AZL-107619 CVE-2026-78659 affecting package kube-vip-cloud-provider 0.0.10-10

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

AZL-107628 CVE-2026-78663 affecting package kube-vip-cloud-provider 0.0.10-10

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

AZL-107216 CVE-2026-78659 affecting package cloud-provider-kubevirt 0.5.1-9

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

AZL-107225 CVE-2026-78660 affecting package cloud-provider-kubevirt 0.5.1-9

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

com.hazelcast:hazelcast-all (2.0.4), com.hazelcast:hazelcast-client (2.0.4) +5 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (2.0.4)

com.hazelcast:hazelcast MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 2.0.4 - com.hazelcast:hazelcast-client 2.0.4 - com.hazelcast:hazelcast-cloud 2.0.4 -...

com.hazelcast:hazelcast-all (2.1), com.hazelcast:hazelcast-client (2.1) +5 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (2.1)

com.hazelcast:hazelcast MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 2.1 - com.hazelcast:hazelcast-client 2.1 - com.hazelcast:hazelcast-cloud 2.1 -...

com.hazelcast:hazelcast-all (2.3), com.hazelcast:hazelcast-client (2.3) +7 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (2.3)

com.hazelcast:hazelcast MAVEN version 2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 2.3 - com.hazelcast:hazelcast-client 2.3 - com.hazelcast:hazelcast-cloud 2.3 -...

com.hazelcast:hazelcast-client (2.6.4), com.hazelcast:hazelcast-cloud (2.6.4) +4 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (2.6.4)

com.hazelcast:hazelcast MAVEN version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 2.6.4 - com.hazelcast:hazelcast-cloud 2.6.4 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-client (3.0-rc1), com.hazelcast:hazelcast-cloud (3.0-rc1) +5 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.0-rc1)

com.hazelcast:hazelcast MAVEN version 3.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.0-rc1 - com.hazelcast:hazelcast-cloud 3.0-rc1 -...

com.hazelcast:hazelcast-client (3.0-rc2), com.hazelcast:hazelcast-cloud (3.0-rc2) +5 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.0-rc2)

com.hazelcast:hazelcast MAVEN version 3.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.0-rc2 - com.hazelcast:hazelcast-cloud 3.0-rc2 -...

com.hazelcast:hazelcast-client (3.0), com.hazelcast:hazelcast-cloud (3.0) +10 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.0)

com.hazelcast:hazelcast MAVEN version 3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.0 - com.hazelcast:hazelcast-cloud 3.0 - com.hazelcast:hazelcast-hibernate 3.0 -...

com.hazelcast:hazelcast-client (3.1), com.hazelcast:hazelcast-cloud (3.1) +12 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.1)

com.hazelcast:hazelcast MAVEN version 3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.1 - com.hazelcast:hazelcast-cloud 3.1 - com.hazelcast:hazelcast-hibernate 3.1 -...

com.hazelcast:hazelcast-client (3.1.1), com.hazelcast:hazelcast-cloud (3.1.1) +9 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.1.1)

com.hazelcast:hazelcast MAVEN version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.1.1 - com.hazelcast:hazelcast-cloud 3.1.1 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-client (3.1.7), com.hazelcast:hazelcast-cloud (3.1.7) +8 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.1.7)

com.hazelcast:hazelcast MAVEN version 3.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.1.7 - com.hazelcast:hazelcast-cloud 3.1.7 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-client (3.1.8), com.hazelcast:hazelcast-cloud (3.1.8) +6 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.1.8)

com.hazelcast:hazelcast MAVEN version 3.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.1.8 - com.hazelcast:hazelcast-cloud 3.1.8 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-client (3.1.9), com.hazelcast:hazelcast-cloud (3.1.9) +6 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.1.9)

com.hazelcast:hazelcast MAVEN version 3.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.1.9 - com.hazelcast:hazelcast-cloud 3.1.9 - com.hazelcast:hazelcast-hibernate...

com.bikeemotion:quartz-hazelcast-jobstore (>=1.0.1, <=1.0.4), com.github.erwan-boulard:quartz-hazelcast-jobstore (1.0.6) +23 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.2.1)

com.hazelcast:hazelcast MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.bikeemotion:quartz-hazelcast-jobstore =1.0.1, =1.0.0, =0.0.2, =0.0.4 - com.orientechnologies:orientdb-communi...

com.hazelcast:hazelcast-client (3.2.2), com.hazelcast:hazelcast-cloud (3.2.2) +9 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.2.2)

com.hazelcast:hazelcast MAVEN version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.2.2 - com.hazelcast:hazelcast-cloud 3.2.2 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-client (3.2.5), com.hazelcast:hazelcast-cloud (3.2.5) +23 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.2.5)

com.hazelcast:hazelcast MAVEN version 3.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.2.5 - com.hazelcast:hazelcast-cloud 3.2.5 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-client (3.2.7), com.hazelcast:hazelcast-cloud (3.2.7) +6 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.2.7)

com.hazelcast:hazelcast MAVEN version 3.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.2.7 - com.hazelcast:hazelcast-cloud 3.2.7 - com.hazelcast:hazelcast-hibernate...