com.infobip.kafkistry:kafkistry-app (>=0.7.0, <=0.10.2), com.infobip.kafkistry:kafkistry-auditing (>=0.7.0, <=0.10.2) +21 more potentially affected by CVE-2026-56623 via org.apache.sshd:sshd-git (>=2.2.0, <=2.18.0)

org.apache.sshd:sshd-git MAVEN version =2.2.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.9.9, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.62.0, =1.94.0, =1.0.0, =1.1.1 and more Source cves: CVE-2026-56623 Source advisory: SNYK:JAVA-ORGAPACHESSHD-19352146...

com.infobip.kafkistry:kafkistry-app (>=0.7.0, <=0.10.2), com.infobip.kafkistry:kafkistry-auditing (>=0.7.0, <=0.10.2) +21 more potentially affected by CVE-2026-56623 via org.apache.sshd:sshd-git (>=2.2.0, <=2.18.0)

org.apache.sshd:sshd-git MAVEN version =2.2.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.9.9, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.62.0, =1.94.0, =1.0.0, =1.1.1 and more Source cves: CVE-2026-56623 Source advisory: MEND:CVE-2026-56623...

com.infobip.kafkistry:kafkistry-app (>=0.7.0, <=0.10.2), com.infobip.kafkistry:kafkistry-auditing (>=0.7.0, <=0.10.2) +21 more potentially affected by CVE-2026-48827 via org.apache.sshd:sshd-git (>=2.2.0, <=2.17.1)

org.apache.sshd:sshd-git MAVEN version =2.2.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.9.9, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.62.0, =1.94.0, =1.0.0, =1.1.1 and more Source cves: CVE-2026-48827 Source advisory: OSV:GHSA-MW4M-QHPG-J82M...

CVE-2020-10591

An issue was discovered in Walmart Labs Concord before 1.44.0. CORS Access-Control-Allow-Origin headers have a potentially unsafe dependency on Origin headers, and are not configurable. This allows remote attackers to discover host information, nodes, API metadata, and references to usernames via...

com.erudika:para-jar (>=1.31.3, <=1.34.0), com.erudika:para-server (>=1.31.3, <=1.34.0) +283 more potentially affected by CVE-2025-53864 via com.nimbusds:nimbus-jose-jwt (7.2.1)

com.nimbusds:nimbus-jose-jwt MAVEN version 7.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.erudika:para-jar =1.31.3, =1.31.3, =1.31.3, =1.0.0, =1.22.0, =1.22.0, =1.22.0, =0.29.4, =0.29.4,...

concordtoys.net Cross Site Scripting vulnerability OBB-3895387

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

concordconsulting.net Improper Access Control vulnerability OBB-3857935

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

com.github.vindell:jwt-issuer-with-nimbus (>=1.0.1.release, <=1.0.3.release), com.github.vindell:spring-boot-starter-shiro-jwt (>=1.0.5.release, <=1.0.6.release) +294 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (7.0.1)

com.nimbusds:nimbus-jose-jwt MAVEN version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.github.vindell:jwt-issuer-with-nimbus =1.0.1.release, =1.0.5.release, =1.16.0, =1.18.0, =1.16.0,...

articles.concordmonitor.com Cross Site Scripting vulnerability OBB-3848535

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in concord-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7557a87ec03b1b952655ca887ba93d78eb3e94a2674fbc2e2d2b86fae5272dc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-204 Malicious code in concord-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7557a87ec03b1b952655ca887ba93d78eb3e94a2674fbc2e2d2b86fae5272dc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in concord-console

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

concord-express.de Cross Site Scripting vulnerability OBB-2802959

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

concordpodiatry.com Cross Site Scripting vulnerability OBB-2660901

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

concordmedspa.com Cross Site Scripting vulnerability OBB-2660896

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ca.ibodrov.concord:testcontainers-concord (>=0.0.2, <=0.0.20), ca.ibodrov.concord:testcontainers-concord-core (>=0.0.21, <=2.0.2) +231 more potentially affected by CVE-2017-7561 via org.jboss.resteasy:resteasy-jaxrs (3.1.4.final)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 3.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - ca.ibodrov.concord:testcontainers-concord =0.0.2, =0.0.21, =0.0.2, =0.0.1, =1.0.6.final...

GHSA-6566-9526-52V6 Exposure of Sensitive Information to an Unauthorized Actor in Concord

An issue was discovered in Walmart Labs Concord before 1.44.0. CORS Access-Control-Allow-Origin headers have a potentially unsafe dependency on Origin headers, and are not configurable. This allows remote attackers to discover host information, nodes, API metadata, and references to usernames via...

Exposure of Sensitive Information to an Unauthorized Actor in Concord

An issue was discovered in Walmart Labs Concord before 1.44.0. CORS Access-Control-Allow-Origin headers have a potentially unsafe dependency on Origin headers, and are not configurable. This allows remote attackers to discover host information, nodes, API metadata, and references to usernames via...

ca.vanzyl.concord.plugins:ccd-plugin (>=0.0.57, <=0.0.59), ca.vanzyl.concord.plugins:concord-k8s-plugin (>=0.0.1, <=0.9.3) +50 more potentially affected by CVE-2020-10591 via com.walmartlabs.concord:concord-common (>=1.0.0, <=1.43.0)

com.walmartlabs.concord:concord-common MAVEN version =1.0.0, =0.0.57, =0.0.1, =0.0.4, =0.0.1, =1.0.0, =1.17.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.8.0, =1.42.0, =1.43.0 and more Source cves: CVE-2020-10591 Source advisory: OSV:GHSA-6566-9526-52V6...

ca.vanzyl.concord.plugins:ccd-plugin (>=0.0.57, <=0.0.59), ca.vanzyl.concord.plugins:concord-k8s-plugin (>=0.0.1, <=0.9.3) +50 more potentially affected by CVE-2020-10591 via com.walmartlabs.concord:concord-common (>=1.0.0, <=1.43.0)

com.walmartlabs.concord:concord-common MAVEN version =1.0.0, =0.0.57, =0.0.1, =0.0.4, =0.0.1, =1.0.0, =1.17.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.8.0, =1.42.0, =1.43.0 and more Source cves: CVE-2020-10591 Source advisory: GHSA-6566-9526-52V6...