sz-lk-plan-main-app.tar (alt cpe:/o:alt:spcontainer:10.2.2) - Trivy Report - 2026-08-14 07:57:58.509667676 +0000 UTC m=+4.609527553
alt
No Vulnerabilities found
No Misconfigurations found
jar
Package
Vulnerability ID
Severity
Installed Version
Fixed Version
Links
io.micrometer:micrometer-core
CVE-2026-40984
HIGH
1.13.4
1.16.6, 1.15.12
https://access.redhat.com/errata/RHSA-2026:36839
https://access.redhat.com/errata/RHSA-2026:37390
https://access.redhat.com/errata/RHSA-2026:41951
https://access.redhat.com/errata/RHSA-2026:50848
https://access.redhat.com/errata/RHSA-2026:50849
https://access.redhat.com/errata/RHSA-2026:54435
https://access.redhat.com/security/cve/CVE-2026-40984
https://bugzilla.redhat.com/show_bug.cgi?id=2486716
https://github.com/micrometer-metrics/micrometer
https://github.com/micrometer-metrics/micrometer/commit/36da131525228188a36779a28471a76c79213dd4
https://nvd.nist.gov/vuln/detail/CVE-2026-40984
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40984.json
https://spring.io/security/cve-2026-40984
https://www.cve.org/CVERecord?id=CVE-2026-40984
org.apache.logging.log4j:log4j-api
CVE-2026-49844
MEDIUM
2.24.3
2.25.5, 2.26.1
https://access.redhat.com/security/cve/CVE-2026-49844
https://github.com/apache/logging-log4j2
https://github.com/apache/logging-log4j2/commit/19edb23e162d6c728a8c2221a240037d389ed300
https://github.com/apache/logging-log4j2/commit/feadf8eb0b4acb6ddfa4c0ab2bbc6d88b8e12d82
https://github.com/apache/logging-log4j2/pull/4163
https://github.com/apache/logging-log4j2/releases/tag/rel/2.25.5
https://github.com/apache/logging-log4j2/releases/tag/rel/2.26.1
https://logging.apache.org/cyclonedx/vdr.xml
https://logging.apache.org/log4j/2.x/manual/json-template-layout.html#event-template-resolver-message
https://logging.apache.org/security.html#CVE-2026-49844
https://nvd.nist.gov/vuln/detail/CVE-2026-49844
https://www.cve.org/CVERecord?id=CVE-2026-49844
No Misconfigurations found