2386 matches found
cn.net.pap.example:pap4j-boot3-example-spring-ai (0.0.4), com.redis.om:redis-om-spring-ai (>=1.0.0-rc2, <=2.0.10) +6 more potentially affected by CVE-2026-47852 via org.springframework.ai:spring-ai-transformers (>=1.0.0, <=2.0.0)
org.springframework.ai:spring-ai-transformers MAVEN version =1.0.0, =1.0.0-rc2, =0.0.4, =0.3.0, =0.0.1, =0.2.2, =1.0.0, =2.0.0 - site.addzero:ai-agent 2026.06.20 Source cves: CVE-2026-47852 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-19267427...
com.espertech:esperio-amqp (>=4.6.0, <=7.1.0), io.brooklyn.example:brooklyn-example-global-web-fabric (0.4.0) +9 more potentially affected by CVE-2026-63336 via com.rabbitmq:amqp-client (2.7.1)
com.rabbitmq:amqp-client MAVEN version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.espertech:esperio-amqp =4.6.0, =7.1.0 - io.brooklyn.example:brooklyn-example-global-web-fabric 0.4.0 -...
tomcat: Apache Tomcat: Denial of Service via WebSocket chat example
A flaw was found in Apache Tomcat. This uncontrolled resource consumption vulnerability, located in the WebSocket chat example, allows a remote attacker to cause a Denial of Service DoS by exhausting system resources. This can lead to the affected system becoming unresponsive or crashing...
Fixed in Apache Tomcat 9.0.121
Low: Authenticated WebSocket session survives end of HTTP session CVE-2026-73180 If the session ID for an authenticated HTTP session was changed after a WebSocket connection had been established under that authenticated HTTP session, the WebSokcet session would not be closed as required by the...
PT-2026-73440
Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.24 through 10.1.57, from 9.0.89 through 9.0.120. Users who have followed the security guidance to remove the examples web application...
apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2026-68970 via apache-airflow (1.10.12)
apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2026-68970 Source advisory:...
apache-liminal (>=0.0.4rc1, <=0.0.5), apache-liminal-zion (>=0.0.0, <=2.0.0) +1 more potentially affected by CVE-2026-68969 via apache-airflow (2.1.2)
apache-airflow PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.4rc1, =0.0.0, =14.4.7, =14.7.0 Source cves: CVE-2026-68969 Source advisory: OSV:GHSA-CJV4-7HP2-2X9H...
apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2026-68969 via apache-airflow (1.10.12)
apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2026-68969 Source advisory:...
apache-liminal (>=0.0.4rc1, <=0.0.5), apache-liminal-zion (>=0.0.0, <=2.0.0) +1 more potentially affected by CVE-2026-68970 via apache-airflow (2.1.2)
apache-airflow PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.4rc1, =0.0.0, =14.4.7, =14.7.0 Source cves: CVE-2026-68970 Source advisory: OSV:GHSA-F3C2-J7G8-VPP8...
example-pkg-naturalett (>=14.4.0, <=14.4.6) potentially affected by CVE-2026-68969 via apache-airflow (2.1.0)
apache-airflow PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - example-pkg-naturalett =14.4.0, =14.4.6 Source cves: CVE-2026-68969 Source advisory: OSV:GHSA-CJV4-7HP2-2X9H...
example-pkg-naturalett (>=14.4.0, <=14.4.6) potentially affected by CVE-2026-68970 via apache-airflow (2.1.0)
apache-airflow PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - example-pkg-naturalett =14.4.0, =14.4.6 Source cves: CVE-2026-68970 Source advisory: OSV:GHSA-F3C2-J7G8-VPP8...
apache-liminal (>=0.0.4rc1, <=0.0.5), apache-liminal-zion (>=0.0.0, <=2.0.0) +1 more potentially affected by CVE-2026-68971 via apache-airflow (2.1.2)
apache-airflow PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.4rc1, =0.0.0, =14.4.7, =14.7.0 Source cves: CVE-2026-68971 Source advisory: OSV:GHSA-5247-M8W9-2V4M...
example-pkg-naturalett (>=14.4.0, <=14.4.6) potentially affected by CVE-2026-68971 via apache-airflow (2.1.0)
apache-airflow PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - example-pkg-naturalett =14.4.0, =14.4.6 Source cves: CVE-2026-68971 Source advisory: OSV:GHSA-5247-M8W9-2V4M...
apache-liminal (>=0.0.4rc1, <=0.0.5), apache-liminal-zion (>=0.0.0, <=2.0.0) +1 more potentially affected by CVE-2026-54183 via apache-airflow (2.1.2)
apache-airflow PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.4rc1, =0.0.0, =14.4.7, =14.7.0 Source cves: CVE-2026-54183 Source advisory: OSV:GHSA-G4QJ-5VXV-WGGF...
airflow-clickhouse-plugin (0.6.0), dataverk-airflow (>=0.3.18, <=0.3.23) +1 more potentially affected by CVE-2026-68076 via apache-airflow (2.0.2)
apache-airflow PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin 0.6.0 - dataverk-airflow =0.3.18, =11.8.0, =13.7.0 Source cves: CVE-2026-68076 Source advisory:...
example-pkg-naturalett (>=14.4.0, <=14.4.6) potentially affected by CVE-2026-68076 via apache-airflow (2.1.0)
apache-airflow PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - example-pkg-naturalett =14.4.0, =14.4.6 Source cves: CVE-2026-68076 Source advisory: OSV:GHSA-75MG-C62R-V95G...
example-pkg-naturalett (>=14.4.0, <=14.4.6) potentially affected by CVE-2026-54183 via apache-airflow (2.1.0)
apache-airflow PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - example-pkg-naturalett =14.4.0, =14.4.6 Source cves: CVE-2026-54183 Source advisory: OSV:GHSA-G4QJ-5VXV-WGGF...
apache-liminal (>=0.0.4rc1, <=0.0.5), apache-liminal-zion (>=0.0.0, <=2.0.0) +1 more potentially affected by CVE-2026-68076 via apache-airflow (2.1.2)
apache-airflow PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.4rc1, =0.0.0, =14.4.7, =14.7.0 Source cves: CVE-2026-68076 Source advisory: OSV:GHSA-75MG-C62R-V95G...
apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2026-68968 via apache-airflow (1.10.12)
apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2026-68968 Source advisory:...