CVE-2025-67735 vulnerabilities

Vulnerabilities for packages: trino, flyway, akhq, thingsboard, kserve-modelmesh, tez, apicurio-registry, apache-nifi, infinispan, logstash, apache-nifi-registry, druid, strimzi-kafka-operator, docker-selenium, logstash-input-http, zipkin, apache-activemq-artemis, opensearch, apache-pulsar, spark...

GHSA-84H7-RJJ3-6JX4 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, kayenta-fips, hadoop-fips, trino, wildfly, flyway, keycloak-fips, seata, spark, localstack, apicurio-registry, elasticsearch-fips, elasticsearch, logstash-input-http, management-api-for-apache-cassandra-4.1, tez, zipkin,...

CVE-2025-67735 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, kayenta-fips, hadoop-fips, trino, wildfly, flyway, keycloak-fips, seata, spark, localstack, apicurio-registry, elasticsearch-fips, elasticsearch, logstash-input-http, management-api-for-apache-cassandra-4.1, tez, zipkin,...

CVE-2023-26130

Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors. Note: This issue is present due...

CVE-2008-5239

xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not properly handle a negative and b zero values during unspecified read function calls in inputfile.c, inputnet.c, inputsmb.c, and inputhttp.c, which allows remote attackers to cause a denial of service crash or possibly execute...