io.zipkin.azure:zipkin-autoconfigure-collector-eventhub (>=0.1.9, <=0.7.2) +3 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.14.4)

com.microsoft.azure:azure-eventhubs MAVEN version 0.14.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:azure-eventhubs-eph 0.14.4 -...

org.apache.samza:samza-azure (0.14.0), org.apache.samza:samza-tools (0.14.0) potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.14.5)

com.microsoft.azure:azure-eventhubs MAVEN version 0.14.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - org.apache.samza:samza-azure 0.14.0 - org.apache.samza:samza-tools 0.14.0 Source cves:...

com.microsoft.azure:azure-eventhubs-eph (2.3.0), com.microsoft.azure:azure-eventhubs-spark_2.11 (>=2.2.7, <=2.3.7) +2 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (2.1.0)

com.microsoft.azure:azure-eventhubs MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:azure-eventhubs-eph 2.3.0 -...

com.microsoft.azure:azure-eventhubs-eph (2.5.1), com.microsoft.azure:azure-eventhubs-spark_2.11 (2.3.11) +2 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (2.3.1)

com.microsoft.azure:azure-eventhubs MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:azure-eventhubs-eph 2.5.1 -...

com.microsoft.azure:azure-eventhubs-eph (2.5.2), com.microsoft.azure:azure-eventhubs-spark_2.11 (>=2.3.12, <=2.3.14-beta-6) +7 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (2.3.2)

com.microsoft.azure:azure-eventhubs MAVEN version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:azure-eventhubs-eph 2.5.2 -...

com.hurence.logisland:logisland-engine-spark_2_common (>=1.4.0, <=1.4.1), com.linkedin.feathr:feathr_2.12 (>=0.1.0, <=0.1.1) +9 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (>=3.0.0, <=3.2.0)

com.microsoft.azure:azure-eventhubs MAVEN version =3.0.0, =1.4.0, =0.1.0, =3.0.0, =3.0.0, =2.3.14, =2.3.15, =1.12.0, =1.12.0, =1.4.0, =1.4.0, =1.4.1 Source cves: CVE-2020-16971 Source advisory: OSV:GHSA-8Q69-PW39-HPQH...

com.microsoft.azure:azure-eventhubs-eph (2.1.0) potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (1.3.0)

com.microsoft.azure:azure-eventhubs MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:azure-eventhubs-eph 2.1.0 Source cves: CVE-2020-16971 Source advisory...

com.microsoft.azure:azure-eventhubs-eph (0.7.8) potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.7.8)

com.microsoft.azure:azure-eventhubs MAVEN version 0.7.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:azure-eventhubs-eph 0.7.8 Source cves: CVE-2020-16971 Source advisory...

com.erudika:para-jar (>=1.30.0, <=1.31.0), com.erudika:para-server (>=1.28.5, <=1.31.0) +6 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.15.1)

com.microsoft.azure:azure-eventhubs MAVEN version 0.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.erudika:para-jar =1.30.0, =1.28.5, =1.28.5, =3.3.0, =0.1.5, =0.1.5, =0.1.13 Source...

com.microsoft.azure:azure-eventhubs-eph (2.0.1), com.microsoft.azure:azure-eventhubs-spark_2.11 (>=2.2.2, <=2.3.2) +1 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (1.0.2)

com.microsoft.azure:azure-eventhubs MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:azure-eventhubs-eph 2.0.1 -...