Skip to content
OpenAdvisories

Package · Wolfi

flyway

83 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

42 results · Clear filters · Feed

  • Medium 5.8
    CVE-2025-53864

    Nimbus JOSE + JWT is vulnerable to DoS attacks when processing deeply nested JSON

    Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x before 9.37.4 allows a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT claim set, because of uncontrolled recursion. NOTE: this is independent of the G…

    Connect2id Nimbus JOSE+JWT druid tez Ubuntu Wolfi Maven
  • Medium 4.4
    CVE-2025-24790

    Snowflake JDBC uses insecure temporary credential cache file permissions

    Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake JDBC Driver. On Linux systems, when temporary credential caching…

    snowflakedb snowflake-jdbc trino trino-plugin-opensearch Wolfi Maven