Skip to content
OpenAdvisories

Package · Maven

io.zipkin:zipkin-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.3
    CVE-2025-53602

    Zipkin Server vulnerable to Insecure Resource Initialization through its /heapdump endpoint

    Zipkin through 3.5.1 has a /heapdump endpoint (associated with the use of Spring Boot Actuator), a similar issue to CVE-2025-48927.

    Open Zipkin zipkin io.zipkin:zipkin-server Maven