CVE-2025-67735 vulnerabilities

Vulnerabilities for packages: zipkin, docker-selenium, apache-activemq-artemis, thingsboard, celeborn, druid, apicurio-registry, keycloak, tez, logstash, logstash-input-http, apache-nifi-registry, wildfly, trino, akhq, flyway, kserve-modelmesh, management-api-for-apache-cassandra-5.0, neo4j,...

GHSA-84H7-RJJ3-6JX4 vulnerabilities

Vulnerabilities for packages: apache-nifi, keycloak, druid, infinispan, neo4j, apache-nifi-registry, hadoop-fips, kserve-modelmesh, elasticsearch-fips, opensearch-fips, logstash, apache-activemq-artemis, wildfly, wavefront-proxy, management-api-for-apache-cassandra-5.0, kayenta-fips,...

CVE-2025-67735 vulnerabilities

Vulnerabilities for packages: apache-nifi, keycloak, druid, infinispan, neo4j, apache-nifi-registry, hadoop-fips, kserve-modelmesh, elasticsearch-fips, opensearch-fips, logstash, apache-activemq-artemis, wildfly, wavefront-proxy, management-api-for-apache-cassandra-5.0, kayenta-fips,...

CVE-2023-26130

Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors. Note: This issue is present due...

CVE-2008-5239

xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not properly handle a negative and b zero values during unspecified read function calls in inputfile.c, inputnet.c, inputsmb.c, and inputhttp.c, which allows remote attackers to cause a denial of service crash or possibly execute...