GHSA-PMHH-3W7G-XQP8 vulnerabilities

Vulnerabilities for packages: opensearch, spdx-tools-java, nextflow, gradle, apache-tika...

GHSA-R7WM-3CXJ-WFF9 vulnerabilities

Vulnerabilities for packages: scala, flyway, druid, sonarqube, trino, spark, wildfly, strimzi-kafka-operator, opensearch, cass-config-builder, dependency-track, akhq, apache-nifi-registry, apicurio-registry, infinispan, gradle, keycloak-config-cli, tez, spdx-tools-java, apache-nifi, logstash,...

GHSA-MHM7-754M-9P8W vulnerabilities

Vulnerabilities for packages: confluent-kafka-jre-bcfips, pinot, gradle, apache-activemq-fips, trino, akhq, confluent-kafka, kafbat-ui-fips, nuxeo, opensearch-fips, pinot-fips, airbyte-server-fips, infinispan, spark, wavefront-proxy, elasticsearch-fips, knative-kafka-broker-fips, geoserver, seata...

CVE-2026-59889 vulnerabilities

Vulnerabilities for packages: scala, flyway, druid, sonarqube, trino, spark, cassandra, opensearch, strimzi-kafka-operator, zookeeper, ruby3.2-jrjackson, akhq, ruby3.3-jrjackson, apache-nifi-registry, apicurio-registry, infinispan, gradle, keycloak-config-cli, confluent-kafka,...

GHSA-MHM7-754M-9P8W vulnerabilities

Vulnerabilities for packages: flyway, druid, sonarqube, trino, spark, cassandra, opensearch, zookeeper, ruby3.2-jrjackson, akhq, ruby3.3-jrjackson, infinispan, gradle, keycloak-config-cli, confluent-kafka, jenkins-plugin-manager, tez, wavefront-proxy, logstash, thingsboard, apache-tika...

SUSE-SU-2024:1119-1 Security update for gradle, gradle-bootstrap

This update for gradle, gradle-bootstrap fixes the following issues: - CVE-2021-29429: Fixed information disclosure through temporary directory permissions bsc1184799. - CVE-2019-15052: Fixed authentication credentials disclosure bsc1145903. gradle: - Fixed RPM package building issues due to...

Ubuntu 18.04 ESM : Gradle vulnerabilities (USN-4858-1)

The remote Ubuntu 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4858-1 advisory. It was discovered that Gradle used an insecure HTTP URL to download dependencies when the built-in JavaScript or CoffeeScript Gradle plugins were used. A...