io.github.microcks:microcks-app (>=1.9.0, <=1.10.1-fix-1), io.telicent.smart-caches.graph:docker (0.80.1) +1 more potentially affected by CVE-2026-54704 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.32.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.github.microcks:microcks-app =1.9.0, =1.10.1-fix-1 -...

io.github.microcks:microcks-app (>=1.11.0, <=1.12.1), io.telicent.smart-caches:cli-debug (>=0.22.0, <=0.36.2) potentially affected by CVE-2026-54704 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.33.6)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.33.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.github.microcks:microcks-app =1.11.0, =0.22.0, =0.36.2...

io.github.microcks:microcks-app (>=1.9.0, <=1.10.1-fix-1), io.telicent.smart-caches.graph:docker (0.80.1) +1 more potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.32.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.github.microcks:microcks-app =1.9.0, =1.10.1-fix-1 -...

io.github.microcks:microcks-app (>=1.11.0, <=1.12.1), io.telicent.smart-caches:cli-debug (>=0.22.0, <=0.36.2) potentially affected by CVE-2026-54712 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.33.6)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.33.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.github.microcks:microcks-app =1.11.0, =0.22.0, =0.36.2...

io.github.microcks:microcks-app (>=1.9.0, <=1.10.1-fix-1), io.telicent.smart-caches.graph:docker (0.80.1) +1 more potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.32.0)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.github.microcks:microcks-app =1.9.0, =1.10.1-fix-1 -...

io.github.microcks:microcks-app (>=1.11.0, <=1.12.1), io.telicent.smart-caches:cli-debug (>=0.22.0, <=0.36.2) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.33.6)

io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.33.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.github.microcks:microcks-app =1.11.0, =0.22.0, =0.36.2...

EUVD-2023-3214

Malicious code in bioql PyPI...

CVE-2024-44076

In Microcks before 1.10.0, the POST /api/import and POST /api/export endpoints allow non-administrator access...

CVE-2023-48910

Microcks up to 1.17.1 was discovered to contain a Server-Side Request Forgery SSRF via the component /jobs and /artifact/download. This vulnerability allows attackers to access network resources and sensitive information via a crafted GET request...

Authorization Bypass

io.github.microcks, microcks is vulnerable to Authorization Bypass. The vulnerability is caused due to a missing validation around POST /api/import and POST /api/export endpoints. This leads to Authorization bypass...

io.github.microcks:microcks-uber-app (>=1.8.0, <=1.9.1-fix-1) potentially affected by CVE-2024-44076 via io.github.microcks:microcks-app (>=1.8.0, <=1.9.1-fix-1)

io.github.microcks:microcks-app MAVEN version =1.8.0, =1.8.0, =1.9.1-fix-1 Source cves: CVE-2024-44076 Source advisory: OSV:GHSA-R6PH-5FP2-3W2V...

io.github.microcks:microcks-uber-app (>=1.8.0, <=1.9.1-fix-1) potentially affected by CVE-2024-44076 via io.github.microcks:microcks-app (>=1.8.0, <=1.9.1-fix-1)

io.github.microcks:microcks-app MAVEN version =1.8.0, =1.8.0, =1.9.1-fix-1 Source cves: CVE-2024-44076 Source advisory: GHSA-R6PH-5FP2-3W2V...

Microcks's POST /api/import and POST /api/export endpoints allow non-administrator access

In Microcks before 1.10.0, the POST /api/import and POST /api/export endpoints allow non-administrator access...

GHSA-R6PH-5FP2-3W2V Microcks's POST /api/import and POST /api/export endpoints allow non-administrator access

In Microcks before 1.10.0, the POST /api/import and POST /api/export endpoints allow non-administrator access...

CVE-2024-44076

In Microcks before 1.10.0, the POST /api/import and POST /api/export endpoints allow non-administrator access...

CVE-2024-44076: Improper Privilege Management

In Microcks before 1.10.0, the POST /api/import and POST /api/export endpoints allow non-administrator access...

io.github.microcks:microcks-uber-app (>=1.8.0, <=1.9.1-fix-1) potentially affected by CVE-2024-44076 via io.github.microcks:microcks-app (>=1.8.0, <=1.9.1-fix-1)

io.github.microcks:microcks-app MAVEN version =1.8.0, =1.8.0, =1.9.1-fix-1 Source cves: CVE-2024-44076 Source advisory: MEND:CVE-2024-44076...

CVE-2024-44076

In Microcks before 1.10.0, the POST /api/import and POST /api/export endpoints allow non-administrator access...

CVE-2024-44076

In Microcks before 1.10.0, the POST /api/import and POST /api/export endpoints allow non-administrator access...

CVE-2024-44076

Microcks before version 1.10.0 has a vulnerability where POST /api/import and POST /api/export allow non-administrator access. This is documented across multiple sources (including Red Hat, Veracode, GHSA, OSV, NVD) with CVE-2024-44076 and related advisories. The flaw enables unauthorized access ...