org.webjars.npm:datauri (>=1.1.0, <=2.0.0), org.webjars.npm:image-thumbnail (1.0.15) +1 more potentially affected by unknown CVE via org.webjars.npm:image-size (>=0.5.5, <=2.0.0-alpha.1)

org.webjars.npm:image-size MAVEN version =0.5.5, =1.1.0, =2.7.1, =2.7.2 Source cves: unknown CVE Source advisory: SNYK:JAVA-ORGWEBJARSNPM-9634165...

io.micronaut.testresources:micronaut-test-resources-infinispan (>=3.0.0-m5, <=4.0.0-m1), io.quarkus:quarkus-test-infinispan-client (>=2.5.0.cr1, <=3.2.0.final) +54 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-server-rest (>=7.0.0.cr1, <=16.3.0.dev01)

org.infinispan:infinispan-server-rest MAVEN version =7.0.0.cr1, =3.0.0-m5, =2.5.0.cr1, =8.0.0.beta1, =7.0.0.cr1, =15.0.14.final, =9.3.0.cr1, =9.3.0.cr1, =8.0.0.alpha1, =9.0.0.beta1, =9.0.0.beta1, =15.0.0.cr1, =15.0.0.cr1, =12.1.1.final, =12.1.1.final, =16.2.2 and more Source cves: CVE-2024-6875...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=2.5.6-24.0, <=6.1.1), io.kokuwa.keycloak:keycloak-event-metrics (>=0.1.0, <=1.0.0) +30 more potentially affected by CVE-2024-11735 via org.keycloak:keycloak-quarkus-server (>=12.0.0, <=26.7.2)

org.keycloak:keycloak-quarkus-server MAVEN version =12.0.0, =2.5.6-24.0, =0.1.0, =8.1, =26.3.0, =26.1.0, =26.4.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.4.0, =26.1.0, =26.6.0, =26.2.0, =26.7.2 and more...

org.opendaylight.groupbasedpolicy:features-groupbasedpolicy (0.7.4), org.opendaylight.groupbasedpolicy:odl-groupbasedpolicy-neutron-and-ofoverlay (>=0.5.0-carbon, <=0.7.4) +17 more potentially affected by CVE-2025-29314 via org.opendaylight.sfc:odl-sfc-openflow-renderer (>=0.5.0-carbon, <=0.10.4)

org.opendaylight.sfc:odl-sfc-openflow-renderer MAVEN version =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.6.0, =0.6.0, =0.4.0-carbon, =0.5.0, =0.4.0-carbon, =0.5.0, =0.5.2 and more Source cves: CVE-2025-29314 Source advisory:...

org.opendaylight.groupbasedpolicy:features-groupbasedpolicy (0.7.4), org.opendaylight.groupbasedpolicy:odl-groupbasedpolicy-neutron-and-ofoverlay (>=0.5.0-carbon, <=0.7.4) +23 more potentially affected by CVE-2025-29313 via org.opendaylight.sfc:sfc-ovs (>=0.2.0-beryllium, <=0.10.4)

org.opendaylight.sfc:sfc-ovs MAVEN version =0.2.0-beryllium, =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.6.0, =0.6.0, =0.4.0-carbon, =0.5.0, =0.4.0-carbon, =0.4.4-carbon and more Source cves: CVE-2025-29313 Source advisory:...

org.opendaylight.groupbasedpolicy:features-groupbasedpolicy (0.7.4), org.opendaylight.groupbasedpolicy:odl-groupbasedpolicy-neutron-and-ofoverlay (>=0.5.0-carbon, <=0.7.4) +19 more potentially affected by CVE-2025-29314 via org.opendaylight.sfc:odl-sfc-ovs (>=0.5.0-carbon, <=0.10.4)

org.opendaylight.sfc:odl-sfc-ovs MAVEN version =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.6.0, =0.6.0, =0.4.0-carbon, =0.5.0, =0.4.0-carbon, =0.4.4-carbon and more Source cves: CVE-2025-29314 Source advisory:...

org.opendaylight.faas:features4-faas (>=1.2.0-carbon, <=1.3.3), org.opendaylight.faas:odl-faas-all (>=1.2.0-carbon, <=1.3.3) +67 more potentially affected by CVE-2025-29315 via org.opendaylight.sfc:sfc-provider (>=0.0.1-helium, <=0.10.4)

org.opendaylight.sfc:sfc-provider MAVEN version =0.0.1-helium, =1.2.0-carbon, =1.2.0-carbon, =1.2.0-carbon, =1.0.0-beryllium, =0.6.0, =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.6.0, =0.9.0, =0.9.0, =0.11.4 and more Source cves: CVE-2025-29315 Source advisory:...

org.opendaylight.groupbasedpolicy:features-groupbasedpolicy (0.7.4), org.opendaylight.groupbasedpolicy:odl-groupbasedpolicy-neutron-and-ofoverlay (>=0.5.0-carbon, <=0.7.4) +18 more potentially affected by CVE-2025-29313 via org.opendaylight.sfc:sfc-openflow-renderer (>=0.5.0-carbon, <=0.10.4)

org.opendaylight.sfc:sfc-openflow-renderer MAVEN version =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.6.0, =0.6.0, =0.4.0-carbon, =0.5.0, =0.4.0-carbon, =0.5.0, =0.5.2 and more Source cves: CVE-2025-29313 Source advisory:...

com.github.sakserv:hadoop-mini-clusters (>=0.0.14, <=0.0.15), com.github.sakserv:hadoop-mini-clusters-oozie (>=0.1.1, <=0.1.16) +13 more potentially affected by CVE-2025-26796 via org.apache.oozie:oozie-core (>=4.1.0, <=5.2.1)

org.apache.oozie:oozie-core MAVEN version =4.1.0, =0.0.14, =0.1.1, =1.0, =1.2, =4.2.0, =5.2.0, =4.1.0, =4.2.0, =4.1.0, =4.1.0, =4.1.0, =4.1.0, =5.2.1 - org.kitesdk:kite-data-oozie 1.1.0 Source cves: CVE-2025-26796 Source advisory: SNYK:JAVA-ORGAPACHEOOZIE-9512888...

ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.46.0.12), ai.h2o:h2o-algos (>=0.1.9, <=3.46.0.12) +49 more potentially affected by CVE-2024-8062 via ai.h2o:h2o-core (>=0.1.9, <=3.46.0.12)

ai.h2o:h2o-core MAVEN version =0.1.9, =3.34.0.1, =0.1.9, =0.1.9, =3.12.0.1, =3.8.2.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.30.0.1, =3.34.0.3, =3.46.0.12 and more Source cves: CVE-2024-8062 Source advisory: SNYK:JAVA-AIH2O-9486738...

ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.46.0.12), ai.h2o:h2o-algos (>=0.1.9, <=3.46.0.12) +49 more potentially affected by CVE-2024-7765 via ai.h2o:h2o-core (>=0.1.9, <=3.46.0.12)

ai.h2o:h2o-core MAVEN version =0.1.9, =3.34.0.1, =0.1.9, =0.1.9, =3.12.0.1, =3.8.2.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.30.0.1, =3.34.0.3, =3.46.0.12 and more Source cves: CVE-2024-7765 Source advisory: SNYK:JAVA-AIH2O-9486960...

ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.46.0.12), ai.h2o:h2o-algos (>=0.1.9, <=3.46.0.12) +49 more potentially affected by CVE-2024-7768 via ai.h2o:h2o-core (>=0.1.9, <=3.46.0.12)

ai.h2o:h2o-core MAVEN version =0.1.9, =3.34.0.1, =0.1.9, =0.1.9, =3.12.0.1, =3.8.2.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.30.0.1, =3.34.0.3, =3.46.0.12 and more Source cves: CVE-2024-7768 Source advisory: SNYK:JAVA-AIH2O-9486739...

ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.46.0.12), ai.h2o:h2o-algos (>=0.1.9, <=3.46.0.12) +49 more potentially affected by CVE-2024-6854 via ai.h2o:h2o-core (>=0.1.9, <=3.46.0.12)

ai.h2o:h2o-core MAVEN version =0.1.9, =3.34.0.1, =0.1.9, =0.1.9, =3.12.0.1, =3.8.2.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.30.0.1, =3.34.0.3, =3.46.0.12 and more Source cves: CVE-2024-6854 Source advisory: SNYK:JAVA-AIH2O-9486740...

ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.46.0.12), ai.h2o:h2o-algos (>=0.1.9, <=3.46.0.12) +49 more potentially affected by CVE-2024-6863 via ai.h2o:h2o-core (>=0.1.9, <=3.46.0.12)

ai.h2o:h2o-core MAVEN version =0.1.9, =3.34.0.1, =0.1.9, =0.1.9, =3.12.0.1, =3.8.2.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.30.0.1, =3.34.0.3, =3.46.0.12 and more Source cves: CVE-2024-6863 Source advisory: SNYK:JAVA-AIH2O-9486741...

ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.46.0.12), ai.h2o:h2o-algos (>=0.1.9, <=3.46.0.12) +49 more potentially affected by CVE-2024-10549 via ai.h2o:h2o-core (>=0.1.9, <=3.46.0.12)

ai.h2o:h2o-core MAVEN version =0.1.9, =3.34.0.1, =0.1.9, =0.1.9, =3.12.0.1, =3.8.2.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.30.0.1, =3.34.0.3, =3.46.0.12 and more Source cves: CVE-2024-10549 Source advisory: SNYK:JAVA-AIH2O-9486742...

ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.46.0.12), ai.h2o:h2o-algos (>=0.1.9, <=3.46.0.12) +49 more potentially affected by CVE-2024-10550 via ai.h2o:h2o-core (>=0.1.9, <=3.46.0.12)

ai.h2o:h2o-core MAVEN version =0.1.9, =3.34.0.1, =0.1.9, =0.1.9, =3.12.0.1, =3.8.2.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.30.0.1, =3.34.0.3, =3.46.0.12 and more Source cves: CVE-2024-10550 Source advisory: SNYK:JAVA-AIH2O-9486906...

ai.h2o:h2o-app (>=3.22.0.1, <=3.28.0.3), ai.h2o:h2o-automl (>=3.22.0.1, <=3.28.0.3) +16 more potentially affected by CVE-2024-10572 via ai.h2o:h2o-ext-xgboost (>=3.10.5.1, <=3.46.0.11)

ai.h2o:h2o-ext-xgboost MAVEN version =3.10.5.1, =3.22.0.1, =3.22.0.1, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =1.6.12, =2.0.10, =3.30.0.5-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =1.6.12, =2.0.10, =3.30.0.5-1-3.0, =1.6.12, =2.0.10, =3.30.0.5-1-3.0, =3.46.0.6-1-3.5 and more Source cves: CVE-2024-10572...

com.weicoder:seata (>=3.5.1, <=3.6.2), io.seata:seata-compressor-all (>=1.5.0, <=2.0.0) +7 more potentially affected by CVE-2024-54016 via io.seata:seata-compressor-zstd (>=1.5.0, <=2.0.0)

io.seata:seata-compressor-zstd MAVEN version =1.5.0, =3.5.1, =1.5.0, =1.5.0, =1.8.0, =1.5.0, =1.7.0, =1.8.0, =2.0.0 Source cves: CVE-2024-54016 Source advisory: SNYK:JAVA-IOSEATA-9521514...

Malicious code in io.github.leetcrunch:scribejava-core (Maven)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 8dd884cda209e50c2bd5185172f3c25968cb972cbd19234779b43f4f855f2d26 A malicious Maven Java package a typosquatting a legitimate OAuth Maven package. The malicious package collects and exfils OAuth credentia...

MAL-2025-2552 Malicious code in io.github.leetcrunch:scribejava-core (Maven)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 8dd884cda209e50c2bd5185172f3c25968cb972cbd19234779b43f4f855f2d26 A malicious Maven Java package a typosquatting a legitimate OAuth Maven package. The malicious package collects and exfils OAuth credentia...