com.erudika:para-server (>=1.25.0, <=1.25.2), com.erudika:para-war (>=1.25.0, <=1.25.2) +18 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.8.3)

com.hazelcast:hazelcast MAVEN version 3.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.erudika:para-server =1.25.0, =1.25.0, =0.14.0, =0.18.2 -...

com.erudika:para-server (>=1.52.0, <=1.54.7), io.orqueio.bpm.springboot:orqueio-bpm-spring-boot-starter-security (>=2.0.1, <=2.0.7) +3 more potentially affected by CVE-2026-41694 via org.springframework.security:spring-security-saml2-service-provider (>=7.0.0, <=7.0.5)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =7.0.0, =1.52.0, =2.0.1, =4.0.0, =4.0.0, =4.0.0, =4.0.6 Source cves: CVE-2026-41694 Source advisory: OSV:GHSA-WW38-37G9-M3Q3...

com.erudika:para-server (>=1.52.0, <=1.54.7), io.orqueio.bpm.springboot:orqueio-bpm-spring-boot-starter-security (>=2.0.1, <=2.0.7) +3 more potentially affected by CVE-2026-40988 via org.springframework.security:spring-security-saml2-service-provider (>=7.0.0, <=7.0.5)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =7.0.0, =1.52.0, =2.0.1, =4.0.0, =4.0.0, =4.0.0, =4.0.6 Source cves: CVE-2026-40988 Source advisory: GHSA-M69X-PW9P-7J3Q...

com.erudika:para-jar (>=1.37.0, <=1.38.1), com.erudika:para-server (>=1.37.0, <=1.38.1) +18 more potentially affected by CVE-2025-53864 via com.nimbusds:nimbus-jose-jwt (8.10)

com.nimbusds:nimbus-jose-jwt MAVEN version 8.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.erudika:para-jar =1.37.0, =1.37.0, =1.37.0, =1.38.1 - de.adorsys.sts:sts-common 1.0.4 -...

com.erudika:para-jar (>=1.31.3, <=1.34.0), com.erudika:para-server (>=1.31.3, <=1.34.0) +283 more potentially affected by CVE-2025-53864 via com.nimbusds:nimbus-jose-jwt (7.2.1)

com.nimbusds:nimbus-jose-jwt MAVEN version 7.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.erudika:para-jar =1.31.3, =1.31.3, =1.31.3, =1.0.0, =1.22.0, =1.22.0, =1.22.0, =0.29.4, =0.29.4,...

com.erudika:para-server (>=1.17, <=1.17.1) potentially affected by CVE-2025-53864 via com.nimbusds:nimbus-jose-jwt (4.7)

com.nimbusds:nimbus-jose-jwt MAVEN version 4.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.erudika:para-server =1.17, =1.17.1 Source cves: CVE-2025-53864 Source advisory: OSV:GHSA-XWMG-2G98-W7...

com.erudika:para-server (>=1.18.0, <=1.18.3), com.github.panchitoboy:shiro-jwt (1.3.0) potentially affected by CVE-2025-53864 via com.nimbusds:nimbus-jose-jwt (4.11.2)

com.nimbusds:nimbus-jose-jwt MAVEN version 4.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.erudika:para-server =1.18.0, =1.18.3 - com.github.panchitoboy:shiro-jwt 1.3.0 Source cves:...

com.erudika:para-server (>=1.18.4, <=1.18.9), com.forgerock.openbanking:openbanking-sdk (>=2.0.0.23, <=3.1.2.5) potentially affected by CVE-2025-53864 via com.nimbusds:nimbus-jose-jwt (4.16.2)

com.nimbusds:nimbus-jose-jwt MAVEN version 4.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.erudika:para-server =1.18.4, =2.0.0.23, =3.1.2.5 Source cves: CVE-2025-53864 Source advisory:...

GHSA-V75G-77VF-6JJQ Para Server Logs Sensitive Information

CWE ID: CWE-532 Insertion of Sensitive Information into Log File CVSS: 7.5 High Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Component: Para Server Initialization Logging Version: Para v1.50.6 File Path:...

Para Server Logs Sensitive Information

CWE ID: CWE-532 Insertion of Sensitive Information into Log File CVSS: 7.5 High Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Component: Para Server Initialization Logging Version: Para v1.50.6 File Path:...

com.erudika:para-jar (>=1.30.0, <=1.30.2), com.erudika:para-server (>=1.29.2, <=1.30.2) +241 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (5.10)

com.nimbusds:nimbus-jose-jwt MAVEN version 5.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.erudika:para-jar =1.30.0, =1.29.2, =1.29.2, =0.0.8, =0.0.9, =5.0.4.release1, =5.3.1, =5.3.1, =5.3.1,...

com.erudika:para-jar (>=1.37.0, <=1.38.1), com.erudika:para-server (>=1.37.0, <=1.38.1) +18 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (8.10)

com.nimbusds:nimbus-jose-jwt MAVEN version 8.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.erudika:para-jar =1.37.0, =1.37.0, =1.37.0, =1.38.1 - de.adorsys.sts:sts-common 1.0.4 -...

com.erudika:para-server (>=1.18.4, <=1.18.9), com.forgerock.openbanking:openbanking-sdk (>=2.0.0.23, <=3.1.2.5) potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (4.16.2)

com.nimbusds:nimbus-jose-jwt MAVEN version 4.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.erudika:para-server =1.18.4, =2.0.0.23, =3.1.2.5 Source cves: CVE-2023-52428 Source advisory:...

com.erudika:para-server (>=1.19.0, <=1.20.0) potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (4.18)

com.nimbusds:nimbus-jose-jwt MAVEN version 4.18 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.erudika:para-server =1.19.0, =1.20.0 Source cves: CVE-2023-52428 Source advisory:...

com.erudika:para-server (>=1.17, <=1.17.1) potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (4.7)

com.nimbusds:nimbus-jose-jwt MAVEN version 4.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.erudika:para-server =1.17, =1.17.1 Source cves: CVE-2023-52428 Source advisory: OSV:GHSA-GVPG-VGMX-XG...

com.erudika:para-server (>=1.18.0, <=1.18.3), com.github.panchitoboy:shiro-jwt (1.3.0) potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (4.11.2)

com.nimbusds:nimbus-jose-jwt MAVEN version 4.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.erudika:para-server =1.18.0, =1.18.3 - com.github.panchitoboy:shiro-jwt 1.3.0 Source cves:...

com.bucket4j:bucket4j-hazelcast-3 (>=7.6.1, <=8.9.0), com.bucket4j:bucket4j_jdk8-hazelcast-3 (>=8.0.0, <=8.9.0) +34 more potentially affected by CVE-2023-33265 via com.hazelcast:hazelcast (3.8)

com.hazelcast:hazelcast MAVEN version 3.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.bucket4j:bucket4j-hazelcast-3 =7.6.1, =8.0.0, =1.24.0, =0.9.0, =0.9.0, =0.3, =0.3, =0.3, =0.3, =0.3, =0.0.2,...

com.erudika:para-jar (>=1.48.0, <=1.48.2), com.erudika:para-server (>=1.48.0, <=1.48.2) +120 more potentially affected by CVE-2023-34034 via org.springframework.security:spring-security-config (>=5.8.0, <=5.8.4)

org.springframework.security:spring-security-config MAVEN version =5.8.0, =1.48.0, =1.48.0, =1.48.0, =3.7.0, =3.7.0, =3.7.0, =3.7.0, =1.3.1, =1.3.2 - com.gitlab.summer-cattle:cattle-addons-wechat-starter 0.0.5 and more Source cves: CVE-2023-34034 Source advisory: OSV:GHSA-3H6F-G5F3-GC4W...

com.erudika:para-server (1.20.0) potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.7.5)

com.microsoft.azure:azure-eventhubs MAVEN version 0.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.erudika:para-server 1.20.0 Source cves: CVE-2020-16971 Source advisory:...

com.erudika:para-jar (>=1.31.1, <=1.38.4), com.erudika:para-server (>=1.31.1, <=1.38.4) +4 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (1.2.1)

com.microsoft.azure:azure-eventhubs MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.erudika:para-jar =1.31.1, =1.31.1, =1.31.1, =2.2.6, =2.2.7, =2.2.7, =2.3.8 Source cve...