Skip to content
OpenAdvisories

Package · Wolfi

sonarqube

94 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-75595

    Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext

    Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandler#decode checks the wrong offset before reading the four-byte TLS handshake header, so a ClientHello whose h…

    netty netty druid trino-plugin-opensearch Debian Ubuntu Wolfi Maven
  • Critical 9.3
    CVE-2025-14813

    GOSTCTR implementation unable to process more than 255 blocks correctly

    : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules). This vulnerability is associated with program files G3413CTRBlockCipher. This issue affects BC-JAVA: from 1.59 before 1.…

    Legion of the Bouncy Castle BC-JAVA logstash-9.3 logstash-9.3-iamguarded-compat Ubuntu Wolfi Maven