Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1104: Use of Unmaintained Third Party Components

Base Incomplete

The product relies on third-party components that are not
actively supported or maintained by the original developer or a trusted proxy
for the original developer.

Source: MITRE CWE-1104

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-66788

    Lighthouse: lighthouse: arbitrary namespace injection via attacker-controlled broker label

    A flaw was found in Lighthouse. A remote attacker, by compromising a spoke cluster, can exploit a vulnerability where the destination namespace for resource injection is derived from an attacker-controlled label or annotation on the broker object. This allows…

    Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.17 Red Hat Advanced Cluster Management for Kubernetes 2.16
  • Critical 9.8
    CVE-2026-16634

    TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99

    TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99. The tomlc99 library is no longer maintained, and has an uncontrolled recursion vulnerability publicly reported in the issue tracker. Any caller that passes untrust…

    FELIPE TOML::XS
  • Critical 9.8
    CVE-2026-3031

    Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg library

    Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg library. Image::EPEG includes Epeg 0.9.0 that was last updated in 2004. Epeg is a fast JPEG thumbnail library that was once part of the Englightenment Project.

    TOKUHIROM Image::EPEG
  • Critical 10.0
    CVE-2025-12104

    Incorrect Content-Type Header

    Outdated and Vulnerable UI Dependencies might potentially lead to exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

    Azure Access Technology BLU-IC2 BLU-IC4
  • Critical 9.3
    CVE-2025-34192

    Vasion Print (formerly PrinterLogic) Usage of Outdated and Unsupported OpenSSL Version

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.893 and Application versions prior to 20.0.2140 (macOS/Linux client deployments) are built against OpenSSL 1.0.2h-fips (released May 2016), which has been end-of-life since 201…

    Vasion Print Virtual Appliance Host Print Application
  • Critical 9.8
    CVE-2025-10220

    Outdated Third-Party NuGet Packages in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4

    Use of Unmaintained Third Party Components (CWE-1104) in the NuGet dependency components in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 on Windows allows a remote attacker to execute arbitrary code or bypass security features via exploitation of vulnerable th…

    AxxonSoft AxxonOne C-Werk
  • Critical 9.8
    CVE-2025-40906

    BSON::XS versions 0.8.4 and earlier for Perl includes a bundled libbson 1.1.7, which has several vulnerabilities

    BSON::XS versions 0.8.4 and earlier for Perl includes a bundled libbson 1.1.7, which has several vulnerabilities. Those include CVE-2017-14227, CVE-2018-16790, CVE-2023-0437, CVE-2024-6381, CVE-2024-6383, and CVE-2025-0755. BSON-XS was the official Perl XS im…

    MongoDB BSON::XS libbson-xs-perl libbson-xs-perl Debian Ubuntu
  • Critical —
    GHSA-vfv3-9w6v-23jp

    typemap is Unmaintained

    The maintainer seems unreachable. The crate may or may not be usable as-is despite no maintenance and may not work in future versions of Rust. The last release seems to have been seven years ago.

    typemap crates.io
  • Critical —
    GHSA-pp8r-vv2j-9j5v

    traitobject is Unmaintained

    Crate `traitobject` has not had a release for over five years. In addition there is an existing security advisory that has not been addressed: - [RUSTSEC-2020-0027](https://rustsec.org/advisories/RUSTSEC-2020-0027) ## Possible Alternative(s) The below list ha…

    traitobject crates.io