Package · Wolfi

confluent-common-docker

27 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.3

CVE-2026-54515 Public exploit

jackson-databind: Case-insensitive deserialization bypasses per-property @JsonIgnoreProperties

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.8.0 until 2.18.9, 2.21.5, and 3.1.4, in BeanDeserializerBase.createContextual(), per-property @JsonIgnoreProperties exclusions are appli…

FasterXML jackson-databind druid thingsboard-tb-node Debian Ubuntu Wolfi Maven

Jun 23, 2026
Medium 6.4

CVE-2024-24787 Public exploit

Arbitrary code execution during build on Darwin in cmd/go

On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -lto_library flag in a "#cgo LDFLAGS" directive.

Go toolchain cmd/go katib-suggestion-hyperopt katib-earlystopping Azure Linux Wolfi Go

May 8, 2024