159 matches found
CVE-2026-40984 vulnerabilities
Vulnerabilities for packages: apicurio-registry, nacos-docker, airbyte-server-fips, camunda-zeebe, nacos, apicurio-registry-fips, airbyte-server, dependency-track, infinispan, zipkin, dependency-track-apiserver, keycloak, keycloak-fips...
GHSA-G3PR-3P32-FP23 vulnerabilities
Vulnerabilities for packages: apicurio-registry, nacos-docker, airbyte-server-fips, camunda-zeebe, nacos, apicurio-registry-fips, airbyte-server, dependency-track, infinispan, zipkin, dependency-track-apiserver, keycloak, keycloak-fips...
GHSA-W737-WX49-QJ23 vulnerabilities
Vulnerabilities for packages: apicurio-registry, nacos-docker, airbyte-server-fips, camunda-zeebe, nacos, apicurio-registry-fips, airbyte-server, dependency-track, infinispan, zipkin, dependency-track-apiserver, keycloak, keycloak-fips...
CVE-2026-40983 vulnerabilities
Vulnerabilities for packages: apicurio-registry, nacos-docker, airbyte-server-fips, camunda-zeebe, nacos, apicurio-registry-fips, airbyte-server, dependency-track, infinispan, zipkin, dependency-track-apiserver, keycloak, keycloak-fips...
Nacos <1.4.1 - Authentication Bypass
Nacos before version 1.4.1 is vulnerable to authentication bypass because the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly protected with the @Secured annotation, the /derby endpoint i...
Nacos <1.4.1 - Authentication Bypass
This template only works on Nuclei engine prior to version 2.3.3 and version = 2.3.5. In Nacos before version 1.4.1, when configured to use authentication -Dnacos.core.auth.enabled=true Nacos uses the AuthFilter servlet filter to enforce authentication. This filter has a backdoor that enables Nac...
ai.h2o:h2o-orc-parser (>=3.10.0.5 <=3.10.3.6), cc.chensoul.nacos:core-test (=2.5.2) +232 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=2.4.0 <=2.4.4)
org.springframework.ldap:spring-ldap-core MAVEN version =2.4.0, =3.10.0.5, =1.2.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.7.0 and more Source cves: CVE-2026-41720 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKLDAP-17260845...
ai.wavemaker.runtime:wavemaker-app-runtime-core (>=1.0.0-20260516144515 <=1.0.0.ee-20260528111216), cc.zzzyu.nacos:default-auth-plugin (=3.1.1) +145 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=3.2.0 <=3.3.7)
org.springframework.ldap:spring-ldap-core MAVEN version =3.2.0, =1.0.0-20260516144515, =0.0.13, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.12.0 and more Source cves: CVE-2026-41720 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKLDAP-17260845...
com.erudika:para-jar (>=1.51.2 <=1.51.4), com.erudika:para-server (>=1.51.2 <=1.54.7) +52 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=4.0.0-M1 <=4.0.3)
org.springframework.ldap:spring-ldap-core MAVEN version =4.0.0-M1, =1.51.2, =1.51.2, =0.2.2, =2.0.0, =2.0.0, =3.2.1, =3.2.1, =3.2.1, =2.5.0, =2.4.0, =2.4.0, =2.5.2 and more Source cves: CVE-2026-41720 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKLDAP-17260845...
hermes-sidecar-poc
Hermes PoC — Pod + Nacos + Math microservice Dubbo Triple S...
GHSA-FV25-8XCX-GQJC vulnerabilities
Vulnerabilities for packages: kayenta-fips, nacos-docker, kayenta, camunda-zeebe, nacos, ontop, ontop-fips, camunda, thingsboard...
GHSA-R29C-68GH-XP6X vulnerabilities
Vulnerabilities for packages: kayenta-fips, nacos-docker, kayenta, camunda-zeebe, nacos, ontop, ontop-fips, camunda, thingsboard...
GHSA-5MP6-JRQ3-R938 vulnerabilities
Vulnerabilities for packages: kayenta-fips, nacos-docker, kayenta, camunda-zeebe, nacos, ontop, ontop-fips, camunda, thingsboard...
GHSA-GX5V-XP9W-J4CG vulnerabilities
Vulnerabilities for packages: kayenta-fips, nacos-docker, kayenta, camunda-zeebe, nacos, ontop, ontop-fips, camunda, thingsboard...
CVE-2026-43512 vulnerabilities
Vulnerabilities for packages: kayenta-fips, nacos-docker, kayenta, camunda-zeebe, nacos, ontop, ontop-fips, camunda, thingsboard...
CVE-2026-42498 vulnerabilities
Vulnerabilities for packages: kayenta-fips, nacos-docker, kayenta, camunda-zeebe, nacos, ontop, ontop-fips, camunda, thingsboard...
CVE-2026-41284 vulnerabilities
Vulnerabilities for packages: kayenta-fips, nacos-docker, kayenta, camunda-zeebe, nacos, ontop, ontop-fips, camunda, thingsboard...
CVE-2026-41293 vulnerabilities
Vulnerabilities for packages: kayenta-fips, nacos-docker, kayenta, camunda-zeebe, nacos, ontop, ontop-fips, camunda, thingsboard...