CVE-2026-42527 vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode...

CVE-2026-40859 vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode...

GHSA-8H6P-JVHF-9HCR vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode...

GHSA-6QW3-4796-5984 vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode...

CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: spark-kubernetes-operator-fips, apache-hop, zookeeper-fips, apache-pulsar-fips, hadoop-fips, apache-pulsar, pinot, spark-kubernetes-operator, apache-nifi, confluent-kafka-jre-bcfips, confluent-kafka, kafka, apache-camel-karavan-devmode, druid, hadoop-client-modules,...

CVE-2026-56740 vulnerabilities

Vulnerabilities for packages: spark-kubernetes-operator-fips, apache-hop, zookeeper-fips, apache-pulsar-fips, hadoop-fips, apache-pulsar, pinot, spark-kubernetes-operator, apache-nifi, confluent-kafka-jre-bcfips, confluent-kafka, kafka, apache-camel-karavan-devmode, druid, hadoop-client-modules,...

GHSA-47QP-HQVX-6R3F vulnerabilities

Vulnerabilities for packages: spark-kubernetes-operator-fips, apache-hop, zookeeper-fips, apache-pulsar-fips, hadoop-fips, apache-pulsar, pinot, spark-kubernetes-operator, apache-nifi, confluent-kafka-jre-bcfips, confluent-kafka, kafka, apache-camel-karavan-devmode, druid, hadoop-client-modules,...

GHSA-2R2C-CX56-8933 vulnerabilities

Vulnerabilities for packages: spark-kubernetes-operator-fips, apache-hop, zookeeper-fips, apache-pulsar-fips, hadoop-fips, apache-pulsar, pinot, spark-kubernetes-operator, apache-nifi, confluent-kafka-jre-bcfips, confluent-kafka, kafka, apache-camel-karavan-devmode, druid, hadoop-client-modules,...

CVE-2026-40022 vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode...

GHSA-27VM-5VPJ-RP5G vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode...

CVE-2026-27131

The Sprig Plugin for Craft CMS is a reactive Twig component framework for Craft CMS. Starting in version 2.0.0 and prior to versions 2.15.2 and 3.15.2, admin users, and users with explicit permission to access the Sprig Playground, could potentially expose the security key, credentials, and other...

Sprig Plugin for Craft CMS potentially discloses sensitive information via Sprig Playground

Admin users, and users with explicit permission to access the Sprig Playground, could potentially expose the security key, credentials, and other sensitive configuration data, in addition to running the hashData signing function. This issue was mitigated in versions 3.7.2 and 2.15.2 by disabling...

CVE-2026-27131

The Sprig Plugin for Craft CMS is a reactive Twig component framework for Craft CMS. Starting in version 2.0.0 and prior to versions 2.15.2 and 3.15.2, admin users, and users with explicit permission to access the Sprig Playground, could potentially expose the security key, credentials, and other...

CVE-2026-27131: Exposure of Sensitive Information to an Unauthorized Actor

The Sprig Plugin for Craft CMS is a reactive Twig component framework for Craft CMS. Starting in version 2.0.0 and prior to versions 2.15.2 and 3.15.2, admin users, and users with explicit permission to access the Sprig Playground, could potentially expose the security key, credentials, and other...

CISA Flags Adobe AEM Flaw with Perfect 10.0 Score — Already Under Active Attack

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a critical security flaw impacting Adobe Experience Manager to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The vulnerability in question is CVE-2025-54253 CVSS score:...

Quarkus DevMode Enabled

Quarkus installed on the remote host is configured to operate in development mode devMode. While this environment can help speed up development of web applications, it can leak information about the underlying web applications. No source data...

CraftCMS DevMode Enabled

CraftCMS installed on the remote host is configured to operate in development mode devMode. While this environment can help speed up development of web applications, it can leak information about the underlying web applications. No source data...

The vulnerability of the devMode debugging mode implementation in the Apache Struts software platform allows attackers to perform cross-site scripting attacks.

The vulnerability of the devMode debugging mode implementation in the Apache Struts software platform is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the devMode debugging mode implementation in the Apache Struts software platform allows attackers to perform cross-site scripting attacks.

The vulnerability of the devMode debugging mode implementation in the Apache Struts software platform is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2019-11358

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extendtrue, , … because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype. Recent assessments: ANHKWAR at Ma...