io.fabric8.funktion.connector:connector-linkedin (>=1.1.9, <=1.1.55), io.fabric8.funktion.connector:connector-servicenow (>=1.1.9, <=1.1.55) +27 more potentially affected by CVE-2026-50623 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.1.8)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - io.fabric8.funktion.connector:connector-linkedin =1.1.9, =1.1.9, =1.1.55 -...

io.fabric8:process-spring-boot-itests-invoicing (>=1.1.0.cr2, <=1.1.0.cr3), io.fabric8:process-spring-boot-itests-service-invoicing (>=1.1.0.cr2, <=1.1.0.cr5) +3 more potentially affected by CVE-2026-41007 via org.springframework.hateoas:spring-hateoas (0.12.0.release)

org.springframework.hateoas:spring-hateoas MAVEN version 0.12.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - io.fabric8:process-spring-boot-itests-invoicing =1.1.0.cr2,...

RHCOS 4 : OpenShift Container Platform 4.7.5 (RHSA-2021:1006)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1006 advisory. - golang: crypto/elliptic: incorrect operations on the P-224 curve CVE-2021-3114 - gogo/protobuf: plugin/unmarshal/unmarshal.go lack...

io.fabric8.pipeline:kubernetes-pipeline-aggregator (1.3), io.fabric8.pipeline:kubernetes-pipeline-core (1.3) +6 more potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1.14)

org.jenkins-ci.plugins:script-security MAVEN version 1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.fabric8.pipeline:kubernetes-pipeline-aggregator 1.3 -...

com.github.cafdataprocessing:boilerplate-api-web (>=2.0.0-5, <=2.3.0-92), com.github.cafdataprocessing:corepolicy-web (>=1.0.0-4, <=1.2.0-165) +36 more potentially affected by CVE-2026-40973 via org.springframework.boot:spring-boot (1.1.3.release)

org.springframework.boot:spring-boot MAVEN version 1.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot and may be impacted: - com.github.cafdataprocessing:boilerplate-api-web =2.0.0-5, =1.0.0-4, =1.1.0.cr3...

io.fabric8:fabric8-maven-generator-spring-boot (>=3.1.66, <=3.1.70), io.fabric8:fabric8-maven-plugin (>=3.1.65, <=3.1.70) +1 more potentially affected by CVE-2026-40972 via org.springframework.boot:spring-boot-devtools (1.3.7.release)

org.springframework.boot:spring-boot-devtools MAVEN version 1.3.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-devtools and may be impacted: - io.fabric8:fabric8-maven-generator-spring-boot =3.1.66,...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (1.0.4), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter-example (1.0.4) +4 more potentially affected by CVE-2026-40972 via org.springframework.boot:spring-boot-devtools (1.4.4.release)

org.springframework.boot:spring-boot-devtools MAVEN version 1.4.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-devtools and may be impacted: -...

io.fabric8:process-spring-boot-container (>=1.1.0.cr3, <=1.1.0.cr5), io.fabric8:process-spring-boot-itests-invoicing (1.1.0.cr3) +2 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.1.3.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - io.fabric8:process-spring-boot-container...

io.fabric8.jube.images.fabric8:fabric8-http-gateway (>=2.0.5, <=2.0.8), io.fabric8.jube.images.jube:jube (>=2.0.2, <=2.0.42) +15 more potentially affected by CVE-2026-1002 via io.vertx:vertx-core (2.1.4)

io.vertx:vertx-core MAVEN version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-core and may be impacted: - io.fabric8.jube.images.fabric8:fabric8-http-gateway =2.0.5, =2.0.2, =2.0.2, =2.0.2, =2.0.2, =2.0.9, =2.0.2, =2.0.2,...

EUVD-2022-5525

Malicious code in bioql PyPI...

EUVD-2022-4447

Malicious code in bioql PyPI...

com.github.woki:payments-adyen-api (>=1.3.0, <=1.3.1), de.juplo:hibernate-maven-plugin (>=2.1.0, <=2.1.1) +41 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (5.3.1.final)

org.hibernate:hibernate-validator MAVEN version 5.3.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.github.woki:payments-adyen-api =1.3.0, =2.1.0, =2.3.9, =2.3.69, =2.3.69, =2.3.69,...

com.github.mygreen:super-csv-annotation (>=2.0, <=2.0.3), com.kumuluz.ee:kumuluzee-bean-validation-hibernate-validator (>=2.1.0-beta.2, <=2.3.0-beta.1) +53 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (5.3.3.final)

org.hibernate:hibernate-validator MAVEN version 5.3.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.github.mygreen:super-csv-annotation =2.0, =2.1.0-beta.2, =0.22.0, =2.3.13, =2.3.78,...

io.fabric8:process-spring-boot-container (>=1.1.0.cr3, <=1.1.0.cr5), io.fabric8:process-spring-boot-itests-invoicing (1.1.0.cr3) +4 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.3.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - io.fabric8:process-spring-boot-container =1.1.0.cr3,...

kubernetes-client: Insecure deserialization in unmarshalYaml method

A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly configured YAML parsing, this will allow a local and privileged attacker to supply malicious YAML...

io.fabric8.pipeline:kubernetes-pipeline-aggregator (1.3), io.fabric8.pipeline:kubernetes-pipeline-devops-steps (1.3) +4 more potentially affected by CVE-2022-43401 via org.jenkins-ci.plugins.workflow:workflow-cps (1.7-alpha-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.7-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.fabric8.pipeline:kubernetes-pipeline-aggregator 1.3 -...

io.fabric8.pipeline:kubernetes-pipeline-aggregator (1.3), io.fabric8.pipeline:kubernetes-pipeline-devops-steps (1.3) +4 more potentially affected by CVE-2022-43402 via org.jenkins-ci.plugins.workflow:workflow-cps (1.7-alpha-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.7-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.fabric8.pipeline:kubernetes-pipeline-aggregator 1.3 -...

io.fabric8.pipeline:kubernetes-pipeline-aggregator (1.3), io.fabric8.pipeline:kubernetes-pipeline-core (1.3) +6 more potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins:script-security (1.14)

org.jenkins-ci.plugins:script-security MAVEN version 1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.fabric8.pipeline:kubernetes-pipeline-aggregator 1.3 -...

au.net.causal.maven.plugins:boxdb-maven-plugin (3.2), co.elastic.docker-base:co.elastic.docker-base.gradle.plugin (>=0.0.1, <=0.0.5) +78 more potentially affected by CVE-2022-25914 via com.google.cloud.tools:jib-core (>=0.1.1, <=0.21.0)

com.google.cloud.tools:jib-core MAVEN version =0.1.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.1.0, =1.0, =0.4.0, =0.34.0, =4.3.0, =4.3.0, =4.3.0, =4.3.0, =4.3.0, =4.3.0, =4.4.2 and more Source cves: CVE-2022-25914 Source advisory: SNYK:JAVA-COMGOOGLECLOUDTOOLS-2968871...

Arbitrary Code Execution

io.fabric8:kubernetes-client is vulnerable to arbitrary code execution. Misconfigured YAML parsing in unmarshalYaml function allows local authenticated attackers to execute arbitrary code on the target machine via a maliciously crafted YAML string...