CVE-2025-61729 is a high-severity security vulnerability in the argo-workflows package affecting versions prior to 4.1.6-r1. The issue is related to a HostnameError condition that impacts availability but does not affect confidentiality or integrity. A patch is available in version 4.1.6-r1 to address this vulnerability.
A critical security vulnerability (CVE-2026-107726) affects the wso2is package, related to the Hazelcast real-time data platform. The flaw impacts versions prior to 7.0.0-r4 and 7.1.0-r3. The vulnerability has a high CVSS 4.0 score of 9.3, indicating severe impact with network attack vector and no required privileges or user interaction. Fixed versions 7.0.0-r4 and 7.1.0-r3 are available.
A high-severity security vulnerability affects the wso2is package, specifically versions prior to 7.1.0-r3. The vulnerability relates to the Hazelcast platform, which integrates stream processing with a fast data store. A fix for this issue is available in version 7.1.0-r3.
A security vulnerability in the Solr package affects versions prior to 10.0.0-r12. The issue lies in the Smile parser of the FasterXML jackson-dataformats-binary component, which fails to invoke StreamReadConstraints. This flaw can lead to a high-severity impact on availability. A fix is available in version 10.0.0-r12.
A high-severity vulnerability in Apache Solr's asynchronous Smile parser (NonBlockingByteArrayParser) allows untrusted input to specify a raw-binary length prefix used to allocate a byte array without upper bound or overflow checks. This can lead to denial of service by exhausting system resources. The issue affects Solr versions prior to 10.0.0-r12 and has been fixed in 10.0.0-r12.
A security vulnerability in the Solr package affects the CBOR parser component of FasterXML jackson-dataformats-binary. The parser fails to invoke StreamReadConstraints, which leads to a denial of service condition. This issue is present in Solr versions prior to 10.0.0-r12 and has been assigned CVE-2026-68495 with a high severity rating.
A security vulnerability exists in the Solr package due to an issue in Netty netty-tcnative versions before 2. The vulnerability has a medium severity with a CVSS score of 5.3 and impacts Solr versions prior to 10.0.0-r12. The flaw does not affect confidentiality or availability but can lead to integrity loss. A patch is available in Solr version 10.0.0-r12.
A security vulnerability exists in the Solr package due to an issue in Netty netty-tcnative versions before 2. This vulnerability affects Solr versions prior to 10.0.0-r12. The flaw does not impact confidentiality or integrity but causes a high impact on availability. A fix is available in version 10.0.0-r12.
A security vulnerability exists in the Solr package due to an issue in the Netty netty-tcnative library versions before 2. This vulnerability affects Solr versions prior to 10.0.0-r12. The flaw does not impact confidentiality or integrity but causes a high impact on availability. A fix is available in version 10.0.0-r12.
A medium severity security vulnerability affects Apache Solr versions prior to 10.0.0-r13. The issue involves the opentelemetry-java component, which is the Java implementation of the OpenTelemetry API and SDK used for recording and managing telemetry data. This vulnerability does not impact confidentiality or integrity but can cause an availability impact. A fix is available in version 10.0.0-r13.
A critical security vulnerability in Solr allows unauthenticated clients to access certain protected resources when using the EthereumAuthenticator, if the request path contains the configured login path. This issue affects Solr versions prior to 10.0.0-r14. The vulnerability has a high CVSS 4.0 score of 9.3, indicating severe impact. A fix is available in version 10.0.0-r14.
A vulnerability in the argo-workflows package's Parse function allows values other than IPv6 addresses to be included in square brackets within the host component of a URL. This flaw affects versions prior to 4.1.6-r1 and has a medium severity rating. A fix is available in version 4.1.6-r1.
A high-severity security vulnerability (CVE-2026-19203) affects the Kafka package versions prior to 4.0.2-r6. The flaw allows a client to issue specially crafted HTTP/1 requests that may lead to security issues. A fix is available in version 4.0.2-r6.
A high-severity security vulnerability (CVE-2026-89046) affects the kafka package using zstd-jni versions 1 prior to 4.0.2-r6. The flaw has a CVSS score of 8.2, indicating a network exploitable issue with low attack complexity and no privileges or user interaction required. Confidentiality impact is low, integrity is not affected, but availability impact is high. A fix is available in version 4.0.2-r6.
A medium severity security vulnerability (CVE-2026-89045) affects the kafka package using zstd-jni versions 1 prior to 4.0.2-r6. The vulnerability impacts availability but does not affect confidentiality or integrity. A patch is available in version 4.0.2-r6.
A security vulnerability exists in the kafka package due to the use of zstd-jni versions before 1. This vulnerability is identified as CVE-2026-87825 and affects kafka versions prior to 4.0.2-r6. The flaw has a high severity with a CVSS score of 7.7, indicating it can cause high impact on integrity and availability without requiring user interaction or privileges. A fix is available in version 4.0.2-r6.
A high-severity security vulnerability (CVE-2026-87795) affects the kafka package due to an issue in zstd-jni versions before 1. The vulnerability impacts kafka versions prior to 4.0.2-r6. It has a CVSS 3.1 score of 8.2, indicating network exploitable conditions with low attack complexity and no privileges or user interaction required. The vulnerability results in low confidentiality impact but high availability impact. A patch is available in kafka version 4.0.2-r6.
A high-severity security vulnerability exists in the kafka package due to the use of zstd-jni versions before 1. This vulnerability affects kafka versions prior to 4.0.2-r6. The flaw does not impact confidentiality but can lead to integrity and availability issues. A fix is available in kafka version 4.0.2-r6.
A high-severity security vulnerability exists in the kafka package due to the use of zstd-jni versions before 1. This vulnerability affects kafka versions prior to 4.0.2-r6 and can cause a denial of service (availability impact). A fix is available in version 4.0.2-r6.
A high-severity security vulnerability (CVE-2026-87823) affects the kafka package due to an issue in zstd-jni versions before 1. This vulnerability impacts kafka versions prior to 4.0.2-r6. The flaw allows for network-based exploitation without privileges or user interaction, leading to limited confidentiality loss and high availability impact. A patch is available in kafka version 4.0.2-r6.