com.vaadin:vaadin-platform-test (10.0.13) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.13)

com.vaadin:vaadin MAVEN version 10.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.13 Source cves: CVE-2026-2742 Source advisory: OSV:GHSA-RJGH-WGC7-M37J...

com.vaadin:vaadin-platform-test (10.0.24) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.24)

com.vaadin:vaadin MAVEN version 10.0.24 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.24 Source cves: CVE-2026-2742 Source advisory: OSV:GHSA-RJGH-WGC7-M37J...

com.vaadin:vaadin-platform-test (10.0.15) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.15)

com.vaadin:vaadin MAVEN version 10.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.15 Source cves: CVE-2026-2742 Source advisory: OSV:GHSA-RJGH-WGC7-M37J...

com.vaadin:vaadin-platform-test (10.0.17) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.17)

com.vaadin:vaadin MAVEN version 10.0.17 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.17 Source cves: CVE-2026-2742 Source advisory: OSV:GHSA-RJGH-WGC7-M37J...

com.vaadin:vaadin-platform-test (10.0.11) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.11)

com.vaadin:vaadin MAVEN version 10.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.11 Source cves: CVE-2026-2742 Source advisory: OSV:GHSA-RJGH-WGC7-M37J...

com.vaadin:vaadin-platform-test (10.0.5), org.rapidpm.vaadin:vaadin-fluent-component-api (00.01.00-rpm) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.5)

com.vaadin:vaadin MAVEN version 10.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.5 - org.rapidpm.vaadin:vaadin-fluent-component-api 00.01.00-rpm Source cves:...

com.vaadin:vaadin-platform-test (10.0.10), org.rapidpm:rapidpm-vaadin-testbench-ng-m-framework-v10 (>=01.00.02-rpm, <=01.00.03-rpm) +1 more potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.10)

com.vaadin:vaadin MAVEN version 10.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.10 - org.rapidpm:rapidpm-vaadin-testbench-ng-m-framework-v10 =01.00.02-rpm,...

com.vaadin:vaadin-platform-test (10.0.14) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.14)

com.vaadin:vaadin MAVEN version 10.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.14 Source cves: CVE-2026-2742 Source advisory: OSV:GHSA-RJGH-WGC7-M37J...

com.vaadin:vaadin-platform-test (10.0.2), org.rapidpm.vaadin:rapidpm-vaadin-cdi-m-integration-tests (00.07.04-rpm) +4 more potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.2)

com.vaadin:vaadin MAVEN version 10.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.2 - org.rapidpm.vaadin:rapidpm-vaadin-cdi-m-integration-tests 00.07.04-rpm -...

com.vaadin:vaadin-platform-test (11.0.2) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (11.0.2)

com.vaadin:vaadin MAVEN version 11.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 11.0.2 Source cves: CVE-2026-2742 Source advisory: OSV:GHSA-RJGH-WGC7-M37J...

com.vaadin:vaadin-platform-test (10.0.16) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.16)

com.vaadin:vaadin MAVEN version 10.0.16 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.16 Source cves: CVE-2026-2742 Source advisory: OSV:GHSA-RJGH-WGC7-M37J...

com.vaadin:vaadin-platform-test (10.0.21) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.21)

com.vaadin:vaadin MAVEN version 10.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.21 Source cves: CVE-2026-2742 Source advisory: OSV:GHSA-RJGH-WGC7-M37J...

com.vaadin:vaadin-platform-test (10.0.4) potentially affected by CVE-2026-2742 via com.vaadin:vaadin (10.0.4)

com.vaadin:vaadin MAVEN version 10.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.vaadin:vaadin and may be impacted: - com.vaadin:vaadin-platform-test 10.0.4 Source cves: CVE-2026-2742 Source advisory: OSV:GHSA-RJGH-WGC7-M37J...

Malicious code in test-logsmodule-v-zisko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6f59f2c34febf5b71ba7f6912540619742de8815167ecc99397fe9b5b9eced9 The package test-logsmodule-v-zisko was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1324 Malicious code in test-logsmodule-v-zisko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6f59f2c34febf5b71ba7f6912540619742de8815167ecc99397fe9b5b9eced9 The package test-logsmodule-v-zisko was found to contain malicious code. Source: ghsa-malware...

CLSA-2026-1773161124 Fix CVE(s): CVE-2021-22876, CVE-2025-15079

SECURITY UPDATE: acceptance of hosts not listed in specified knownhosts file during SSH-based transfers - debian/patches/CVE-2025-15079.patch: Set both knownhosts options to same file and fix surprises caused by libssh exposing separate KNOWNHOSTS and GLOBALKNOWNHOSTS options. - CVE-2025-15079...

CVE-2026-24316 Server-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAP

SAP NetWeaver Application Server for ABAP provides an ABAP Report for testing purposes, which allows to send HTTP requests to arbitrary internal or external endpoints. The report is therefore vulnerable to Server-Side Request Forgery SSRF. Successful exploitation could lead to interaction with...

CVE-2026-24316

SAP NetWeaver Application Server for ABAP provides an ABAP Report for testing purposes, which allows to send HTTP requests to arbitrary internal or external endpoints. The report is therefore vulnerable to Server-Side Request Forgery SSRF. Successful exploitation could lead to interaction with...

PT-2026-24623

Summary At the rate limit filter, if we enabled the response phase limit with apply on stream done in the rate limit configuration and the response phase limit request fails directly, it may crash Envoy. Details When both the request phase limit and response phase limit are enabled, the safe gRPC...

SAP NetWeaver Application Server for ABAP code-related vulnerabilities

SAP NetWeaver Application Server for ABAP is a core application server platform developed by the German company SAP. There is a code vulnerability in SAP NetWeaver Application Server for ABAP. This vulnerability stems from the ABAP reports used for testing, which allow sending HTTP requests to...