CVE-2026-61634 vulnerabilities

Vulnerabilities for packages: traccar, traccar-fips, nuxeo, conductor-fips, druid, thingsboard, conductor, zipkin, cassandra-reaper...

GHSA-6G32-PXV4-2WFJ vulnerabilities

Vulnerabilities for packages: traccar, traccar-fips, nuxeo, conductor-fips, druid, thingsboard, conductor, zipkin, cassandra-reaper...

CVE-2026-69219 vulnerabilities

Vulnerabilities for packages: traccar, traccar-fips, nuxeo, conductor-fips, druid, thingsboard, conductor, zipkin, cassandra-reaper...

CVE-2026-63337 vulnerabilities

Vulnerabilities for packages: traccar, traccar-fips, nuxeo, conductor-fips, druid, thingsboard, conductor, zipkin, cassandra-reaper...

GHSA-5XWG-CFVJ-GFF5 vulnerabilities

Vulnerabilities for packages: druid, cassandra-reaper, thingsboard, zipkin...

GHSA-6G32-PXV4-2WFJ vulnerabilities

Vulnerabilities for packages: druid, cassandra-reaper, thingsboard, zipkin...

CVE-2026-63335 vulnerabilities

Vulnerabilities for packages: druid, cassandra-reaper, thingsboard, zipkin...

CVE-2026-61634 vulnerabilities

Vulnerabilities for packages: druid, cassandra-reaper, thingsboard, zipkin...

GHSA-68MJ-5WR7-6FGG vulnerabilities

Vulnerabilities for packages: druid, cassandra-reaper, thingsboard, zipkin...

GHSA-93J5-89VC-PPH4 vulnerabilities

Vulnerabilities for packages: druid, cassandra-reaper, thingsboard, zipkin...

Sensitive Information Exposure

io.zipkin, zipkin-server is vulnerable to Sensitive Information Exposure. The vulnerability is due to the presence of an unprotected /heapdump endpoint associated with Spring Boot Actuator, which allows an attacker to retrieve memory dumps and potentially extract sensitive data. Note: There is a...

GHSA-794X-8X6X-QPFC Zipkin Server vulnerable to Insecure Resource Initialization through its /heapdump endpoint

Zipkin through 3.5.1 has a /heapdump endpoint associated with the use of Spring Boot Actuator, a similar issue to CVE-2025-48927...

Zipkin Server vulnerable to Insecure Resource Initialization through its /heapdump endpoint

Zipkin through 3.5.1 has a /heapdump endpoint associated with the use of Spring Boot Actuator, a similar issue to CVE-2025-48927...