Mahoraga-Webapp-Defender

Mahoraga Webapp Defender AI-powered reactive webapp defense system designed to withstand AI-powered hacks in real-time. Table of Contents Mahoraga Webapp Defender Table of Contents Introduction Target Website Mahoraga Defender Architecture Dual Environments Agent Pipeline How to Start Getting rea...

Atlassian Jira Service Management Data Center and Server 3.0.x < 10.3.25 / 11.3.x < 11.3.10 (JSDSERVER-16834)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16834 advisory. - The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 GHSA-72hv-8253-57qq, number...

io.github.softistx:stx-jpa (>=0.2.0, <=0.2.1), io.github.softistx:stx-jpa-ktor (>=0.2.0, <=0.2.1) +11 more potentially affected by CVE-2026-102469 via io.vertx:vertx-db2-client (>=5.0.0, <=5.1.8)

io.vertx:vertx-db2-client MAVEN version =5.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =4.0.0-beta0, =5.0.0, =5.0.0, =5.1.8 Source cves: CVE-2026-102469 Source advisory: MEND:CVE-2026-102469...

io.quarkus:quarkus-reactive-db2-client (>=1.6.0.cr1, <=3.40.1), io.quarkus:quarkus-reactive-db2-client-deployment (>=1.6.0.cr1, <=3.40.1) +4 more potentially affected by CVE-2026-102469 via io.vertx:vertx-db2-client (>=3.9.1, <=4.5.34)

io.vertx:vertx-db2-client MAVEN version =3.9.1, =1.6.0.cr1, =1.6.0.cr1, =0.1.0, =3.9.1, =3.9.1, =4.0.0-rc, =4.1.2-rc Source cves: CVE-2026-102469 Source advisory: MEND:CVE-2026-102469...

io.quarkus:quarkus-reactive-mssql-client (>=2.1.0.cr1, <=3.40.1), io.quarkus:quarkus-reactive-mssql-client-deployment (>=2.1.0.cr1, <=3.40.1) +3 more potentially affected by CVE-2026-102462 via io.vertx:vertx-mssql-client (>=4.1.0.beta1, <=4.5.34)

io.vertx:vertx-mssql-client MAVEN version =4.1.0.beta1, =2.1.0.cr1, =2.1.0.cr1, =2.7.0, =4.1.0.beta1, =4.1.0.beta1, =4.5.34 Source cves: CVE-2026-102462 Source advisory: MEND:CVE-2026-102462...

io.quarkus:quarkus-reactive-mssql-client (4.0.0.beta1), io.quarkus:quarkus-reactive-mssql-client-deployment (4.0.0.beta1) +5 more potentially affected by CVE-2026-102462 via io.vertx:vertx-mssql-client (>=5.1.2, <=5.1.9)

io.vertx:vertx-mssql-client MAVEN version =5.1.2, =4.0.0, =5.1.2, =5.1.2, =5.1.9 - vn.io.lcx:common-lib 4.1.0.lcx - vn.io.lcx:processor 4.1.0.lcx Source cves: CVE-2026-102462 Source advisory: MEND:CVE-2026-102462...

GHSA-R223-96JV-Q533 JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort

SQL Injection in the sort Parameter of JHipster-Generated Reactive WebFlux + R2DBC Applications - Product: jhipster/generator-jhipster npm package generator-jhipster - Affected versions: v7.0.0 through v9.2.0 - Component: generated reactive-application code, template EntityManagerreactive.java.ej...

JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort

SQL Injection in the sort Parameter of JHipster-Generated Reactive WebFlux + R2DBC Applications - Product: jhipster/generator-jhipster npm package generator-jhipster - Affected versions: v7.0.0 through v9.2.0 - Component: generated reactive-application code, template EntityManagerreactive.java.ej...

CLEANSTART-2026-MK68457 WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute

Security vulnerability affects the apache-nifi-registry package. A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute...

PT-2026-108672

SQL Injection in the sort Parameter of JHipster-Generated Reactive WebFlux + R2DBC Applications - Product: jhipster/generator-jhipster npm package generator-jhipster - Affected versions: v7.0.0 through v9.2.0 - Component: generated reactive-application code, template EntityManager reactive.java.e...

com.github.libgraviton:worker-base (>=0.2.0, <=0.14.0), io.scalac:reactive-rabbit_2.11 (0.1.0) +21 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (3.3.5)

com.rabbitmq:amqp-client MAVEN version 3.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.libgraviton:worker-base =0.2.0, =0.4.2, =0.5.0 - org.apache.airavata:airavata-gfac-core 0.14 -...

com.github.libgraviton:worker-base (>=0.2.0, <=0.14.0), io.scalac:reactive-rabbit_2.11 (0.1.0) +21 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (3.3.5)

com.rabbitmq:amqp-client MAVEN version 3.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.libgraviton:worker-base =0.2.0, =0.4.2, =0.5.0 - org.apache.airavata:airavata-gfac-core 0.14 -...

CLEANSTART-2026-BU33192 WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute

Security vulnerability affects the rundeck package. A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute...

CLEANSTART-2026-SQ92018 WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute

Security vulnerability affects the apache-hive package. A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute...

CVE-2026-88032

A flaw was found in the MongoDB Java Driver. A use-after-free vulnerability in the reactive client-side encryption component can occur when an encrypted operation is cancelled. An attacker able to cause such an operation to be cancelled may cause the hosting application process to terminate. This...

Linux Distros Unpatched Vulnerability : CVE-2026-88032

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted...

DEBIAN-CVE-2026-88032

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the...

CVE-2026-88032

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the...

UBUNTU-CVE-2026-88032

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the...

CVE-2026-88032

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the...