org.graylog.plugins:usage-statistics (2.0.0-beta.2) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.0.0-beta.2)

org.graylog2:graylog2-server MAVEN version 2.0.0-beta.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-beta.2 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0-rc.1) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.0.0-rc.1)

org.graylog2:graylog2-server MAVEN version 2.0.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-rc.1 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.0.0)

org.graylog2:graylog2-server MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:usage-statistics (2.0.1) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.0.1)

org.graylog2:graylog2-server MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.1 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:usage-statistics (2.0.2) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.0.2)

org.graylog2:graylog2-server MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.2 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:usage-statistics (2.0.3) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.0.3)

org.graylog2:graylog2-server MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.3 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-alpha.1) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.1.0-alpha.1)

org.graylog2:graylog2-server MAVEN version 2.1.0-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-alpha.1 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-beta.1) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.1.0-beta.1)

org.graylog2:graylog2-server MAVEN version 2.1.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-beta.1 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-beta.2) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.1.0-beta.2)

org.graylog2:graylog2-server MAVEN version 2.1.0-beta.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-beta.2 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-beta.3) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.1.0-beta.3)

org.graylog2:graylog2-server MAVEN version 2.1.0-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-beta.3 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-beta.4) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.1.0-beta.4)

org.graylog2:graylog2-server MAVEN version 2.1.0-beta.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-beta.4 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-rc.1) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.1.0-rc.1)

org.graylog2:graylog2-server MAVEN version 2.1.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-rc.1 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:graylog-plugin-pipeline-processor (1.1.0), org.graylog.plugins:usage-statistics (2.1.0) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.1.0)

org.graylog2:graylog2-server MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-pipeline-processor 1.1.0 - org.graylog.plugins:usage-statistics 2.1....

org.graylog.plugins:graylog-plugin-pipeline-processor (1.1.1), org.graylog.plugins:usage-statistics (2.1.1) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.1.1)

org.graylog2:graylog2-server MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-pipeline-processor 1.1.1 - org.graylog.plugins:usage-statistics 2.1....

org.graylog.plugins:usage-statistics (2.1.3) potentially affected by unknown CVE via org.graylog2:graylog2-server (2.1.3)

org.graylog2:graylog2-server MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.3 Source cves: unknown CVE Source advisory:...

org.graylog.plugins:graylog-plugin-parent (2.2.0-alpha.1), org.graylog.plugins:graylog-plugin-web-parent (2.2.0-alpha.1) +1 more potentially affected by unknown CVE via org.graylog2:graylog2-server (2.2.0-alpha.1)

org.graylog2:graylog2-server MAVEN version 2.2.0-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.0-alpha.1 -...

org.graylog.plugins:usage-statistics (>=1.0.3, <=1.0.4) potentially affected by unknown CVE via org.graylog2:graylog2-server (1.1.0-beta.3)

org.graylog2:graylog2-server MAVEN version 1.1.0-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics =1.0.3, =1.0.4 Source cves: unknown CVE Source advisory:...

Security update for libsoup2

This update for libsoup2 fixes the following issues: CVE-2025-2784: Fixed heap buffer over-read in skipinsignificantspace when sniffing conten bsc1240750 CVE-2025-32050: Fixed integer overflow in appendparamquoted bsc1240752 CVE-2025-32052: Fixed heap buffer overflow in sniffunknown bsc1240756...

python-werkzeug: user may execute code on a developer's machine

A flaw was found in Werkzeug, where an attacker may be able to execute code on a developer's machine under some circumstances. This issue requires the attacker to get the developer to interact with a domain and subdomain they control and enter the debugger PIN; if they are successful, it allows...

python-werkzeug: high resource usage when parsing multipart form data with many fields

A flaw was found in python-werkzeug. Werkzeug is multipart form data parser, that will parse an unlimited number of parts, including file parts. These parts can be a small amount of bytes, but each requires CPU time to parse, and may use more memory as Python data. If a request can be made to an...