Package · Wolfi

opensearch-3-analysis-icu

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

Medium 5.9

CVE-2025-12194

Bouncy Castle Vulnerable to Uncontrolled Resource Consumption

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All (API modules), Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on All (API modules) allows Excessive Alloc…

Legion of the Bouncy Castle Bouncy Castle for Java FIPS Bouncy Castle for Java LTS bouncycastle Debian Wolfi Maven

Oct 24, 2025
Medium 6.1

CVE-2025-22227

CVE-2025-22227: Authentication Leak On Redirect With Reactor Netty HTTP Client

In some specific scenarios with chained redirects, Reactor Netty HTTP client leaks credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects.

VMware Reactor Netty druid thingsboard-tb-node Wolfi Maven

Jul 16, 2025
High 7.5

CVE-2025-27817 Public exploit Scanner template EPSS 70%

Apache Kafka Client: Arbitrary file read and SSRF vulnerability

A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apache Kafka Clients accept configuration data for setting the SASL/OAUTHBEARER connection with the brokers, including "sasl.oauthbearer.token.endpoint.url" and …

Apache Software Foundation Apache Kafka Client druid thingsboard-tb-node Wolfi Maven

Jun 10, 2025