10 matches found
Improper Validation of Certificate with Host Mismatch
Overview Affected versions of this package are vulnerable to Improper Validation of Certificate with Host Mismatch in the HostnameUtil class, whose "match CN when no dNSName SAN exists" fallback is gated on Properties.isOverrideSetJSSEHOSTNAMECHECKCNFALLBACK, true, which returns true when the...
com.github.cafaudit:caf-audit-binding-elasticsearch (>=5.0.3-1321, <=5.0.4-1329), com.github.cafaudit:caf-audit-monkey-container (>=5.0.3-1321, <=5.0.4-1329) +45 more potentially affected by CVE-2026-59638 via org.bouncycastle:bctls-fips (>=2.1.20, <=2.1.23)
org.bouncycastle:bctls-fips MAVEN version =2.1.20, =5.0.3-1321, =5.0.3-1321, =5.0.3-1321, =5.0.3-1321, =3.1.2-822, =3.1.2-822, =3.1.2-822, =3.1.2-822, =26.4.0, =16.0.1, =16.0.1, =16.0.1, =16.0.1, =16.1.3 and more Source cves: CVE-2026-59638 Source advisory: SNYK:JAVA-ORGB...
org.apache.camel.springboot:camel-opensearch-starter (4.12.0), org.apache.camel:camel-opensearch (4.12.0) +11 more potentially affected by CVE-2026-59638 via org.bouncycastle:bctls-fips (2.0.19)
org.bouncycastle:bctls-fips MAVEN version 2.0.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bctls-fips and may be impacted: - org.apache.camel.springboot:camel-opensearch-starter 4.12.0 - org.apache.camel:camel-opensearch 4.12.0 -...
com.srcclr:srcclr-maven-plugin (>=3.1.23, <=3.1.25), org.apache.camel.quarkus:camel-quarkus-opensearch (3.24.0) +20 more potentially affected by CVE-2026-59646 via org.bouncycastle:bctls-fips (>=1.0.9, <=1.0.19)
org.bouncycastle:bctls-fips MAVEN version =1.0.9, =3.1.23, =19.0.0, =14.6.5.3, =4.4.12, =4.4.12, =4.4.12, =4.4.12, =4.4.12, =4.6.4, =4.4.12, =4.4.12, =4.4.12, =4.4.12, =4.9.4 and more Source cves: CVE-2026-59646 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18512890...
org.apache.camel.springboot:camel-opensearch-starter (4.12.0), org.apache.camel:camel-opensearch (4.12.0) +11 more potentially affected by CVE-2026-59646 via org.bouncycastle:bctls-fips (2.0.19)
org.bouncycastle:bctls-fips MAVEN version 2.0.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bctls-fips and may be impacted: - org.apache.camel.springboot:camel-opensearch-starter 4.12.0 - org.apache.camel:camel-opensearch 4.12.0 -...
com.github.cafaudit:caf-audit-binding-elasticsearch (>=5.0.3-1321, <=5.0.4-1329), com.github.cafaudit:caf-audit-monkey-container (>=5.0.3-1321, <=5.0.4-1329) +45 more potentially affected by CVE-2026-59638 via org.bouncycastle:bctls-fips (>=2.1.20, <=2.1.23)
org.bouncycastle:bctls-fips MAVEN version =2.1.20, =5.0.3-1321, =5.0.3-1321, =5.0.3-1321, =5.0.3-1321, =3.1.2-822, =3.1.2-822, =3.1.2-822, =3.1.2-822, =26.4.0, =16.0.1, =16.0.1, =16.0.1, =16.0.1, =16.1.3 and more Source cves: CVE-2026-59638 Source advisory: MEND:CVE-2026-...
org.apache.camel.springboot:camel-opensearch-starter (4.12.0), org.apache.camel:camel-opensearch (4.12.0) +11 more potentially affected by CVE-2026-59638 via org.bouncycastle:bctls-fips (2.0.19)
org.bouncycastle:bctls-fips MAVEN version 2.0.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bctls-fips and may be impacted: - org.apache.camel.springboot:camel-opensearch-starter 4.12.0 - org.apache.camel:camel-opensearch 4.12.0 -...
com.srcclr:srcclr-maven-plugin (>=3.1.23, <=3.1.25), org.apache.camel.quarkus:camel-quarkus-opensearch (3.24.0) +20 more potentially affected by CVE-2026-59638 via org.bouncycastle:bctls-fips (>=1.0.9, <=1.0.19)
org.bouncycastle:bctls-fips MAVEN version =1.0.9, =3.1.23, =19.0.0, =14.6.5.3, =4.4.12, =4.4.12, =4.4.12, =4.4.12, =4.4.12, =4.6.4, =4.4.12, =4.4.12, =4.4.12, =4.4.12, =4.9.4 and more Source cves: CVE-2026-59638 Source advisory: MEND:CVE-2026-59638...
com.srcclr:srcclr-maven-plugin (>=3.1.23, <=3.1.25), org.apache.camel.quarkus:camel-quarkus-opensearch (3.24.0) +20 more potentially affected by CVE-2026-59646 via org.bouncycastle:bctls-fips (>=1.0.9, <=1.0.19)
org.bouncycastle:bctls-fips MAVEN version =1.0.9, =3.1.23, =19.0.0, =14.6.5.3, =4.4.12, =4.4.12, =4.4.12, =4.4.12, =4.4.12, =4.6.4, =4.4.12, =4.4.12, =4.4.12, =4.4.12, =4.9.4 and more Source cves: CVE-2026-59646 Source advisory: MEND:CVE-2026-59646...
org.apache.camel.springboot:camel-opensearch-starter (4.12.0), org.apache.camel:camel-opensearch (4.12.0) +11 more potentially affected by CVE-2026-59646 via org.bouncycastle:bctls-fips (2.0.19)
org.bouncycastle:bctls-fips MAVEN version 2.0.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bctls-fips and may be impacted: - org.apache.camel.springboot:camel-opensearch-starter 4.12.0 - org.apache.camel:camel-opensearch 4.12.0 -...