CVE-2026-35554 vulnerabilities

Vulnerabilities for packages: debezium-connector-informix, debezium-connector-db2, debezium-connector-spanner, thingsboard, debezium-connector-ibmi, apache-nifi, strimzi-kafka-operator, debezium-connector-vitess, druid, logstash, debezium, wildfly, opensearch...

GHSA-5QCV-4RPC-JP93 vulnerabilities

Vulnerabilities for packages: debezium-connector-informix, debezium-connector-db2, debezium-connector-spanner, thingsboard, debezium-connector-ibmi, apache-nifi, strimzi-kafka-operator, debezium-connector-vitess, druid, logstash, debezium, wildfly, opensearch...

CVE-2026-35554 vulnerabilities

Vulnerabilities for packages: seata, opensearch-fips, druid, apache-nifi, opensearch, strimzi-kafka-operator, hono, strimzi-kafka-operator-fips, debezium, wildfly, knative-kafka-broker, thingsboard, debezium-connector-spanner, debezium-connector-informix, debezium-connector-vitess,...

Malicious code in spanner-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 659a15d63f794432104121cf729687768f76fa3dadd0b4ae9d8c9327021122af Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-2304 Malicious code in spanner-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 659a15d63f794432104121cf729687768f76fa3dadd0b4ae9d8c9327021122af Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

New "LeakyLooker" Flaws in Google Looker Studio Could Enable Cross-Tenant SQL Queries

Cybersecurity researchers have disclosed nine cross-tenant vulnerabilities in Google Looker Studio that could have permitted attackers to run arbitrary SQL queries on victims' databases and exfiltrate sensitive data within organizations' Google Cloud environments. The shortcomings have been...

CVE-2025-12183 vulnerabilities

Vulnerabilities for packages: debezium-connector-informix, debezium-connector-db2, debezium-connector-spanner, kafka, debezium-connector-ibmi, strimzi-kafka-operator, debezium-connector-vitess, spark, cassandra, zipkin, debezium...

GHSA-CMP6-M4WJ-Q63Q vulnerabilities

Vulnerabilities for packages: debezium-connector-informix, debezium-connector-db2, debezium-connector-spanner, kafka, sonarqube, debezium-connector-ibmi, strimzi-kafka-operator, debezium-connector-vitess, spark, cassandra, zipkin, debezium...

CVE-2025-66566 vulnerabilities

Vulnerabilities for packages: debezium-connector-informix, debezium-connector-db2, debezium-connector-spanner, kafka, sonarqube, debezium-connector-ibmi, strimzi-kafka-operator, debezium-connector-vitess, spark, cassandra, zipkin, debezium...

GHSA-VQF4-7M7X-WGFC vulnerabilities

Vulnerabilities for packages: debezium-connector-informix, debezium-connector-db2, debezium-connector-spanner, kafka, debezium-connector-ibmi, strimzi-kafka-operator, debezium-connector-vitess, spark, cassandra, zipkin, debezium...

GHSA-CMP6-M4WJ-Q63Q vulnerabilities

Vulnerabilities for packages: sonarqube, kafbat-ui-fips, spark-fips, opensearch, strimzi-kafka-operator, cassandra-fips, apache-hop, kafka-fips, strimzi-kafka-operator-fips, apache-hop-fips, debezium, kafka, cassandra, knative-kafka-broker, spark, debezium-connector-spanner,...

CVE-2025-66566 vulnerabilities

Vulnerabilities for packages: sonarqube, kafbat-ui-fips, spark-fips, opensearch, strimzi-kafka-operator, cassandra-fips, apache-hop, kafka-fips, strimzi-kafka-operator-fips, apache-hop-fips, debezium, kafka, cassandra, knative-kafka-broker, spark, debezium-connector-spanner,...

GHSA-VQF4-7M7X-WGFC vulnerabilities

Vulnerabilities for packages: kafbat-ui-fips, elasticsearch-fips, spark-fips, opensearch, strimzi-kafka-operator, cassandra-fips, apache-hop, kafka-fips, apache-hop-fips, debezium, elasticsearch, kafka, cassandra, knative-kafka-broker, spark, debezium-connector-spanner, debezium-connector-informi...

CVE-2025-12183 vulnerabilities

Vulnerabilities for packages: kafbat-ui-fips, elasticsearch-fips, spark-fips, opensearch, strimzi-kafka-operator, cassandra-fips, apache-hop, kafka-fips, apache-hop-fips, debezium, elasticsearch, kafka, cassandra, knative-kafka-broker, spark, debezium-connector-spanner, debezium-connector-informi...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the WriteRelationships function when the exclusion operator is used in the authorization schema and the server is configured with --write-relationships-max-updates-per-call greater...

CVE-2025-27817 vulnerabilities

Vulnerabilities for packages: apicurio-registry, debezium-connector-spanner, thingsboard, apache-nifi, strimzi-kafka-operator, logstash, druid, zipkin, wildfly, opensearch...

GHSA-VGQ5-3255-V292 vulnerabilities

Vulnerabilities for packages: thingsboard, druid, zipkin, debezium-connector-spanner, apache-nifi, apicurio-registry, opensearch, strimzi-kafka-operator, logstash, wildfly...