PT-2026-51308

Name of the Vulnerable Software and Affected Versions MISP core affected versions not specified Description Broken access-control flaws exist where authorization checks are performed against incorrect entities or ownership and editability checks are missing on write paths. This allows a...

Amazon Linux 2023 : python3-mako (ALAS2023-2026-1846)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1846 advisory. Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.gettemplate is vulnerable to path traversal when a URI starts with // e.g., //../../../secret.txt. The root cause is an...

Cross-Site Scripting (XSS)

Angular is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to the Angular template compiler failing to apply the required sanitizer for sensitive native DOM properties used with two-way property bindings, which allows an attacker to bypass Angular's built-in DOM sanitization and...

org.http4k:http4k-client-apache (1.4.0), org.http4k:http4k-contract (1.4.0) +6 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.4.0)

org.http4k:http4k-core MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.4.0 - org.http4k:http4k-contract 1.4.0 - org.http4k:http4k-format-argo 1.4.0 -...

org.http4k:http4k-client-apache (1.10.0), org.http4k:http4k-contract (1.10.0) +6 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.10.0)

org.http4k:http4k-core MAVEN version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.10.0 - org.http4k:http4k-contract 1.10.0 - org.http4k:http4k-format-argo 1.10.0 ...

org.http4k:http4k-format-argo (0.21.0), org.http4k:http4k-format-jackson (0.21.0) +2 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (0.21.0)

org.http4k:http4k-core MAVEN version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-format-argo 0.21.0 - org.http4k:http4k-format-jackson 0.21.0 - org.http4k:http4k-server-netty...

org.http4k:http4k-aws (2.26.3), org.http4k:http4k-contract (2.26.3) +1 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (2.26.3)

org.http4k:http4k-core MAVEN version 2.26.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 2.26.3 - org.http4k:http4k-contract 2.26.3 - org.http4k:http4k-template-handlebars 2.26.3...

org.http4k:http4k-aws (2.25.0), org.http4k:http4k-contract (2.25.0) +1 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (2.25.0)

org.http4k:http4k-core MAVEN version 2.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 2.25.0 - org.http4k:http4k-contract 2.25.0 - org.http4k:http4k-template-handlebars 2.25.0...

org.http4k:http4k-aws (3.34.3), org.http4k:http4k-contract (3.34.3) +1 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.34.3)

org.http4k:http4k-core MAVEN version 3.34.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.34.3 - org.http4k:http4k-contract 3.34.3 - org.http4k:http4k-template-dust 3.34.3 Source...

org.http4k:http4k-client-apache (0.22.0), org.http4k:http4k-contract (0.22.0) +6 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (0.22.0)

org.http4k:http4k-core MAVEN version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 0.22.0 - org.http4k:http4k-contract 0.22.0 - org.http4k:http4k-format-argo 0.22.0 ...

org.http4k:http4k-client-apache (1.1.0), org.http4k:http4k-contract (1.1.0) +6 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.1.0)

org.http4k:http4k-core MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.1.0 - org.http4k:http4k-contract 1.1.0 - org.http4k:http4k-format-argo 1.1.0 -...

org.http4k:http4k-client-apache (1.8.0), org.http4k:http4k-contract (1.8.0) +6 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.8.0)

org.http4k:http4k-core MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.8.0 - org.http4k:http4k-contract 1.8.0 - org.http4k:http4k-format-argo 1.8.0 -...

org.http4k:http4k-client-apache (1.9.0), org.http4k:http4k-contract (1.9.0) +6 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.9.0)

org.http4k:http4k-core MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.9.0 - org.http4k:http4k-contract 1.9.0 - org.http4k:http4k-format-argo 1.9.0 -...

org.http4k:http4k-client-apache (1.11.0), org.http4k:http4k-contract (1.11.0) +6 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (1.11.0)

org.http4k:http4k-core MAVEN version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.11.0 - org.http4k:http4k-contract 1.11.0 - org.http4k:http4k-format-argo 1.11.0 ...

org.http4k:http4k-aws (2.26.3), org.http4k:http4k-contract (2.26.3) +1 more potentially affected by unknown CVE via org.http4k:http4k-core (2.26.3)

org.http4k:http4k-core MAVEN version 2.26.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 2.26.3 - org.http4k:http4k-contract 2.26.3 - org.http4k:http4k-template-handlebars 2.26.3...

org.http4k:http4k-client-apache (1.8.0), org.http4k:http4k-contract (1.8.0) +6 more potentially affected by unknown CVE via org.http4k:http4k-core (1.8.0)

org.http4k:http4k-core MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.8.0 - org.http4k:http4k-contract 1.8.0 - org.http4k:http4k-format-argo 1.8.0 -...

org.http4k:http4k-client-apache (1.2.0), org.http4k:http4k-contract (1.2.0) +6 more potentially affected by unknown CVE via org.http4k:http4k-core (1.2.0)

org.http4k:http4k-core MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.2.0 - org.http4k:http4k-contract 1.2.0 - org.http4k:http4k-format-argo 1.2.0 -...

org.http4k:http4k-client-okhttp (1.26.0), org.http4k:http4k-format-argo (1.26.0) +3 more potentially affected by unknown CVE via org.http4k:http4k-core (1.26.0)

org.http4k:http4k-core MAVEN version 1.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-okhttp 1.26.0 - org.http4k:http4k-format-argo 1.26.0 - org.http4k:http4k-format-jackson...

org.http4k:http4k-client-apache (0.22.0), org.http4k:http4k-contract (0.22.0) +6 more potentially affected by unknown CVE via org.http4k:http4k-core (0.22.0)

org.http4k:http4k-core MAVEN version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 0.22.0 - org.http4k:http4k-contract 0.22.0 - org.http4k:http4k-format-argo 0.22.0 ...

org.http4k:http4k-format-argo (0.21.0), org.http4k:http4k-format-jackson (0.21.0) +2 more potentially affected by unknown CVE via org.http4k:http4k-core (0.21.0)

org.http4k:http4k-core MAVEN version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-format-argo 0.21.0 - org.http4k:http4k-format-jackson 0.21.0 - org.http4k:http4k-server-netty...