246 matches found
Security Bulletin: IBM Operator for Apache Flink is affected by a vulnerability in AssertJ library (CVE-2026-24400)
Summary This security vulnerability in the AssertJ library used within IBM Event Processing could allow an attacker to exploit specially crafted XML input to cause local file disclosure, server-side request forgery SSRF, or denial of service in Java-based components running on the Apache Flink...
ai.chronon:flink_2.12 (>=0.0.62 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91), ai.chronon:online_2.11 (>=0.0.25 <=revert-391-thread-0.0.24) +6989 more potentially affected by CVE-2026-33558 via org.apache.kafka:kafka-clients (>=0.11.0.0 <=3.9.1)
org.apache.kafka:kafka-clients MAVEN version =0.11.0.0, =0.0.62, =0.0.25, =0.0.25, =0.0.25, =0.0.86, =0.0.86, =0.0.1, =0.0.1, =thread-pool-0.0.24-dev, =0.0.6, =1.0.6, =1.0.6, =0.0.2, =0.3.0 and more Source cves: CVE-2026-33558 Source advisory: SNYK:JAVA-ORGAPACHEKAFKA-16300072...
CVE-2026-34479 vulnerabilities
Vulnerabilities for packages: kserve-modelmesh, solr, spark, celeborn, sonarqube, logstash, flink, kafka, druid, akhq...
GHSA-H383-GMXW-35V2 vulnerabilities
Vulnerabilities for packages: kserve-modelmesh, solr, spark, celeborn, sonarqube, logstash, flink, kafka, druid, akhq...
GHSA-H383-GMXW-35V2 vulnerabilities
Vulnerabilities for packages: elasticsearch, solr, druid, pinot-fips, opensearch, commercial-elasticsearch, kafka, sonarqube, spark-fips, pinot, elasticsearch-fips, akhq, flink, kserve-modelmesh, celeborn, logstash, spark, kafka-fips, geoserver, logstash-fips, nuxeo...
CVE-2026-34479 vulnerabilities
Vulnerabilities for packages: elasticsearch, solr, druid, pinot-fips, opensearch, commercial-elasticsearch, kafka, sonarqube, spark-fips, pinot, elasticsearch-fips, akhq, flink, kserve-modelmesh, celeborn, logstash, spark, kafka-fips, geoserver, logstash-fips, nuxeo...
CVE-2026-34481 vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator, neo4j, apache-pulsar, solr, spark, flink...
GHSA-W35J-PV5H-Q9Q9 vulnerabilities
Vulnerabilities for packages: spark, kafka-bridge, apache-camel-karavan-devmode, spark-fips, camunda, solr, flink, wso2is, apache-pulsar, apache-pulsar-fips, camunda-zeebe, spark-kubernetes-operator, strimzi-kafka-operator, neo4j, spark-kubernetes-operator-fips, kafka-bridge-fips...
CVE-2026-34481 vulnerabilities
Vulnerabilities for packages: spark, kafka-bridge, apache-camel-karavan-devmode, spark-fips, camunda, solr, flink, wso2is, apache-pulsar, apache-pulsar-fips, camunda-zeebe, spark-kubernetes-operator, strimzi-kafka-operator, neo4j, spark-kubernetes-operator-fips, kafka-bridge-fips...
CVE-2026-34480 vulnerabilities
Vulnerabilities for packages: elasticsearch, solr, wso2is, druid, infinispan, pinot-fips, opensearch, apache-pulsar, commercial-elasticsearch, ghidra, kafka, apache-tika, sonarqube, wavefront-proxy, apache-camel-karavan-devmode, spark-fips, tritonserver-backend-vllm-cuda-13.0, pinot, apache-hop,...
GHSA-3PXV-7CMR-FJR4 vulnerabilities
Vulnerabilities for packages: elasticsearch, solr, wso2is, druid, infinispan, pinot-fips, opensearch, apache-pulsar, commercial-elasticsearch, ghidra, kafka, apache-tika, sonarqube, wavefront-proxy, apache-camel-karavan-devmode, spark-fips, tritonserver-backend-vllm-cuda-13.0, pinot, apache-hop,...
CVE-2026-34480 vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator, kserve-modelmesh, spark, logstash, opensearch, apache-activemq-artemis, celeborn, infinispan, apache-pulsar, apache-tika, airflow, flink, druid, neo4j, zipkin, wavefront-proxy, solr, akhq, kafka, sonarqube...
GHSA-3PXV-7CMR-FJR4 vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator, kserve-modelmesh, spark, logstash, opensearch, apache-activemq-artemis, celeborn, infinispan, apache-pulsar, apache-tika, airflow, flink, druid, neo4j, zipkin, wavefront-proxy, solr, akhq, kafka, sonarqube...
CVE-2026-3052
A vulnerability was found in DataLinkDC dinky up to 1.2.5. The impacted element is the function proxyUba of the file dinky-admin/src/main/java/org/dinky/controller/FlinkProxyController.java of the component Flink Proxy Controller. Performing a manipulation results in server-side request forgery. ...
CVE-2026-3052
A vulnerability was found in DataLinkDC dinky up to 1.2.5. The impacted element is the function proxyUba of the file dinky-admin/src/main/java/org/dinky/controller/FlinkProxyController.java of the component Flink Proxy Controller. Performing a manipulation results in server-side request forgery. ...
CVE-2026-3052 DataLinkDC dinky Flink Proxy Controller FlinkProxyController.java proxyUba server-side request forgery
A vulnerability was found in DataLinkDC dinky up to 1.2.5. The impacted element is the function proxyUba of the file dinky-admin/src/main/java/org/dinky/controller/FlinkProxyController.java of the component Flink Proxy Controller. Performing a manipulation results in server-side request forgery. ...
EUVD-2026-7433
A vulnerability was found in DataLinkDC dinky up to 1.2.5. The impacted element is the function proxyUba of the file dinky-admin/src/main/java/org/dinky/controller/FlinkProxyController.java of the component Flink Proxy Controller. Performing a manipulation results in server-side request forgery. ...
CVE-2026-3052 DataLinkDC dinky Flink Proxy Controller FlinkProxyController.java proxyUba server-side request forgery
A vulnerability was found in DataLinkDC dinky up to 1.2.5. The impacted element is the function proxyUba of the file dinky-admin/src/main/java/org/dinky/controller/FlinkProxyController.java of the component Flink Proxy Controller. Performing a manipulation results in server-side request forgery. ...
CVE-2026-3052 DataLinkDC dinky Flink Proxy Controller FlinkProxyController.java proxyUba server-side request forgery
A vulnerability was found in DataLinkDC dinky up to 1.2.5. The impacted element is the function proxyUba of the file dinky-admin/src/main/java/org/dinky/controller/FlinkProxyController.java of the component Flink Proxy Controller. Performing a manipulation results in server-side request forgery. ...
CVE-2026-3052
DataLinkDC dinky up to 1.2.5 is affected. The vulnerable component is the Flink Proxy Controller (dinky-admin/src/main/java/org/dinky/controller/FlinkProxyController.java) and its proxyUba function. The issue enables server-side request forgery (SSRF) and is exploitable remotely. The exploit has ...