opensearch-3-analysis-nori

3 results · Feed

• Medium 5.9
  CVE-2025-12194

  Bouncy Castle Vulnerable to Uncontrolled Resource Consumption

  Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All (API modules), Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on All (API modules) allows Excessive Alloc…

  Legion of the Bouncy Castle Bouncy Castle for Java FIPS Bouncy Castle for Java LTS bouncycastle Debian Wolfi Maven
  Oct 24, 2025
• Medium 6.1
  CVE-2025-22227

  CVE-2025-22227: Authentication Leak On Redirect With Reactor Netty HTTP Client

  In some specific scenarios with chained redirects, Reactor Netty HTTP client leaks credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects.

  VMware Reactor Netty druid thingsboard-tb-node Wolfi Maven
  Jul 16, 2025
• High 7.5
  CVE-2025-27817 Public exploit Scanner template EPSS 70%

  Apache Kafka Client: Arbitrary file read and SSRF vulnerability

  A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apache Kafka Clients accept configuration data for setting the SASL/OAUTHBEARER connection with the brokers, including "sasl.oauthbearer.token.endpoint.url" and …

  Apache Software Foundation Apache Kafka Client druid thingsboard-tb-node Wolfi Maven
  Jun 10, 2025