GHSA-QX7J-JV8M-FPPR vulnerabilities

Vulnerabilities for packages: zipkin, thingsboard, nuxeo, druid, cassandra-reaper, conductor-fips, logstash-fips, logstash, conductor...

GHSA-68MJ-5WR7-6FGG vulnerabilities

Vulnerabilities for packages: cassandra-reaper, druid, zipkin, logstash, thingsboard...

io.zipkin.brave:brave-instrumentation-spring-rabbit (>=5.4.3, <=5.5.1), org.springframework.amqp:spring-rabbit (1.7.10.release) +5 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.7.10.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - io.zipkin.brave:brave-instrumentation-spring-rabbit =5.4.3, =5.5.1 -...

io.zipkin.brave:brave-instrumentation-spring-rabbit (>=5.6.1, <=5.6.3), org.springframework.amqp:spring-rabbit (1.7.12.release) +2 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.7.12.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - io.zipkin.brave:brave-instrumentation-spring-rabbit =5.6.1, =5.6.3 -...

io.zipkin.brave:brave-instrumentation-spring-rabbit (>=5.1.4, <=5.4.2), org.springframework.amqp:spring-rabbit (1.7.9.release) +2 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.7.9.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - io.zipkin.brave:brave-instrumentation-spring-rabbit =5.1.4, =5.4.2 -...

com.github.g-chenning:jdbc-yml-quick (0.0.6-release), io.zipkin.brave:brave-instrumentation-spring-rabbit (>=5.5.2, <=5.6.0) +3 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.7.11.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.github.g-chenning:jdbc-yml-quick 0.0.6-release -...

io.zipkin.brave:brave-instrumentation-spring-rabbit (>=5.6.1, <=5.6.3), org.springframework.amqp:spring-rabbit (1.7.12.release) +2 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.7.12.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - io.zipkin.brave:brave-instrumentation-spring-rabbit =5.6.1, =5.6.3 -...

com.github.g-chenning:jdbc-yml-quick (0.0.6-release), io.zipkin.brave:brave-instrumentation-spring-rabbit (>=5.5.2, <=5.6.0) +3 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.7.11.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.github.g-chenning:jdbc-yml-quick 0.0.6-release -...

com.jdroidframework:jdroid-java-webapp-core (0.10.0), com.jdroidtools:jdroid-java-webapp-core (1.0.0) +18 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (3.2.18.release)

org.springframework:spring-webmvc MAVEN version 3.2.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.jdroidframework:jdroid-java-webapp-core 0.10.0 -...