ai.pipestream:account-service (>=0.0.2, <=0.0.4), ai.pipestream:connector-admin-service (>=0.1.1, <=0.1.8) +435 more potentially affected by CVE-2026-33558 via org.apache.kafka:kafka-clients (4.0.0)

org.apache.kafka:kafka-clients MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kafka:kafka-clients and may be impacted: - ai.pipestream:account-service =0.0.2, =0.1.1, =0.2.7, =0.2.7, =0.2.7, =0.2.7, =0.1.7, =0.0.6, =1.2....

Remote Code Execution (RCE)

cn.hutool, hutool-extra is vulnerable to remote code execution RCE. The vulnerability is due to improper expression handling in the QLExpressEngine class, which allows an attacker to execute arbitrary expressions leading to arbitrary method invocation and potential remote code execution...

cn.hutool:hutool-bom (4.6.10) potentially affected by CVE-2025-56769 via cn.hutool:hutool-extra (4.6.10)

cn.hutool:hutool-extra MAVEN version 4.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-extra and may be impacted: - cn.hutool:hutool-bom 4.6.10 Source cves: CVE-2025-56769 Source advisory: OSV:GHSA-GCFH-36X4-MGJ6...

cn.hutool:hutool-bom (4.6.17) potentially affected by CVE-2025-56769 via cn.hutool:hutool-extra (4.6.17)

cn.hutool:hutool-extra MAVEN version 4.6.17 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-extra and may be impacted: - cn.hutool:hutool-bom 4.6.17 Source cves: CVE-2025-56769 Source advisory: OSV:GHSA-GCFH-36X4-MGJ6...

cn.hutool:hutool-bom (4.6.16) potentially affected by CVE-2025-56769 via cn.hutool:hutool-extra (4.6.16)

cn.hutool:hutool-extra MAVEN version 4.6.16 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-extra and may be impacted: - cn.hutool:hutool-bom 4.6.16 Source cves: CVE-2025-56769 Source advisory: OSV:GHSA-GCFH-36X4-MGJ6...

cn.hutool:hutool-all (4.6.0), cn.hutool:hutool-bom (4.6.0) potentially affected by CVE-2025-56769 via cn.hutool:hutool-extra (4.6.0)

cn.hutool:hutool-extra MAVEN version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-extra and may be impacted: - cn.hutool:hutool-all 4.6.0 - cn.hutool:hutool-bom 4.6.0 Source cves: CVE-2025-56769 Source advisory:...

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' via the QLExpressEngine process. An attacker can execute arbitrary code by submitting crafted expressions that trigger...

cn.hutool:hutool-bom (4.6.2) potentially affected by CVE-2025-56769 via cn.hutool:hutool-extra (4.6.2)

cn.hutool:hutool-extra MAVEN version 4.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-extra and may be impacted: - cn.hutool:hutool-bom 4.6.2 Source cves: CVE-2025-56769 Source advisory: OSV:GHSA-GCFH-36X4-MGJ6...