CVE-2025-67735 vulnerabilities

Vulnerabilities for packages: akhq, wavefront-proxy, druid, apache-nifi, trino, apicurio-registry, management-api-for-apache-cassandra-5.0, zipkin, kserve-modelmesh, apache-nifi-registry, neo4j, apache-activemq-artemis, docker-selenium, keycloak, celeborn, opensearch, strimzi-kafka-operator, tez,...

CVE-2025-67735 vulnerabilities

Vulnerabilities for packages: apicurio-registry, tez, knative-kafka-broker-fips, spark-fips, trino, flyway, infinispan, zipkin, tinkerpop, elasticsearch, grpc-java-fips, opensearch-fips, management-api-for-apache-cassandra-5.0, neo4j, apache-activemq-artemis, apache-hop, docker-selenium,...

GHSA-84H7-RJJ3-6JX4 vulnerabilities

Vulnerabilities for packages: apicurio-registry, tez, knative-kafka-broker-fips, spark-fips, trino, flyway, infinispan, zipkin, tinkerpop, elasticsearch, grpc-java-fips, opensearch-fips, management-api-for-apache-cassandra-5.0, neo4j, apache-activemq-artemis, apache-hop, docker-selenium,...

CVE-2023-26130

Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors. Note: This issue is present due...

CVE-2008-5239

xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not properly handle a negative and b zero values during unspecified read function calls in inputfile.c, inputnet.c, inputsmb.c, and inputhttp.c, which allows remote attackers to cause a denial of service crash or possibly execute...