com.devebot.opflow:opflow-core (>=0.1.22, <=0.1.23), com.github.gvolpe:fs2-rabbit-circe_2.11 (>=0.6, <=1.0-rc1) +17 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (4.6.0)

com.rabbitmq:amqp-client MAVEN version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.devebot.opflow:opflow-core =0.1.22, =0.6, =0.6, =0.6, =0.6, =1.3.2-1, =2.7.2, =2.7.2, =2.8.4 and more Sourc...

CVE-2022-31183

fs2 is a compositional, streaming I/O library for Scala. When establishing a server-mode TLSSocket using fs2-io on Node.js, the parameter requestCert = true is ignored, peer certificate verification is skipped, and the connection proceeds. The vulnerability is limited to: 1. fs2-io running on...

EUVD-2022-6207

Malicious code in bioql PyPI...

EUVD-2025-27048

Malicious code in bioql PyPI...

CVE-2025-58369

fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, and 3.13.0-M1 through 3.13.0-M6 are vulnerable to denial of service attacks though TLS sessions using fs2-io on the JVM using the fs2.io.net.tls package. When establishing a TLS...

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release after establishing a TLS session. An attacker can cause excessive CPU utilization by initiating a half-shutdown of the connection during the handshake, leading the peer to enter a spin loop on socke...

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release after establishing a TLS session. An attacker can cause excessive CPU utilization by initiating a half-shutdown of the connection during the handshake, leading the peer to enter a spin loop on socke...

com.avast:sst-app-monix_3 (>=0.17.0, <=0.19.3), com.avast:sst-app-zio_3 (>=0.17.0, <=0.19.3) +105 more potentially affected by CVE-2025-58369 via co.fs2:fs2-io_3 (>=2.5.6, <=2.5.12)

co.fs2:fs2-io3 MAVEN version =2.5.6, =0.17.0, =0.17.0, =0.16.0, =0.17.0, =0.16.0, =0.17.0, =0.16.0, =0.16.0, =0.17.0, =0.17.0, =0.16.0, =0.16.0, =0.16.0, =0.17.0, =0.17.0, =0.19.3 and more Source cves: CVE-2025-58369 Source advisory: SNYK:JAVA-COFS2-12669993...

ch.j3t:zio-prefetcher_2.12 (>=0.3.0, <=0.7.0), com.47deg:embedded-cassandra-core_2.12 (0.0.7) +503 more potentially affected by CVE-2025-58369 via co.fs2:fs2-io_2.12 (>=2.0.0, <=2.5.12)

co.fs2:fs2-io2.12 MAVEN version =2.0.0, =0.3.0, =0.22.0, =0.0.1, =0.13.2, =0.2.6, =0.3.0, =0.2.0, =0.1.0, =0.7.0, =0.7.0, =0.18.1, =0.17.0, =0.17.0, =0.1.21, =0.19.3 and more Source cves: CVE-2025-58369 Source advisory: SNYK:JAVA-COFS2-12669991...

co.fs2:fs2-protocols_2.12 (>=3.13.0-m1, <=3.13.0-m6) potentially affected by CVE-2025-58369 via co.fs2:fs2-io_2.12 (>=3.13.0-m1, <=3.13.0-m6)

co.fs2:fs2-io2.12 MAVEN version =3.13.0-m1, =3.13.0-m1, =3.13.0-m6 Source cves: CVE-2025-58369 Source advisory: SNYK:JAVA-COFS2-12669991...

ch.epfl.bluebrain.nexus:cli_2.13 (>=1.5.0-rc4, <=1.6.1), ch.epfl.bluebrain.nexus:delta-app_2.13 (>=1.9.0-m1, <=1.9.0-m12-2) +578 more potentially affected by CVE-2025-58369 via co.fs2:fs2-io_2.13 (>=2.0.0, <=2.5.12)

co.fs2:fs2-io2.13 MAVEN version =2.0.0, =1.5.0-rc4, =1.9.0-m1, =1.8.0-m4, =1.8.0-m4, =1.8.0-m4, =1.8.0-m4, =1.8.0-m4, =1.8.0-m4, =1.5.0-rc4, =1.8.0-m4, =0.3.0, =0.22.0, =0.0.1, =0.2.0, =0.2.0, =0.8.3 and more Source cves: CVE-2025-58369 Source advisory: SNYK:JAVA-COFS2-12669992...

com.47deg:freestyle-http-http4s_2.11 (0.1.0), com.azavea.geotrellis:geotrellis-server-core_2.11 (>=4.0.1, <=4.2.0) +197 more potentially affected by CVE-2025-58369 via co.fs2:fs2-io_2.11 (>=0.9.1, <=2.1.0)

co.fs2:fs2-io2.11 MAVEN version =0.9.1, =4.0.1, =4.0.1, =4.0.1, =0.4.0, =0.4.0, =5.0.0-m1, =1.3.0, =0.1.0, =0.0.2, =0.12.7, =0.12.7, =0.12.7, =0.14.1, =0.16.1 and more Source cves: CVE-2025-58369 Source advisory: SNYK:JAVA-COFS2-13180115...

ch.j3t:zio-prefetcher_2.12 (0.8.0-rc6), co.fs2:fs2-protocols_2.12 (>=3.1-2-8dabe12, <=3.12.0) +586 more potentially affected by CVE-2025-58369 via co.fs2:fs2-io_2.12 (>=3.0.0, <=3.12.0)

co.fs2:fs2-io2.12 MAVEN version =3.0.0, =3.1-2-8dabe12, =0.29.0, =0.31.0, =0.4.0, =0.9.0, =0.9.0, =0.0.1-test, =0.0.1-test, =0.1-f497734, =0.1-f497734, =0.1-f497734, =0.1-f497734, =1.0-148-8da8898, =1.0-377-020cf9e and more Source cves: CVE-2025-58369 Source advisory: SNYK:JAVA-COFS2-12669991...

ai.starlake:starlake-api_2.13 (>=1.5.8, <=1.5.15), au.id.tmm.fetch:fetch-aws-dynamodb_2.13 (>=0.7.0, <=0.9.2) +1009 more potentially affected by CVE-2025-58369 via co.fs2:fs2-io_2.13 (>=3.0.0, <=3.12.0)

co.fs2:fs2-io2.13 MAVEN version =3.0.0, =1.5.8, =0.7.0, =0.1.0, =0.7.0, =0.1.0, =0.1.0, =1.9.0-m13, =1.9.0-m13, =1.9.0-m13, =1.9.0-m13, =1.9.0-m13, =1.9.0-m13, =1.9.0-m13, =1.9.0-m13, =1.10.0-m6, =1.10.0-m13 and more Source cves: CVE-2025-58369 Source advisory: SNYK:JAVA-COFS2-12669992...

co.fs2:fs2-protocols_2.13 (>=3.13.0-m1, <=3.13.0-m6) potentially affected by CVE-2025-58369 via co.fs2:fs2-io_2.13 (>=3.13.0-m1, <=3.13.0-m6)

co.fs2:fs2-io2.13 MAVEN version =3.13.0-m1, =3.13.0-m1, =3.13.0-m6 Source cves: CVE-2025-58369 Source advisory: SNYK:JAVA-COFS2-12669992...

au.id.tmm.fetch:fetch-aws-dynamodb_3 (>=0.7.0, <=0.9.2), au.id.tmm.fetch:fetch-aws-textract_3 (>=0.2.0, <=0.9.2) +994 more potentially affected by CVE-2025-58369 via co.fs2:fs2-io_3 (>=3.0-47-f44642e, <=3.12.0)

co.fs2:fs2-io3 MAVEN version =3.0-47-f44642e, =0.7.0, =0.2.0, =0.7.0, =0.2.0, =0.2.0, =0.20.0, =2.0.21, =2.0.21, =2.0.21, =0.1.0, =0.2.0, =0.1.0, =3.1-2-8dabe12, =3.12.0 - com.47deg:energy-monitor-persistence-app3 0.2.0 and more Source cves: CVE-2025-58369 Source advisory: SNYK:JAVA-COFS2-1266999...

co.fs2:fs2-protocols_3 (>=3.13.0-m1, <=3.13.0-m6) potentially affected by CVE-2025-58369 via co.fs2:fs2-io_3 (>=3.13.0-m1, <=3.13.0-m6)

co.fs2:fs2-io3 MAVEN version =3.13.0-m1, =3.13.0-m1, =3.13.0-m6 Source cves: CVE-2025-58369 Source advisory: SNYK:JAVA-COFS2-12669993...

CVE-2025-58369

fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, and 3.13.0-M1 through 3.13.0-M6 are vulnerable to denial of service attacks though TLS sessions using fs2-io on the JVM using the fs2.io.net.tls package. When establishing a TLS...

CVE-2025-58369 fs2: Half-shutdown of socket during TLS handshake may result in spin loop on opposite side

fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, and 3.13.0-M1 through 3.13.0-M6 are vulnerable to denial of service attacks though TLS sessions using fs2-io on the JVM using the fs2.io.net.tls package. When establishing a TLS...

CVE-2025-58369 fs2: Half-shutdown of socket during TLS handshake may result in spin loop on opposite side

fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, and 3.13.0-M1 through 3.13.0-M6 are vulnerable to denial of service attacks though TLS sessions using fs2-io on the JVM using the fs2.io.net.tls package. When establishing a TLS...