CVE-2026-61634 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, thingsboard, nuxeo, druid, conductor-fips, traccar-fips, zipkin...

GHSA-6G32-PXV4-2WFJ vulnerabilities

Vulnerabilities for packages: cassandra-reaper, thingsboard, nuxeo, druid, conductor-fips, traccar-fips, zipkin...

CVE-2026-69219 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, thingsboard, nuxeo, druid, conductor-fips, traccar-fips, zipkin...

CVE-2026-63337 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, thingsboard, nuxeo, druid, conductor-fips, traccar-fips, zipkin...

GHSA-5XWG-CFVJ-GFF5 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, thingsboard, zipkin, druid...

GHSA-6G32-PXV4-2WFJ vulnerabilities

Vulnerabilities for packages: cassandra-reaper, thingsboard, zipkin, druid...

CVE-2026-63335 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, thingsboard, zipkin, druid...

CVE-2026-61634 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, thingsboard, zipkin, druid...

GHSA-68MJ-5WR7-6FGG vulnerabilities

Vulnerabilities for packages: cassandra-reaper, thingsboard, zipkin, druid...

GHSA-93J5-89VC-PPH4 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, thingsboard, zipkin, druid...

Sensitive Information Exposure

io.zipkin, zipkin-server is vulnerable to Sensitive Information Exposure. The vulnerability is due to the presence of an unprotected /heapdump endpoint associated with Spring Boot Actuator, which allows an attacker to retrieve memory dumps and potentially extract sensitive data. Note: There is a...

Zipkin Server vulnerable to Insecure Resource Initialization through its /heapdump endpoint

Zipkin through 3.5.1 has a /heapdump endpoint associated with the use of Spring Boot Actuator, a similar issue to CVE-2025-48927...

GHSA-794X-8X6X-QPFC Zipkin Server vulnerable to Insecure Resource Initialization through its /heapdump endpoint

Zipkin through 3.5.1 has a /heapdump endpoint associated with the use of Spring Boot Actuator, a similar issue to CVE-2025-48927...