ai.pipestream:connector-admin-service (0.1.18), ai.pipestream:pipestream-engine (0.0.6) +198 more potentially affected by CVE-2026-53712 via com.ongres.scram:scram-client (>=3.1, <=3.2)

com.ongres.scram:scram-client MAVEN version =3.1, =0.1.25, =1.5.0, =1.5.0, =0.3.0, =0.7.0, =0.7.0, =0.7.0, =0.3.124, =0.3.124, =0.5.0 and more Source cves: CVE-2026-53712 Source advisory: SNYK:JAVA-COMONGRESSCRAM-17810279...

Not Failing Securely ('Failing Open')

Overview Affected versions of this package are vulnerable to Not Failing Securely 'Failing Open' in the TlsServerEndpoint process when a server presents an X.509 certificate using a modern signature algorithm lacking traditional naming structures. An attacker can bypass strict client-side...

ai.pipestream:connector-admin-service (0.1.18), ai.pipestream:pipestream-engine (0.0.6) +198 more potentially affected by CVE-2026-53712 via com.ongres.scram:scram-client (>=3.1, <=3.2)

com.ongres.scram:scram-client MAVEN version =3.1, =0.1.25, =1.5.0, =1.5.0, =0.3.0, =0.7.0, =0.7.0, =0.7.0, =0.3.124, =0.3.124, =0.5.0 and more Source cves: CVE-2026-53712 Source advisory: GHSA-P9JG-FCR6-3MHF...