CVE-2026-51584: Improper Authentication

An issue in usememos v0.27.1 allows a remote attacker to achieve account takeover via the ssoCredentials branch of the SignIn handler in server/router/api/v1/authservice.go, because SSO identity is matched only on an attacker-controllable identifier without binding to the IdP's stable subject cla...

CVE-2025-10059 MongoDB Server router will crash when incorrect lsid is set on a sharded query

An improper setting of the lsid field on any sharded query can cause a crash in MongoDB routers. This issue occurs when a generic argument lsid is provided in a case when it is not applicable. This affects MongoDB Server v6.0 versions prior to 6.0.x, MongoDB Server v7.0 versions prior to 7.0.18 a...

org.apache.camel.springboot:camel-infinispan-embedded-starter (>=3.9.0, <=3.10.0), org.infinispan:infinispan-javadoc-all (11.0.10.final) +9 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (11.0.10.final)

org.infinispan:infinispan-query MAVEN version 11.0.10.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.apache.camel.springboot:camel-infinispan-embedded-starter =3.9.0, =3.10.0 -...

org.infinispan.server:infinispan-server-event-logger (9.4.14.final), org.infinispan.server:infinispan-server-infinispan (9.4.14.final) +11 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (9.4.14.final)

org.infinispan:infinispan-query MAVEN version 9.4.14.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan.server:infinispan-server-event-logger 9.4.14.final -...

org.infinispan:infinispan-javadoc-all (12.0.0.dev06), org.infinispan:infinispan-remote-query-server (12.0.0.dev06) +10 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (12.0.0.dev06)

org.infinispan:infinispan-query MAVEN version 12.0.0.dev06 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan:infinispan-javadoc-all 12.0.0.dev06 -...

org.infinispan:infinispan-javadoc-all (11.0.0.cr1), org.infinispan:infinispan-remote-query-server (11.0.0.cr1) +8 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (11.0.0.cr1)

org.infinispan:infinispan-query MAVEN version 11.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan:infinispan-javadoc-all 11.0.0.cr1 -...

org.apache.camel.springboot:camel-infinispan-embedded-starter (>=3.14.8, <=3.14.10), org.infinispan:infinispan-remote-query-server (12.1.14.final) +10 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (12.1.14.final)

org.infinispan:infinispan-query MAVEN version 12.1.14.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.apache.camel.springboot:camel-infinispan-embedded-starter =3.14.8, =3.14.10 -...

org.infinispan.server:infinispan-server-event-logger (9.2.0.beta1), org.infinispan.server:infinispan-server-feature-pack (9.2.0.beta1) +7 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (9.2.0.beta1)

org.infinispan:infinispan-query MAVEN version 9.2.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan.server:infinispan-server-event-logger 9.2.0.beta1 -...

org.infinispan.server:infinispan-server-event-logger (9.4.18.final), org.infinispan.server:infinispan-server-infinispan (9.4.18.final) +11 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (9.4.18.final)

org.infinispan:infinispan-query MAVEN version 9.4.18.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan.server:infinispan-server-event-logger 9.4.18.final -...

org.infinispan.server:infinispan-server-event-logger (9.3.6.final), org.infinispan.server:infinispan-server-infinispan (9.3.6.final) +11 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (9.3.6.final)

org.infinispan:infinispan-query MAVEN version 9.3.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan.server:infinispan-server-event-logger 9.3.6.final -...

org.infinispan.server:infinispan-server-event-logger (9.3.5.final), org.infinispan.server:infinispan-server-infinispan (9.3.5.final) +11 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (9.3.5.final)

org.infinispan:infinispan-query MAVEN version 9.3.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan.server:infinispan-server-event-logger 9.3.5.final -...

org.infinispan.server:infinispan-server-event-logger (9.2.0.alpha2), org.infinispan.server:infinispan-server-feature-pack (9.2.0.alpha2) +7 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (9.2.0.alpha2)

org.infinispan:infinispan-query MAVEN version 9.2.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan.server:infinispan-server-event-logger 9.2.0.alpha2 -...

org.infinispan.server:infinispan-server-event-logger (9.2.0.cr3), org.infinispan.server:infinispan-server-feature-pack (9.2.0.cr3) +7 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (9.2.0.cr3)

org.infinispan:infinispan-query MAVEN version 9.2.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan.server:infinispan-server-event-logger 9.2.0.cr3 -...

org.infinispan:infinispan-distribution (11.0.0.dev05), org.infinispan:infinispan-javadoc-all (11.0.0.dev05) +8 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (11.0.0.dev05)

org.infinispan:infinispan-query MAVEN version 11.0.0.dev05 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan:infinispan-distribution 11.0.0.dev05 - org.infinispan:infinispan-javadoc-al...

org.infinispan.server:infinispan-server-event-logger (9.3.0.alpha1), org.infinispan.server:infinispan-server-feature-pack (9.3.0.alpha1) +9 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (9.3.0.alpha1)

org.infinispan:infinispan-query MAVEN version 9.3.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan.server:infinispan-server-event-logger 9.3.0.alpha1 -...

org.infinispan.server:infinispan-server-event-logger (9.3.8.final), org.infinispan.server:infinispan-server-infinispan (9.3.8.final) +11 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (9.3.8.final)

org.infinispan:infinispan-query MAVEN version 9.3.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan.server:infinispan-server-event-logger 9.3.8.final -...

org.infinispan.server:infinispan-server-event-logger (9.2.0.cr1), org.infinispan.server:infinispan-server-feature-pack (9.2.0.cr1) +7 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (9.2.0.cr1)

org.infinispan:infinispan-query MAVEN version 9.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan.server:infinispan-server-event-logger 9.2.0.cr1 -...

org.infinispan:infinispan-javadoc-all (11.0.2.final), org.infinispan:infinispan-remote-query-server (11.0.2.final) +8 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (11.0.2.final)

org.infinispan:infinispan-query MAVEN version 11.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan:infinispan-javadoc-all 11.0.2.final -...

org.infinispan.server:infinispan-server-event-logger (9.4.12.final), org.infinispan.server:infinispan-server-infinispan (9.4.12.final) +11 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (9.4.12.final)

org.infinispan:infinispan-query MAVEN version 9.4.12.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan.server:infinispan-server-event-logger 9.4.12.final -...

org.infinispan.server:infinispan-server-event-logger (10.0.0.alpha2), org.infinispan.server:infinispan-server-infinispan (10.0.0.alpha2) +11 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (10.0.0.alpha2)

org.infinispan:infinispan-query MAVEN version 10.0.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan.server:infinispan-server-event-logger 10.0.0.alpha2 -...