Skip to content
OpenAdvisories

Package · Wolfi

opensearch-3-performance-analyzer

42 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

42 results · Feed

  • Medium 6.1
    CVE-2025-22227

    CVE-2025-22227: Authentication Leak On Redirect With Reactor Netty HTTP Client

    In some specific scenarios with chained redirects, Reactor Netty HTTP client leaks credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects.

    VMware Reactor Netty druid thingsboard-tb-node Wolfi Maven
  • High 7.5
    CVE-2025-27817 Public exploit Scanner template EPSS 70%

    Apache Kafka Client: Arbitrary file read and SSRF vulnerability

    A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apache Kafka Clients accept configuration data for setting the SASL/OAUTHBEARER connection with the brokers, including "sasl.oauthbearer.token.endpoint.url" and …

    Apache Software Foundation Apache Kafka Client druid thingsboard-tb-node Wolfi Maven