GHSA-98QH-XJC8-98PQ vulnerabilities

Vulnerabilities for packages: flyway-fips, flyway, nacos, keycloak, kayenta, dependency-track, geoserver, nacos-docker, kayenta-fips, debezium, thingsboard, keycloak-fips, camunda-zeebe, apache-hop-fips, seata, hono, apicurio-registry, druid, guacamole-client, camunda, ghidra, nuxeo, sonarqube,...

flyway:LocationFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Project: https://github.com/flyway/flyway.git Detailed Report: https://oss-fuzz.com/testcase?key=5293798573015040 Project: flyway Fuzzing Engine: libFuzzer Fuzz Target: LocationFuzzer Job Type: libfuzzerasanflyway Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

CVE-2026-29062 vulnerabilities

Vulnerabilities for packages: apache-nifi, flyway, keycloak-config-cli, apicurio-registry, sonarqube...

GHSA-6V53-7C9G-W56R vulnerabilities

Vulnerabilities for packages: apache-nifi, flyway, keycloak-config-cli, apicurio-registry, sonarqube...

GHSA-6V53-7C9G-W56R vulnerabilities

Vulnerabilities for packages: apache-nifi, flyway-fips, apicurio-registry, flyway, camunda, keycloak-config-cli, camunda-zeebe, sonarqube...

CVE-2026-29062 vulnerabilities

Vulnerabilities for packages: apache-nifi, flyway-fips, apicurio-registry, flyway, camunda, keycloak-config-cli, camunda-zeebe, sonarqube...

flyway:LocationFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Project: https://github.com/flyway/flyway.git Detailed Report: https://oss-fuzz.com/testcase?key=6083664621666304 Project: flyway Fuzzing Engine: libFuzzer Fuzz Target: LocationFuzzer Job Type: libfuzzerasanflyway Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

flyway:LocationFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Project: https://github.com/flyway/flyway.git Detailed Report: https://oss-fuzz.com/testcase?key=6440211054919680 Project: flyway Fuzzing Engine: libFuzzer Fuzz Target: LocationFuzzer Job Type: libfuzzerasanflyway Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

flyway:LocationFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Project: https://github.com/flyway/flyway.git Detailed Report: https://oss-fuzz.com/testcase?key=6482464316129280 Project: flyway Fuzzing Engine: libFuzzer Fuzz Target: LocationFuzzer Job Type: libfuzzerasanflyway Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

CVE-2025-58056 vulnerabilities

Vulnerabilities for packages: celeborn, apache-nifi, akhq, flyway, selenium, tez, trino, wildfly, docker-selenium, thingsboard, kserve-modelmesh, apache-activemq-artemis, zipkin, strimzi-kafka-operator, druid, wavefront-proxy, apicurio-registry, sonarqube, opensearch...

GHSA-FGHV-69VJ-QJ49 vulnerabilities

Vulnerabilities for packages: celeborn, apache-nifi, akhq, flyway, selenium, tez, trino, wildfly, docker-selenium, thingsboard, kserve-modelmesh, apache-activemq-artemis, zipkin, strimzi-kafka-operator, druid, wavefront-proxy, apicurio-registry, sonarqube, opensearch...

CVE-2025-58056 vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, flyway, celeborn, docker-selenium, localstack, keycloak, wavefront-proxy, kayenta, zipkin, apache-nifi, elasticsearch, kayenta-fips, grpc-java-fips, opensearch, thingsboard, akhq, neo4j, keycloak-fips, kserve-modelmesh, camunda-zeebe, wildfly...

GHSA-FGHV-69VJ-QJ49 vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, flyway, celeborn, docker-selenium, localstack, keycloak, wavefront-proxy, kayenta, zipkin, apache-nifi, elasticsearch, kayenta-fips, grpc-java-fips, opensearch, thingsboard, akhq, neo4j, keycloak-fips, kserve-modelmesh, camunda-zeebe, wildfly...

GHSA-3P8M-J85Q-PGMJ vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, flyway, celeborn, docker-selenium, localstack, keycloak, wavefront-proxy, zipkin, zookeeper, apache-nifi, zookeeper-fips, elasticsearch, cassandra, grpc-java-fips, opensearch, thingsboard, akhq, cloudwatch-exporter, neo4j, keycloak-fips,...

This Week in Spring - August 26th, 2025

Hi, Spring fans! Welcome to another installment of This Week in Spring! I'm writing this from the floor of SpringOne, live from lovely Las Vegas! As you can imagine, I've got to get back into it, so we'll make this one a quick one. And if you're here, be sure to say "hi"! In last week's A Bootifu...

GHSA-33G6-495W-V8J2 vulnerabilities

Vulnerabilities for packages: flyway, trino...

GHSA-7HPQ-3G6W-PVHF vulnerabilities

Vulnerabilities for packages: flyway, trino...

CVE-2025-24789 vulnerabilities

Vulnerabilities for packages: flyway, trino...

CVE-2025-24790 vulnerabilities

Vulnerabilities for packages: flyway, trino...

io.jenkins.plugins:postgresql-fingerprint-storage (>=187.v17a_cb_a_f9e24a, <=199.v418d2b_8039e0), io.jenkins.plugins:testkube-cli (>=70.v22942b_4b_46a_e, <=97.va_4b_ca_24f8306) +3 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1309.v8835d63eb_d8a)

org.jenkins-ci.plugins:credentials MAVEN version 1309.v8835d63ebd8a is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - io.jenkins.plugins:postgresql-fingerprint-storage =187.v17acbaf9e24a,...