Grouper

Grouper DONT USE GROUPER ANY MORE. USE GROUPER2! https://github.com/l0ss/Grouper2 A PowerShell script for helping to find vulnerable settings in AD Group Policy. Photo by Jon Hanson - https://www.flickr.com/people/61952179@N00?rb=1 - https://creativecommons.org/licenses/by-sa/2.0/ Summary Grouper...

com.rabbitmq.jms:rabbitmq-jms (>=1.15.0, <=1.15.2), com.smoketurner.dropwizard:zipkin-core (2.0.16-1) +101 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (4.12.0)

com.rabbitmq:amqp-client MAVEN version 4.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.rabbitmq.jms:rabbitmq-jms =1.15.0, =2.4.2.0-17, =2.4.2.0-17, =2.4.2.0-17, =4.1.3, =4.1.3, =4.1.3, =4.1.3,...

CVE-2026-103470

In Internet2 Grouper before 7.5.1 in some configurations, a user who is allowed to create or edit rules in the User Interface can escalate privileges...

CVE-2026-103470

In Internet2 Grouper before 7.5.1 in some configurations, a user who is allowed to create or edit rules in the User Interface can escalate privileges...

CVE-2026-103470

In Internet2 Grouper before 7.5.1 in some configurations, a user who is allowed to create or edit rules in the User Interface can escalate privileges...

edu.internet2.middleware.grouper:grouper-ui (>=7.0.0, <=7.5.0), edu.internet2.middleware.grouper:grouper-ws (>=7.0.0, <=7.5.0) potentially affected by CVE-2026-103470 via edu.internet2.middleware.grouper:grouper (>=7.0.0, <=7.5.0)

edu.internet2.middleware.grouper:grouper MAVEN version =7.0.0, =7.0.0, =7.0.0, =7.5.0 Source cves: CVE-2026-103470 Source advisory: MEND:CVE-2026-103470...

edu.internet2.middleware.grouper:grouper-ui (>=6.0.0, <=6.4.0), edu.internet2.middleware.grouper:grouper-ws (>=6.0.0, <=6.4.0) potentially affected by CVE-2026-103470 via edu.internet2.middleware.grouper:grouper (>=6.0.0, <=6.4.0)

edu.internet2.middleware.grouper:grouper MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.4.0 Source cves: CVE-2026-103470 Source advisory: MEND:CVE-2026-103470...

CVE-2026-103470

In Internet2 Grouper before 7.5.1 in some configurations, a user who is allowed to create or edit rules in the User Interface can escalate privileges...

CVE-2026-103470

In Internet2 Grouper versions prior to 7.5.1 , certain configurations allow a user with permissions to create or edit rules in the User Interface to perform a privilege escalation . While the specific technical root cause is not detailed in the provided documents, the impact is categorized as CRI...

CVE-2026-103470

In Internet2 Grouper before 7.5.1 in some configurations, a user who is allowed to create or edit rules in the User Interface can escalate privileges...

EUVD-2026-90161

In Internet2 Grouper before 7.5.1 in some configurations, a user who is allowed to create or edit rules in the User Interface can escalate privileges...

PT-2026-103351

In Internet2 Grouper before 7.5.1 in some configurations, a user who is allowed to create or edit rules in the User Interface can escalate privileges...

CVE-2026-103470: Incorrect Privilege Assignment

In Internet2 Grouper before 7.5.1 in some configurations, a user who is allowed to create or edit rules in the User Interface can escalate privileges...

EUVD-2018-11473

Malware in sbrugna...

EUVD-2025-30217

Malicious code in bioql PyPI...

CVE-2025-59714

In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs...

Incorrect Authorization

Overview edu.internet2.middleware.grouper:grouper is an Internet2 Groups Management Toolkit Affected versions of this package are vulnerable to Incorrect Authorization via improper job scheduling in the loader jobs configuration process. A group administrator who is not a member of the Grouper...

CVE-2025-59714

In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs...

CVE-2025-59714

In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs...

Grouper security vulnerabilities

Grouper is an Internet2 open source enterprise access management system designed for highly distributed administrative environments and heterogeneous information technology environments common to colleges and universities. A security vulnerability exists in Grouper versions 5.17.1 through prior t...