com.squareup.wire:com.squareup.wire.gradle.plugin (>=7.0.0-alpha01 <=7.0.0-alpha02), com.squareup.wire:wire-compiler (>=7.0.0-alpha01 <=7.0.0-alpha02) +11 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (>=7.0.0-alpha01 <=7.0.0-alpha02)

com.squareup.wire:wire-runtime-jvm MAVEN version =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha02 Source...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : mqtt-client vulnerability (USN-6685-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6685-1 advisory. It was discovered that mqtt-client incorrectly handled memory while parsing malformed MQTT frames. An attacker could possibly use this iss...

cn.dustlight.fun:fun-kubeless (>=0.0.2-alpha-1 <=0.0.3-alpha-1), cn.dustlight.jobless:jobless-kubernetes (>=0.0.1-alpha <=0.0.2-alpha) +76 more potentially affected by CVE-2021-25738 via io.kubernetes:client-java (>=0.2 <=11.0.0)

io.kubernetes:client-java MAVEN version =0.2, =0.0.2-alpha-1, =0.0.1-alpha, =1.0.0, =4.0.5, =0.0.3, =2.3.0, =0.2.1, =0.2.1, =0.2.1, =0.2.1, =0.2.1, =0.2.1, =0.2.3, =0.2.3, =0.2.5 and more Source cves: CVE-2021-25738 Source advisory: OSV:GHSA-M8WH-MQGF-RR8G...

app.cash.backfila:client-misk (>=0.1.0 <=2026.02.24.162528-f89a8e7), app.cash.backfila:client-misk-dynamodb (>=0.1.3-20210127.1838-76ab4fc <=0.1.4-20210806.0204-5341f38) +510 more potentially affected by CVE-2020-8570 via io.kubernetes:client-java (>=0.2 <=9.0.1)

io.kubernetes:client-java MAVEN version =0.2, =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210805.0116-93702c4, =0.1.3-20210805.0116-93702c4, =0.1.0, =2023.06.07.114626-93b9d6f, =0.1.0, =0.1.4-20220614.0152-5ae0eef, =0.1.4, =0.1.14 - cc.zzzyu.nacos:nacos-console...

Directory Traversal

kubernetes client-java is vulnerable to directory traversal. Lack of validation in the copyDirectoryFromPod allows arbitrary writes to files outside of the current directory through a malicious archive...

acegisecurity:acegi-security-domain (=0.9.0), ai.databand.azkaban:azkaban-web-server (=3.18.0) +16311 more potentially affected by CVE-2020-10683 via dom4j:dom4j (>=1.1 <=1.6.1)

dom4j:dom4j MAVEN version =1.1, =1.4.1, =1.4.1, =1.4.1, =1.2.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =0.6.1, =1.0.0, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2020-10683 Source advisory: OSV:GHSA-HWJ3-M3P6-HJ38...