CVE-2025-67735 vulnerabilities

Vulnerabilities for packages: tez, strimzi-kafka-operator, celeborn, logstash-input-http, keycloak, apicurio-registry, apache-nifi-registry, druid, kserve-modelmesh, opensearch, apache-nifi, wildfly, apache-pulsar, sonarqube, spark, akhq, neo4j, apache-activemq-artemis, docker-selenium, trino,...

CVE-2025-67735 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, kayenta, apache-nifi-registry, knative-kafka-broker, management-api-for-apache-cassandra-4.1, tinkerpop, zipkin, druid, grpc-java-fips, kafbat-ui, elasticsearch-fips, logstash, spark, kafka-bridge, tez, apache-nifi,...

GHSA-84H7-RJJ3-6JX4 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, kayenta, apache-nifi-registry, knative-kafka-broker, management-api-for-apache-cassandra-4.1, tinkerpop, zipkin, druid, grpc-java-fips, kafbat-ui, elasticsearch-fips, logstash, spark, kafka-bridge, tez, apache-nifi,...

CVE-2023-26130

Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors. Note: This issue is present due...

CVE-2008-5239

xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not properly handle a negative and b zero values during unspecified read function calls in inputfile.c, inputnet.c, inputsmb.c, and inputhttp.c, which allows remote attackers to cause a denial of service crash or possibly execute...