Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Resource Consumption in jackson-databind (CVE-2026-68497)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Resource Consumption in jackson-databind due to deserializer flaws. Jackson-databind is used in our Speech microservices. This vulnerability has been addressed. Please read the details for remediation below. Vulnerabili...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Write in snappy-java (CVE-2026-90559)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Write in snappy-java because destination buffer capacity is never validated against decompressed size. Snappy-java is used in our Speech microservices. This vulnerability has been addressed. Please read the details for...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a use after free issue in zstd-jni (CVE-2026-90852)

Summary Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a use after free issue, due to a flaw in the function ZstdCompressCtx.loadDict of the file ZstdCompressCtx.java of the component Dictionary Sharing. in zstd-jni. Zstd-jni is used in our Speech microservices. This...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in zstd-jni.

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in zstd-jni. Zstd-jni is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-87795 DESCRIPTION: zstd-jni...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read and Infinite Loop condition in zstd-jni (CVE-2026-89045, CVE-2026-89046, CVE-2026-90560)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read and Infinite Loop condition in zstd-jni. Zstd-jni is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to DoS and injection issues in Micrometer (CVE-2026-59295, CVE-2026-59296)

Summary BM Watson Speech Services Cartridge is vulnerable to DoS and injection issues in Micrometer. Micrometer is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-59295 DESCRIPTION: It...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Recursion in Bouncy Castle for Java (CVE-2026-59645)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Recursion in Bouncy Castle for Java, due to a flaw where the OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. Bouncy Castle is used in our Speech microservices. This vulnerability has been...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a DOS in Spring reactor-netty-core (CVE-2026-47857, CVE-2026-47863)

Summary IBM Watson Speech Services Cartridge is vulnerable to a DOS in Spring reactor-netty-core, due to Integer Overflow and Infinite Loops. Spring reactor-netty-core is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to improper reuse issues in Spring reactor-netty-core (CVE-2026-47843)

Summary IBM Watson Speech Services Cartridge is vulnerable to improper reuse issues in Spring reactor-netty-core which occur in specific scenarios involving multiple clients with different DNS resolver configurations. Spring reactor-netty-core is used in our Speech microservices. This vulnerabili...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Path Traversal, CRLF Injection, and Open Redirect issues in spring-webmvc (CVE-2026-47884, CVE-2026-47887, CVE-2026-47890, CVE-2026-59313)

Summary IBM Watson Speech Services Cartridge is vulnerable to Path Traversal, CRLF Injection, and Open Redirect issues in spring-webmvc. Spring-webmvc is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Detai...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Reactor Netty (CVE-2026-47845, CVE-2026-47848, CVE-2026-47874)

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Reactor Netty: Authentication Bypass, Open Redirect, and Allocation of Resources Without Limits or Throttling. Spring Reactor Netty is used in our Speech microservices. These vulnerabilities have been addresse...

ioccheck

ioccheck A tool for simplifying the process of researching file hashes, IP addresses, and other indicators of compromise IOCs. Features Look up hashes across multiple threat intelligence services, from a single command or a few lines of Python. Currenty supports the following services: VirusTotal...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Uncontrolled Resource Consumptions in Spring Framework (CVE-2026-47886, CVE-2026-59283)

Summary IBM Watson Speech Services Cartridge is vulnerable to Uncontrolled Resource Consumptions in Spring Framework, due to flaws with the the power operator and SpEL expression compiler. Spring framework is used in our Speech microservices. These vulnerabilities have been addressed. Please read...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in spring-web

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in spring-web. Spring-web is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-47883 DESCRIPTION:...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in nltk

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in nltk. Nltk is used in our Speech runtimes. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-12259 DESCRIPTION: In nltk version 3.9.4, the...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Netty (CVE-2026-62243, CVE-2026-75595, CVE-2026-75596)

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Netty: Improper Validation of Certificate with Host Mismatch, Improper Check for Unusual or Exceptional Conditions, and Inefficient Algorithmic Complexity. Netty is used in our Speech microservices. These...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Poison Null Byte in Netty (CVE-2026-62380)

Summary IBM Watson Speech Services Cartridge is vulnerable to a Poison Null Byte in Netty, due to null byte, CRLF, and credential injection vulnerabilities in the SOCKS4 client encoders. Netty is used in our Speech microservices. This vulnerability has been addressed. Please read the details for...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a memory leak in Netty (CVE-2026-73508)

Summary IBM Watson Speech Services Cartridge is vulnerable to a memory leak in Netty, due to a failure to release memory when receiving a malformed domain name, allowing unauthenticated remote DNS packets to leak direct memory incrementally until denial of service. Netty is used in our Speech...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an finite Loop in Netty (CVE-2026-59901)

Summary IBM Watson Speech Services Cartridge is vulnerable to an finite Loop in Netty, due to a flaw in Netty's Bzip2Decoder. Netty is used in our Speech microservices. This vulnerability has been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-59901...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Resource Consumption and HTTP Request/Response Smuggling in Netty (CVE-2026-56819, CVE-2026-59900)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Resource Consumption and HTTP Request/Response Smuggling in Netty, due to flaws in Netty's HTTP/2-to-HTTP/1.x translation layer and DelegatingDecompressorFrameListener. Netty is used in our Speech microservices. These...