io.helidon.microprofile.lra:helidon-microprofile-lra-testing (>=4.1.2, <=4.5.4), io.helidon:helidon-all (>=4.0.9, <=4.5.4) potentially affected by CVE-2026-83460 via io.helidon.lra:helidon-lra-coordinator-narayana-client (>=4.0.9, <=4.5.4)

io.helidon.lra:helidon-lra-coordinator-narayana-client MAVEN version =4.0.9, =4.1.2, =4.0.9, =4.5.4 Source cves: CVE-2026-83460 Source advisory: MEND:CVE-2026-83460...

WordPress Essential Addons for Elementor plugin < 6.6.10 - Lite < 6.6.10 - Contributor+ Stored XSS vulnerability

WordPress Essential Addons for Elementor plugin 6.6.10 - Lite 6.6.10 - Contributor+ Stored XSS vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Essential Addons for Elementor versions 6.6.10...

WordPress WP Travel plugin < 11.8.1 - Subscriber+ Booking PII Disclosure vulnerability

Subscriber+ Booking PII Disclosure vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin WP Travel versions 11.8.1...

narayana: deadlock via multiple join requests sent to LRA Coordinator

A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of...

narayana: deadlock via multiple join requests sent to LRA Coordinator

A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of...

narayana: deadlock via multiple join requests sent to LRA Coordinator

A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of...

io.quarkus:quarkus-hibernate-orm-rest-data-panache (2.2.4.final), io.quarkus:quarkus-hibernate-orm-rest-data-panache-deployment (2.2.4.final) +23 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.2.4.final)

io.quarkus:quarkus-resteasy MAVEN version 2.2.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkus:quarkus-hibernate-orm-rest-data-panache 2.2.4.final -...

Narayana deadlock via multiple join requests sent to LRA Coordinator

A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of...

org.jboss.narayana.rts:lra-coordinator-quarkus (5.12.6.final), org.jboss.narayana.rts:lra-test-arquillian-extension (5.12.6.final) potentially affected by CVE-2024-8447 via org.jboss.narayana.rts:lra-coordinator-jar (5.12.6.final)

org.jboss.narayana.rts:lra-coordinator-jar MAVEN version 5.12.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.narayana.rts:lra-coordinator-jar and may be impacted: - org.jboss.narayana.rts:lra-coordinator-quarkus 5.12.6.final -...

GHSA-QQ9F-Q439-2574 Narayana deadlock via multiple join requests sent to LRA Coordinator

A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of...

CVE-2024-8447

A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of...

CVE-2024-8447 Narayana: deadlock via multiple join requests sent to lra coordinator

A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of...

CVE-2024-8447

CVE-2024-8447 describes a deadlock in Narayana’s LRA Coordinator: when Cancel is followed by a Join on the same LRA within ~2 seconds, the application may crash or hang, causing a denial of service. The issue is addressed in Red Hat advisories RHSA-2025:3357/3358 for JBoss EAP XP 5.0 and EAP 8.x,...

CVE-2024-8447 Narayana: deadlock via multiple join requests sent to lra coordinator

A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of...

CVE-2024-8447

A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of...

CVE-2024-8447 Narayana: deadlock via multiple join requests sent to lra coordinator

A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of...

PT-2025-3700 · Narayana · Narayana

Name of the Vulnerable Software and Affected Versions: Narayana affected versions not specified Description: A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the...

Narayana security vulnerabilities

Narayana is an open source transaction toolkit from JBossTM. A security vulnerability exists in Narayana that stems from the LRA Coordinator component causing the application to crash or hang indefinitely, resulting in a denial of service...

CVE-2024-8447: Deadlock

A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of...

com.lightbend.akka:akka-stream-alpakka-geode_2.11 (>=0.10, <=0.14), com.lightbend.akka:akka-stream-alpakka-geode_2.12 (>=0.10, <=0.14) +36 more potentially affected by CVE-2017-9795 via org.apache.geode:geode-core (>=1.0.0-incubating.m2, <=1.2.1)

org.apache.geode:geode-core MAVEN version =1.0.0-incubating.m2, =0.10, =0.10, =0.3.12, =0.3.5, =0.1.9, =1.0.0-incubating.m2, =1.0.0-incubating.m2, =1.0.0-incubating.m2, =1.0.0-incubating.m3, =1.0.0-incubating.m2, =1.0.0-incubating, =1.0.0-incubating, =0.9.0, =0.10.1 and more Source cves:...