Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: infinispan (UTSA-2026-016716)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016716 advisory. It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the cache. An authenticated attacker cou...

com.github.psi-probe:psi-probe-tomcat85 (3.7.3), org.apache.tomcat:tomcat-catalina-ha (8.5.88) +4 more potentially affected by CVE-2026-43513 via org.apache.tomcat:tomcat-catalina (8.5.88)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.88 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 3.7.3 - org.apache.tomcat:tomcat-catalina-ha 8.5.88 ...

org.apache.tomcat:tomcat-catalina-ha (8.5.83), org.apache.tomcat:tomcat-catalina-ws (8.5.83) +3 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.5.83)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.83 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.5.83 - org.apache.tomcat:tomcat-catalina-ws 8.5.83 -...

org.apache.tomcat:tomcat-catalina-ha (8.5.83), org.apache.tomcat:tomcat-catalina-ws (8.5.83) +3 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (8.5.83)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.83 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.5.83 - org.apache.tomcat:tomcat-catalina-ws 8.5.83 -...

com.github.psi-probe:psi-probe-tomcat85 (4.0.0), org.apache.tomcat:tomcat-catalina-ha (8.5.95) +4 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.5.95)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.95 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 4.0.0 - org.apache.tomcat:tomcat-catalina-ha 8.5.95 ...

com.github.psi-probe:psi-probe-tomcat85 (4.0.0), org.apache.tomcat:tomcat-catalina-ha (8.5.95) +4 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.5.95)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.95 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 4.0.0 - org.apache.tomcat:tomcat-catalina-ha 8.5.95 ...

com.github.psi-probe:psi-probe-tomcat85 (4.0.0), org.apache.tomcat:tomcat-catalina-ha (8.5.95) +4 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (8.5.95)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.95 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 4.0.0 - org.apache.tomcat:tomcat-catalina-ha 8.5.95 ...

org.apache.tomcat:tomcat-catalina-ha (8.5.83), org.apache.tomcat:tomcat-catalina-ws (8.5.83) +3 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.5.83)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.83 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.5.83 - org.apache.tomcat:tomcat-catalina-ws 8.5.83 -...

com.github.psi-probe:psi-probe-tomcat7 (>=3.4.3, <=3.4.5), org.apache.kylin:kylin-spark-classloader (>=4.0.0-alpha, <=4.0.1) +8 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (7.0.100)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.100 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat7 =3.4.3, =4.0.0-alpha, =2.6.6, =3.1.3 -...

com.github.psi-probe:psi-probe-tomcat85 (3.7.3), org.apache.tomcat:tomcat-catalina-ha (8.5.88) +4 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.5.88)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.88 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 3.7.3 - org.apache.tomcat:tomcat-catalina-ha 8.5.88 ...

com.github.psi-probe:psi-probe-tomcat85 (4.0.0), org.apache.tomcat:tomcat-catalina-ha (8.5.95) +4 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.5.95)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.95 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 4.0.0 - org.apache.tomcat:tomcat-catalina-ha 8.5.95 ...

EUVD-2020-3167

Malware in sbrugna...

EUVD-2016-0773

Malware in sbrugna...

EUVD-2022-2317

Malicious code in bioql PyPI...

org.wildfly.clustering:wildfly-clustering-spring-session-core (2.0.0.beta1), org.wildfly.clustering:wildfly-clustering-spring-session-hotrod (2.0.0.beta1) +91 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (14.0.0.beta4)

org.wildfly.core:wildfly-server MAVEN version 14.0.0.beta4 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.clustering:wildfly-clustering-spring-session-core 2.0.0.beta1 -...

org.infinispan.server:example-configuration-tests (6.0.0.alpha1), org.infinispan:infinispan-as-modules (6.0.0.alpha1) +3 more potentially affected by CVE-2023-5236 via org.infinispan.protostream:protostream (1.0.0.alpha1)

org.infinispan.protostream:protostream MAVEN version 1.0.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan.protostream:protostream and may be impacted: - org.infinispan.server:example-configuration-tests 6.0.0.alpha1 -...

org.infinispan.protostream:sample-domain-implementation (1.0.0.alpha2), org.infinispan.server:example-configuration-tests (>=6.0.0.alpha2, <=6.0.0.alpha3) +4 more potentially affected by CVE-2023-5236 via org.infinispan.protostream:protostream (1.0.0.alpha2)

org.infinispan.protostream:protostream MAVEN version 1.0.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan.protostream:protostream and may be impacted: - org.infinispan.protostream:sample-domain-implementation 1.0.0.alpha2 -...

org.infinispan.wildfly:infinispan-wildfly-infinispan (10.1.6.final), org.infinispan:infinispan-cachestore-remote (10.1.6.final) +14 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-client-hotrod (10.1.6.final)

org.infinispan:infinispan-client-hotrod MAVEN version 10.1.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-client-hotrod and may be impacted: - org.infinispan.wildfly:infinispan-wildfly-infinispan 10.1.6.final -...

org.apache.camel.springboot:camel-infinispan-starter (3.3.0), org.drools:drools-wb-drl-extension-server (>=7.44.0.final, <=7.58.0.final) +88 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-client-hotrod (9.4.19.final)

org.infinispan:infinispan-client-hotrod MAVEN version 9.4.19.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-client-hotrod and may be impacted: - org.apache.camel.springboot:camel-infinispan-starter 3.3.0 -...

org.infinispan:infinispan-as-modules (5.2.9.final), org.infinispan:infinispan-cachestore-remote (5.2.9.final) +1 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-client-hotrod (5.2.9.final)

org.infinispan:infinispan-client-hotrod MAVEN version 5.2.9.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-client-hotrod and may be impacted: - org.infinispan:infinispan-as-modules 5.2.9.final -...