Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-3f7h-mf4q-vrm4
  • Maven/com.fasterxml.woodstox:woodstox-core
Denial of Service due to parser crash 17 Sep 2022
  • Fix available
  • Severity - 6.5 (Medium)
ECHO-811e-858f-b863
  • Echo:Maven/com.fasterxml.woodstox:woodstox-core
  • Echo:Maven/woodstox-core
See record for full details 4 days ago
  • Fix available
CLEANSTART-2026-PV59376
  • CleanStart/druid-fips
  • CleanStart/spark-sc213-jdk17-py312
Security fix for ghsa-3f7h-mf4q-vrm4 applied in: druid-fips 35.0.0-r1, spark-sc213-jdk17-py312 3.5.8-r0 18 Sep
  • Fix available
CGA-g6rx-4454-vf42
  • Chainguard/ranger
See record for full details 20 Aug
  • No fix available
  • Severity - 6.5 (Medium)
CGA-x9f4-fmxv-3355
  • Chainguard/ranger
See record for full details 20 Aug
  • No fix available
  • Severity - 6.5 (Medium)
CGA-88q5-qq56-953x
  • Chainguard/druid
  • Wolfi/druid
See record for full details 18 Dec 2025
  • Fix available
  • Severity - 6.5 (Medium)
CGA-q437-pcpg-qcwx
  • Chainguard/druid
  • Wolfi/druid
See record for full details 18 Dec 2025
  • Fix available
  • Severity - 6.5 (Medium)
MINI-jcf2-rr76-7f2c
  • MinimOS/spark-3.5-scala-2.12
  • MinimOS/spark-3.5-scala-2.12-python
  • MinimOS/spark-3.5-scala-2.12-python-r
  • MinimOS/spark-3.5-scala-2.13
  • MinimOS/spark-3.5-scala-2.13-python
  • ... 1 more
See record for full details 17 Nov 2025
  • No fix available
CGA-rgvq-wp4w-gf43
  • Chainguard/spark-3.5-scala-2.13
See record for full details 30 Oct 2025
  • Fix available
  • Severity - 6.5 (Medium)
CGA-9886-6p9m-p2cw
  • Chainguard/spark-3.5-scala-2.13
See record for full details 30 Oct 2025
  • Fix available
  • Severity - 6.5 (Medium)
CGA-3h62-pp7c-jgh6
  • Chainguard/sonarqube-10
  • Wolfi/sonarqube-10
See record for full details 30 Oct 2025
  • Fix available
  • Severity - 6.5 (Medium)
CGA-2x8r-rv3m-wc9f
  • Chainguard/sonarqube-10
  • Wolfi/sonarqube-10
See record for full details 30 Oct 2025
  • Fix available
  • Severity - 6.5 (Medium)
CGA-vhgw-3467-343f
  • Chainguard/druid
  • Wolfi/druid
See record for full details 30 Oct 2025
  • Fix available
  • Severity - 6.5 (Medium)
CGA-3r3c-73q3-4j76
  • Chainguard/druid
  • Wolfi/druid
See record for full details 30 Oct 2025
  • Fix available
  • Severity - 6.5 (Medium)
CVE-2022-40152
  • github.com/fasterxml/woodstox
  • github.com/x-stream/xstream
Stack Buffer Overflow in Woodstox 16 Sep 2022
  • Fix available
  • Severity - 6.5 (Medium)