Package · Wolfi

opensearch-2

71 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.8

CVE-2025-0851 Public exploit EPSS 26%

Path traversal issue in Deep Java Library

A path traversal issue in ZipUtils.unzip and TarUtils.untar in Deep Java Library (DJL) on all platforms allows a bad actor to write files to arbitrary locations.

AWS DeepJavaLibrary opensearch-2 ai.djl:api Wolfi Maven

Jan 29, 2025
Critical 9.3

CVE-2024-28752 Public exploit

Apache CXF SSRF Vulnerability using the Aegis databinding

A SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. Users of other data bindings (including the …

Apache Software Foundation Apache CXF opensearch-2 org.apache.cxf:cxf-rt-databinding-aegis Wolfi Maven

Mar 15, 2024