Package · Wolfi

opensearch-3-asynchronous-search

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.9

CVE-2025-12194

Bouncy Castle Vulnerable to Uncontrolled Resource Consumption

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All (API modules), Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on All (API modules) allows Excessive Alloc…

Legion of the Bouncy Castle Bouncy Castle for Java FIPS Bouncy Castle for Java LTS bouncycastle Debian Wolfi Maven

Oct 24, 2025
Medium 6.1

CVE-2025-22227

CVE-2025-22227: Authentication Leak On Redirect With Reactor Netty HTTP Client

In some specific scenarios with chained redirects, Reactor Netty HTTP client leaks credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects.

VMware Reactor Netty druid thingsboard-tb-node Wolfi Maven

Jul 16, 2025