CVE-2026-84218 vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode...

GHSA-C9FF-59G8-M36Q vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode...

CVE-2026-40859 vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode...

CVE-2026-42527 vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode...

GHSA-6QW3-4796-5984 vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode...

GHSA-8H6P-JVHF-9HCR vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode...

CraftCMS Debug Methods Exposed Detection

Detected CraftCMS with devMode enabled, which exposed the Yii2 debug toolbar and sensitive information. This misconfiguration could have leaked database queries, session data, cookies, stack traces, CSRF tokens, and internal application details to unauthenticated users. !/usr/bin/env python3 --...

CVE-2026-56740 vulnerabilities

Vulnerabilities for packages: apache-pulsar-fips, tez, spark-kubernetes-operator, pinot, ranger, kafka, apache-hop-fips, hadoop-client-modules, apache-camel-karavan-devmode, spark-kubernetes-operator-fips, druid, spark, zookeeper, confluent-kafka-jre-bcfips, kafka-fips, hadoop-fips, apache-nifi,...

CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: apache-pulsar-fips, tez, spark-kubernetes-operator, pinot, ranger, kafka, apache-hop-fips, hadoop-client-modules, apache-camel-karavan-devmode, spark-kubernetes-operator-fips, druid, spark, zookeeper, confluent-kafka-jre-bcfips, kafka-fips, hadoop-fips, apache-nifi,...

GHSA-2R2C-CX56-8933 vulnerabilities

Vulnerabilities for packages: apache-pulsar-fips, tez, spark-kubernetes-operator, pinot, ranger, kafka, apache-hop-fips, hadoop-client-modules, apache-camel-karavan-devmode, spark-kubernetes-operator-fips, druid, spark, zookeeper, confluent-kafka-jre-bcfips, kafka-fips, hadoop-fips, apache-nifi,...

GHSA-47QP-HQVX-6R3F vulnerabilities

Vulnerabilities for packages: apache-pulsar-fips, tez, spark-kubernetes-operator, pinot, ranger, kafka, apache-hop-fips, hadoop-client-modules, apache-camel-karavan-devmode, spark-kubernetes-operator-fips, druid, spark, zookeeper, confluent-kafka-jre-bcfips, kafka-fips, hadoop-fips, apache-nifi,...

GHSA-27VM-5VPJ-RP5G vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode...

CVE-2026-40022 vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode...

CVE-2026-27131

The Sprig Plugin for Craft CMS is a reactive Twig component framework for Craft CMS. Starting in version 2.0.0 and prior to versions 2.15.2 and 3.15.2, admin users, and users with explicit permission to access the Sprig Playground, could potentially expose the security key, credentials, and other...

Sprig Plugin for Craft CMS potentially discloses sensitive information via Sprig Playground

Admin users, and users with explicit permission to access the Sprig Playground, could potentially expose the security key, credentials, and other sensitive configuration data, in addition to running the hashData signing function. This issue was mitigated in versions 3.7.2 and 2.15.2 by disabling...

CVE-2026-27131

The Sprig Plugin for Craft CMS is a reactive Twig component framework for Craft CMS. Starting in version 2.0.0 and prior to versions 2.15.2 and 3.15.2, admin users, and users with explicit permission to access the Sprig Playground, could potentially expose the security key, credentials, and other...

CVE-2026-27131: Exposure of Sensitive Information to an Unauthorized Actor

The Sprig Plugin for Craft CMS is a reactive Twig component framework for Craft CMS. Starting in version 2.0.0 and prior to versions 2.15.2 and 3.15.2, admin users, and users with explicit permission to access the Sprig Playground, could potentially expose the security key, credentials, and other...

CISA Flags Adobe AEM Flaw with Perfect 10.0 Score — Already Under Active Attack

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a critical security flaw impacting Adobe Experience Manager to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The vulnerability in question is CVE-2025-54253 CVSS score:...

Quarkus DevMode Enabled

Quarkus installed on the remote host is configured to operate in development mode devMode. While this environment can help speed up development of web applications, it can leak information about the underlying web applications. No source data...

CraftCMS DevMode Enabled

CraftCMS installed on the remote host is configured to operate in development mode devMode. While this environment can help speed up development of web applications, it can leak information about the underlying web applications. No source data...