853 matches found
GHSA-676X-F7GG-47VC vulnerabilities
Vulnerabilities for packages: camunda, infinispan, kafka-bridge, celeborn, akhq, knative-kafka-broker, thingsboard, keycloak, kafka-bridge-fips, elasticsearch, request-9047-keycloak-fips, apache-pulsar, keycloak-fips, apache-nifi, elasticsearch-fips, zipkin, management-api-for-apache-cassandra-4....
GHSA-W573-9FFJ-6FF9 vulnerabilities
Vulnerabilities for packages: kafka, kserve-modelmesh, camunda, infinispan, wavefront-proxy, celeborn, thingsboard, keycloak, request-9047-keycloak-fips, zookeeper, cassandra-fips, apache-pulsar, keycloak-fips, grpc-java-fips, localstack, apache-nifi, management-api-for-apache-cassandra-4.1,...
CVE-2026-47244 vulnerabilities
Vulnerabilities for packages: kserve-modelmesh, wazuh-indexer, camunda, infinispan, kafka-bridge, wavefront-proxy, celeborn, akhq, docker-selenium, knative-kafka-broker, thingsboard, keycloak, kafka-bridge-fips, elasticsearch, request-9047-keycloak-fips, apache-pulsar, keycloak-fips,...
GHSA-5X3R-WRVG-RP6Q vulnerabilities
Vulnerabilities for packages: kserve-modelmesh, wazuh-indexer, camunda, infinispan, kafka-bridge, wavefront-proxy, celeborn, akhq, docker-selenium, knative-kafka-broker, thingsboard, keycloak, kafka-bridge-fips, elasticsearch, request-9047-keycloak-fips, apache-pulsar, keycloak-fips,...
CVE-2026-44893 vulnerabilities
Vulnerabilities for packages: celeborn, knative-kafka-broker, thingsboard, keycloak, request-9047-keycloak-fips, apache-pulsar, keycloak-fips, zipkin, management-api-for-apache-cassandra-4.0, apache-hop-fips, hono, seata, knative-kafka-broker-fips, neo4j, apicurio-registry,...
CVE-2026-47691 vulnerabilities
Vulnerabilities for packages: camunda, infinispan, kafka-bridge, celeborn, akhq, knative-kafka-broker, thingsboard, keycloak, kafka-bridge-fips, elasticsearch, request-9047-keycloak-fips, apache-pulsar, keycloak-fips, apache-nifi, elasticsearch-fips, zipkin, management-api-for-apache-cassandra-4....
GHSA-CC37-9Q2J-3HFV vulnerabilities
Vulnerabilities for packages: celeborn, knative-kafka-broker, thingsboard, keycloak, request-9047-keycloak-fips, apache-pulsar, keycloak-fips, zipkin, management-api-for-apache-cassandra-4.0, apache-hop-fips, hono, seata, knative-kafka-broker-fips, neo4j, apicurio-registry,...
CVE-2026-45536 vulnerabilities
Vulnerabilities for packages: kafka, kserve-modelmesh, camunda, infinispan, wavefront-proxy, celeborn, thingsboard, keycloak, request-9047-keycloak-fips, zookeeper, cassandra-fips, apache-pulsar, keycloak-fips, grpc-java-fips, localstack, apache-nifi, management-api-for-apache-cassandra-4.1,...
CVE-2026-45673 vulnerabilities
Vulnerabilities for packages: camunda, infinispan, kafka-bridge, celeborn, akhq, knative-kafka-broker, thingsboard, keycloak, kafka-bridge-fips, elasticsearch, request-9047-keycloak-fips, apache-pulsar, keycloak-fips, apache-nifi, elasticsearch-fips, zipkin, management-api-for-apache-cassandra-4....
CVE-2026-45674 vulnerabilities
Vulnerabilities for packages: camunda, infinispan, kafka-bridge, celeborn, akhq, knative-kafka-broker, thingsboard, keycloak, kafka-bridge-fips, elasticsearch, request-9047-keycloak-fips, apache-pulsar, keycloak-fips, apache-nifi, elasticsearch-fips, zipkin, management-api-for-apache-cassandra-4....
GHSA-5PVG-856G-CP85 vulnerabilities
Vulnerabilities for packages: camunda, infinispan, kafka-bridge, celeborn, akhq, knative-kafka-broker, thingsboard, keycloak, kafka-bridge-fips, elasticsearch, request-9047-keycloak-fips, apache-pulsar, keycloak-fips, apache-nifi, elasticsearch-fips, zipkin, management-api-for-apache-cassandra-4....
Deserialization of Untrusted Data
Overview org.springframework.pulsar:spring-pulsar is a Spring Pulsar Core Affected versions of this package are vulnerable to Deserialization of Untrusted Data via trusted package validation in JsonPulsarHeaderMapper. An attacker can trigger deserialization of unintended classes by supplying...
PT-2026-48328
Name of the Vulnerable Software and Affected Versions Spring for Apache Pulsar versions 1.1.0 through 1.1.17 Spring for Apache Pulsar versions 1.2.0 through 1.2.17 Spring for Apache Pulsar versions 2.0.0 through 2.0.5 Description JsonPulsarHeaderMapper uses a prefix check to match type headers...
cve-2026-41732 - HIGH - In Spring for Apache Pulsar, overly broad trusted-package matching in header mapper exposes JDK classes to deserialization
cve-2026-41732 - HIGH - In Spring for Apache Pulsar, overly broad trusted-package matching in header mapper exposes JDK classes to deserialization...
ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0 <=4.6.0), ai.platon.pulsar:pulsar-it-tests (>=4.5.0 <=4.7.4) +2427 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (>=7.0.0-M1 <=7.0.7)
org.springframework:spring-webmvc MAVEN version =7.0.0-M1, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0, =2.0.0, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.5.0, =0.10.2 and more Source cves: CVE-2026-41844 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17254121...
ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0 <=4.6.0), ai.platon.pulsar:pulsar-it-tests (>=4.5.0 <=4.7.4) +2427 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (>=7.0.0-M1 <=7.0.7)
org.springframework:spring-webmvc MAVEN version =7.0.0-M1, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0, =2.0.0, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.5.0, =0.10.2 and more Source cves: CVE-2026-41846 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17254062...
ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0 <=4.6.0), ai.platon.pulsar:pulsar-it-tests (>=4.5.0 <=4.7.4) +2427 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (>=7.0.0-M1 <=7.0.7)
org.springframework:spring-webmvc MAVEN version =7.0.0-M1, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0, =2.0.0, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.5.0, =0.10.2 and more Source cves: CVE-2026-41842 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17254544...
ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +8632 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (>=7.0.0-M1 <=7.0.7)
org.springframework:spring-core MAVEN version =7.0.0-M1, =0.1.0, =0.1.0, =4.5.0, =4.7.11, =4.5.0, =4.5.0, =4.3.0, =4.3.0, =4.3.0, =4.7.0, =4.7.4, =4.7.4, =4.3.0, =4.7.0, =4.5.0, =4.6.0 and more Source cves: CVE-2026-41848 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17254051...
com.couchbase.client.flink-connector-couchbase_2.12:flink-connector-couchbase_2.12 (=0.5.0), com.datasqrl.flinkrunner:kafka-safe-connector (>=0.9.0-alpha1 <=0.9.0-alpha2) +29 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-api-java (>=2.1.0 <=2.1.1)
org.apache.flink:flink-table-api-java MAVEN version =2.1.0, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =26.0.0, =0.2.0, =2.1.0, =2.1.0, =2.1.1 and more Source cves: CVE-2026-35194 Source advisory: OSV:GHSA-2F54-V4HM-FX73...
