CVE-2026-107284

The AsyncHttpClient (AHC) library for Java applications contains a vulnerability where WebSocketHandler.upgrade fails to properly terminate a handshake when the Sec-WebSocket-Accept value is missing or invalid. While the handshake is technically aborted, the library continues into pipeline instal...

Apache StreamPipes has possibility of SSRF in pipeline element installation process

Server-Side Request Forgery SSRF vulnerability in Apache StreamPipes during installation process of pipeline elements. Previously, StreamPipes allowed users to configure custom endpoints from which to install additional pipeline elements. These endpoints were not properly validated, allowing an...

PYSEC-2024-174

Server-Side Request Forgery SSRF vulnerability in Apache StreamPipes during installation process of pipeline elements.Previously, StreamPipes allowed users to configure custom endpoints from which to install additional pipeline elements. These endpoints were not properly validated, allowing an...