13 matches found
GHSA-PMHH-3W7G-XQP8 vulnerabilities
Vulnerabilities for packages: apache-hop, copybara-fips, jbang, conductor, conductor-fips, copybara, spdx-tools-java, opensearch-fips, nextflow, wazuh-indexer, apache-tika-fips, scala, apache-tika, elasticsearch-fips, gradle, opensearch, elasticsearch, metabase, apache-hop-fips...
CVE-2026-71497 vulnerabilities
Vulnerabilities for packages: apache-hop, copybara-fips, jbang, conductor, conductor-fips, copybara, spdx-tools-java, opensearch-fips, nextflow, wazuh-indexer, apache-tika-fips, scala, apache-tika, elasticsearch-fips, gradle, opensearch, elasticsearch, metabase, apache-hop-fips...
GHSA-PMHH-3W7G-XQP8 vulnerabilities
Vulnerabilities for packages: gradle, spdx-tools-java, nextflow, opensearch, apache-tika...
CVE-2026-71497 vulnerabilities
Vulnerabilities for packages: gradle, spdx-tools-java, nextflow, opensearch, apache-tika...
GHSA-P47F-322F-WHFH vulnerabilities
Vulnerabilities for packages: airbyte-server, knative-kafka-broker, knative-kafka-broker-fips, nacos-docker, nacos, sonarqube, zookeeper, s3proxy, keycloak-config-cli, zookeeper-fips, cassandra, nextflow, ontop-fips, ranger, management-api-for-apache-cassandra-5.0, kafbat-ui-fips, localstack,...
CVE-2026-9828 vulnerabilities
Vulnerabilities for packages: airbyte-server, knative-kafka-broker, knative-kafka-broker-fips, nacos-docker, nacos, sonarqube, zookeeper, s3proxy, keycloak-config-cli, zookeeper-fips, cassandra, nextflow, ontop-fips, ranger, management-api-for-apache-cassandra-5.0, kafbat-ui-fips, localstack,...
CVE-2026-9828 vulnerabilities
Vulnerabilities for packages: sonar-scanner-cli, cassandra-reaper, nextflow, sonarqube, management-api-for-apache-cassandra-5.0, kserve-modelmesh, cassandra, akhq, keycloak-config-cli, zookeeper...
GHSA-P47F-322F-WHFH vulnerabilities
Vulnerabilities for packages: sonar-scanner-cli, cassandra-reaper, nextflow, sonarqube, management-api-for-apache-cassandra-5.0, kserve-modelmesh, cassandra, akhq, keycloak-config-cli, zookeeper...
GHSA-92QF-FCPH-V5WR nextflow auth login command has incorrect default permissions
Impact nextflow auth login persists Seqera Platform OIDC tokens to $NXFHOME:-/.nextflow/seqera-auth.config. The file is created via Java NIO without specifying file permissions, so under the default umask 022 it lands at mode 0644 world-readable. On a multi-user POSIX host — typically an HPC logi...
CVE-2025-70952 vulnerabilities
Vulnerabilities for packages: nextflow...
GHSA-5458-7HH9-V7P4 vulnerabilities
Vulnerabilities for packages: nextflow...