CVE-2026-56740 vulnerabilities

Vulnerabilities for packages: spark-kubernetes-operator, apache-hop-fips, confluent-kafka-jre-bcfips, spark-kubernetes-operator-fips, hadoop-client-modules, druid, pinot-fips, ranger, zookeeper, tez, apache-pulsar, kafka, confluent-kafka, zookeeper-fips, hadoop-fips, pinot,...

CVE-2026-42800

NULL pointer dereference vulnerability in ASR1903 in ASR LapwingLinux on Linux imsclient modules allows Pointer Manipulation. This vulnerability is associated with program files sip/utils/src/sipuri.c...

EUVD-2026-26360

NULL pointer dereference vulnerability in ASR1903 in ASR LapwingLinux on Linux imsclient modules allows Pointer Manipulation. This vulnerability is associated with program files sip/utils/src/sipuri.c...

GHSA-MMWX-RJ87-VFGR vulnerabilities

Vulnerabilities for packages: spark, hadoop-client-modules, druid...

GHSA-CRJG-W57M-RQQF vulnerabilities

Vulnerabilities for packages: spark, hadoop-client-modules, druid...

org.infinispan.protostream:sample-domain-implementation (2.0.0.alpha2), org.infinispan.server:test-suite (>=7.0.0.beta1, <=7.0.0.beta2) +4 more potentially affected by CVE-2023-5236 via org.infinispan.protostream:protostream (2.0.0.alpha2)

org.infinispan.protostream:protostream MAVEN version 2.0.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan.protostream:protostream and may be impacted: - org.infinispan.protostream:sample-domain-implementation 2.0.0.alpha2 -...

org.infinispan.protostream:sample-domain-implementation (3.0.1.final), org.infinispan.server:infinispan-server-testsuite (>=7.2.0.beta2, <=7.2.1.final) +5 more potentially affected by CVE-2023-5236 via org.infinispan.protostream:protostream (3.0.1.final)

org.infinispan.protostream:protostream MAVEN version 3.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan.protostream:protostream and may be impacted: - org.infinispan.protostream:sample-domain-implementation 3.0.1.final -...

org.infinispan.server:infinispan-server-feature-pack (9.0.0.alpha2), org.infinispan.server:infinispan-server-infinispan (9.0.0.alpha2) +9 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-client-hotrod (9.0.0.alpha2)

org.infinispan:infinispan-client-hotrod MAVEN version 9.0.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-client-hotrod and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 9.0.0.alpha2 -...

org.infinispan.server:infinispan-server-feature-pack (8.0.0.cr1), org.infinispan.server:infinispan-server-infinispan (8.0.0.cr1) +8 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-client-hotrod (8.0.0.cr1)

org.infinispan:infinispan-client-hotrod MAVEN version 8.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-client-hotrod and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.0.0.cr1 -...

org.infinispan.server:infinispan-server-testsuite (7.1.0.beta1), org.infinispan:infinispan-as-client-modules (7.1.0.beta1) +31 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-commons (7.1.0.beta1)

org.infinispan:infinispan-commons MAVEN version 7.1.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-commons and may be impacted: - org.infinispan.server:infinispan-server-testsuite 7.1.0.beta1 -...

org.infinispan.server:infinispan-server-testsuite (7.1.0.cr2), org.infinispan:infinispan-as-client-modules (7.1.0.cr2) +31 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-commons (7.1.0.cr2)

org.infinispan:infinispan-commons MAVEN version 7.1.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-commons and may be impacted: - org.infinispan.server:infinispan-server-testsuite 7.1.0.cr2 -...

org.infinispan.server:infinispan-server-feature-pack (9.0.0.alpha1), org.infinispan.server:infinispan-server-infinispan (9.0.0.alpha1) +9 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-client-hotrod (9.0.0.alpha1)

org.infinispan:infinispan-client-hotrod MAVEN version 9.0.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-client-hotrod and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 9.0.0.alpha1 -...

org.infinispan.server:infinispan-server-testsuite (7.0.3.final), org.infinispan:infinispan-as-client-modules (7.0.3.final) +4 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-client-hotrod (7.0.3.final)

org.infinispan:infinispan-client-hotrod MAVEN version 7.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-client-hotrod and may be impacted: - org.infinispan.server:infinispan-server-testsuite 7.0.3.final -...

org.infinispan.server:infinispan-server-feature-pack (8.1.0.final), org.infinispan.server:infinispan-server-infinispan (8.1.0.final) +14 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-client-hotrod (8.1.0.final)

org.infinispan:infinispan-client-hotrod MAVEN version 8.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-client-hotrod and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.1.0.final -...

org.infinispan.server:infinispan-server-testsuite (7.2.0.cr1), org.infinispan:infinispan-as-client-modules (7.2.0.cr1) +5 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-client-hotrod (7.2.0.cr1)

org.infinispan:infinispan-client-hotrod MAVEN version 7.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-client-hotrod and may be impacted: - org.infinispan.server:infinispan-server-testsuite 7.2.0.cr1 -...

org.infinispan.server:infinispan-server-testsuite (7.2.0.final), org.infinispan:infinispan-as-client-modules (7.2.0.final) +6 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-client-hotrod (7.2.0.final)

org.infinispan:infinispan-client-hotrod MAVEN version 7.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-client-hotrod and may be impacted: - org.infinispan.server:infinispan-server-testsuite 7.2.0.final -...

org.infinispan.server:infinispan-server-testsuite (7.2.3.final), org.infinispan:infinispan-as-client-modules (7.2.3.final) +7 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-client-hotrod (7.2.3.final)

org.infinispan:infinispan-client-hotrod MAVEN version 7.2.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-client-hotrod and may be impacted: - org.infinispan.server:infinispan-server-testsuite 7.2.3.final -...

org.infinispan.server:test-suite (7.0.0.alpha5), org.infinispan:infinispan-as-client-modules (7.0.0.alpha5) +4 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-client-hotrod (7.0.0.alpha5)

org.infinispan:infinispan-client-hotrod MAVEN version 7.0.0.alpha5 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-client-hotrod and may be impacted: - org.infinispan.server:test-suite 7.0.0.alpha5 -...

org.infinispan.server:infinispan-server-testsuite (7.1.0.beta1), org.infinispan:infinispan-as-client-modules (7.1.0.beta1) +4 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-client-hotrod (7.1.0.beta1)

org.infinispan:infinispan-client-hotrod MAVEN version 7.1.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-client-hotrod and may be impacted: - org.infinispan.server:infinispan-server-testsuite 7.1.0.beta1 -...

DRUPAL-CONTRIB-2023-034

The ACL module, short for Access Control Lists, is an API for other modules to create lists of users and give them access to nodes. The module processes user input in a way that could be unsafe. This can lead to Remote Code Execution via Object Injection. As this is an API module, it is only...