CVE-2025-67735 vulnerabilities

Vulnerabilities for packages: celeborn, thingsboard, apache-nifi-registry, wavefront-proxy, tez, keycloak, trino, management-api-for-apache-cassandra-5.0, wildfly, docker-selenium, apache-nifi, druid, kserve-modelmesh, opensearch, apache-activemq-artemis, spark, apicurio-registry, neo4j, akhq,...

GHSA-84H7-RJJ3-6JX4 vulnerabilities

Vulnerabilities for packages: kayenta, hadoop-fips, apache-activemq-artemis, elasticsearch-fips, grpc-java-fips, management-api-for-apache-cassandra-5.0, keycloak, spark, akhq, opensearch, docker-selenium, strimzi-kafka-operator, tez, tinkerpop, apicurio-registry, spark-fips, druid,...

CVE-2025-67735 vulnerabilities

Vulnerabilities for packages: kayenta, hadoop-fips, apache-activemq-artemis, elasticsearch-fips, grpc-java-fips, management-api-for-apache-cassandra-5.0, keycloak, spark, akhq, opensearch, docker-selenium, strimzi-kafka-operator, tez, tinkerpop, apicurio-registry, spark-fips, druid,...

CVE-2023-26130

Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors. Note: This issue is present due...

CVE-2008-5239

xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not properly handle a negative and b zero values during unspecified read function calls in inputfile.c, inputnet.c, inputsmb.c, and inputhttp.c, which allows remote attackers to cause a denial of service crash or possibly execute...