Skip to content
OpenAdvisories

Package · Wolfi

apicurio-registry-ui

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.9
    CVE-2025-58057

    Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack

    Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In netty-codec-compression versions 4.1.124.Final and below, and netty-codec versions 4.2.4.Final and below,…

    netty netty druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  • Medium 6.0
    CVE-2025-7962

    Jakarta Mail vulnerable to SMTP Injection

    In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.

    Eclipse Foundation Jakarta Mail thingsboard-tb-node apache-nifi Debian Ubuntu Wolfi Maven
  • Medium 5.3
    CVE-2025-48924 Public exploit

    Apache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputs

    Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0. The methods ClassUtils.getClass(...) can thr…

    Apache Software Foundation Apache Commons Lang druid thingsboard-tb-node Debian Ubuntu Azure Linux Wolfi Maven
  • Medium 5.8
    CVE-2025-53864

    Nimbus JOSE + JWT is vulnerable to DoS attacks when processing deeply nested JSON

    Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x before 9.37.4 allows a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT claim set, because of uncontrolled recursion. NOTE: this is independent of the G…

    Connect2id Nimbus JOSE+JWT druid tez Ubuntu Wolfi Maven
  • Medium 6.8
    CVE-2025-4949

    XXE vulnerability in Eclipse JGit

    In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git pack files in an Amazon S3 bucket, are v…

    Eclipse JGit Eclipse JGit thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  • Medium 5.5
    CVE-2024-47535

    Denial of Service attack on windows app using Netty

    Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on a…

    netty netty netty sonarqube Ubuntu Wolfi Maven
  • Medium —
    CVE-2012-5783

    Improper Certificate Validation in Apache Commons HttpClient

    Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certif…

    trino trino-plugin-opensearch trino-plugin-pinot trino-plugin-lakehouse Debian Wolfi Maven