GHSA-MVH2-CRG5-V77C vulnerabilities

Vulnerabilities for packages: logstash, trino, spark, strimzi-kafka-operator, akhq, wavefront-proxy, druid, management-api-for-apache-cassandra-5.0, neo4j, apache-nifi, opensearch, thingsboard, apache-pulsar, zipkin, cloudwatch-exporter, flyway, celeborn, infinispan, apicurio-registry,...

GHSA-C69G-56F8-XWQJ vulnerabilities

Vulnerabilities for packages: trino, spark, strimzi-kafka-operator, akhq, wavefront-proxy, druid, management-api-for-apache-cassandra-5.0, neo4j, apache-nifi, opensearch, thingsboard, apache-pulsar, zipkin, cloudwatch-exporter, flyway, celeborn, infinispan, apicurio-registry, keycloak,...

GHSA-GCJF-9MGH-3P7G vulnerabilities

Vulnerabilities for packages: logstash, trino, spark, strimzi-kafka-operator, akhq, wavefront-proxy, druid, management-api-for-apache-cassandra-5.0, neo4j, apache-nifi, opensearch, thingsboard, apache-pulsar, zipkin, cloudwatch-exporter, flyway, celeborn, infinispan, apicurio-registry,...

CVE-2026-59921 vulnerabilities

Vulnerabilities for packages: logstash, trino, spark, strimzi-kafka-operator, akhq, wavefront-proxy, druid, management-api-for-apache-cassandra-5.0, neo4j, apache-nifi, opensearch, thingsboard, apache-pulsar, zipkin, cloudwatch-exporter, flyway, celeborn, infinispan, apicurio-registry,...

GHSA-JPPX-W49H-X2QQ vulnerabilities

Vulnerabilities for packages: logstash, trino, spark, strimzi-kafka-operator, akhq, wavefront-proxy, druid, management-api-for-apache-cassandra-5.0, neo4j, apache-nifi, opensearch, thingsboard, apache-pulsar, zipkin, cloudwatch-exporter, flyway, celeborn, infinispan, apicurio-registry,...

CVE-2026-55833 vulnerabilities

Vulnerabilities for packages: logstash, trino, spark, strimzi-kafka-operator, akhq, wavefront-proxy, druid, management-api-for-apache-cassandra-5.0, neo4j, apache-nifi, opensearch, thingsboard, apache-pulsar, zipkin, cloudwatch-exporter, flyway, celeborn, infinispan, apicurio-registry,...

CVE-2026-56745 vulnerabilities

Vulnerabilities for packages: logstash, trino, spark, strimzi-kafka-operator, akhq, wavefront-proxy, druid, management-api-for-apache-cassandra-5.0, neo4j, apache-nifi, opensearch, thingsboard, apache-pulsar, zipkin, cloudwatch-exporter, flyway, celeborn, infinispan, apicurio-registry,...

CVE-2026-59900 vulnerabilities

Vulnerabilities for packages: trino, spark, strimzi-kafka-operator, akhq, wavefront-proxy, druid, management-api-for-apache-cassandra-5.0, neo4j, apache-nifi, opensearch, thingsboard, apache-pulsar, zipkin, cloudwatch-exporter, flyway, celeborn, infinispan, apicurio-registry, keycloak,...

CVE-2026-59901 vulnerabilities

Vulnerabilities for packages: logstash, trino, spark, akhq, strimzi-kafka-operator, wavefront-proxy, cassandra-reaper, zookeeper, druid, management-api-for-apache-cassandra-5.0, neo4j, apache-nifi, opensearch, thingsboard, apache-pulsar, zipkin, cloudwatch-exporter, flyway, celeborn, infinispan,...

GHSA-558V-64GR-WGG4 vulnerabilities

Vulnerabilities for packages: logstash, trino, spark, akhq, strimzi-kafka-operator, wavefront-proxy, cassandra-reaper, zookeeper, druid, management-api-for-apache-cassandra-5.0, neo4j, apache-nifi, opensearch, thingsboard, apache-pulsar, zipkin, cloudwatch-exporter, flyway, celeborn, infinispan,...

Malicious code in lambda-cloudwatch-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d62c2ab5388572a03d3c4f28ee268d562675a2ebbff48cf1375728f837365f4 The package's preinstall script npm install @sentry/node && node examples/verify.js executes on npm install and initializes Sentry with a hardcoded...

MAL-2026-10922 Malicious code in lambda-cloudwatch-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d62c2ab5388572a03d3c4f28ee268d562675a2ebbff48cf1375728f837365f4 The package's preinstall script npm install @sentry/node && node examples/verify.js executes on npm install and initializes Sentry with a hardcoded...

Insertion of Sensitive Information into Log File

Overview bedrock-agentcore is an An SDK for using Bedrock AgentCore Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File through the entrypoint invocation path and emitinvocationotelattributes OpenTelemetry helper. An attacker can expose raw prompts...

CVE-2026-15737

AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore Python SDK versions 1.4.8 and...

CVE-2026-15737 Sensitive content disclosure via OpenTelemetry spans in AgentCore Python SDK

AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore Python SDK versions 1.4.8 and...

CVE-2026-15737

AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore Python SDK versions 1.4.8 and...

CVE-2026-15737

CVE-2026-15737 affects the AWS Bedrock AgentCore Python SDK. Unintended logging of sensitive user content occurs in the OpenTelemetry instrumentation for SDK versions 1.4.8 and 1.5.0, where raw user prompts and complete agent responses were written into OpenTelemetry span attributes on every invo...

EUVD-2026-44988

AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore Python SDK versions 1.4.8 and...

CVE-2026-15737 Sensitive content disclosure via OpenTelemetry spans in AgentCore Python SDK

AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore Python SDK versions 1.4.8 and...

CVE-2026-15737 Sensitive content disclosure via OpenTelemetry spans in AgentCore Python SDK

AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore Python SDK versions 1.4.8 and...