sz-lk-main-bff.tar (alt cpe:/o:alt:spcontainer:10.2.2) - Trivy Report - 2026-06-24 07:24:01.29432479 +0000 UTC m=+87.550680713

alt
No Vulnerabilities found
No Misconfigurations found
jar
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
ch.qos.logback:logback-core	CVE-2026-1225	LOW	1.5.20	1.5.25	https://access.redhat.com/security/cve/CVE-2026-1225 https://github.com/qos-ch/logback https://github.com/qos-ch/logback/commit/1f97ae1844b1be8486e4e9cade98d7123d3eded5 https://github.com/qos-ch/logback/issues/997 https://logback.qos.ch/news.html#1.5.25 https://nvd.nist.gov/vuln/detail/CVE-2026-1225 https://www.cve.org/CVERecord?id=CVE-2026-1225
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	HIGH	2.21.2	2.18.8, 3.1.4, 2.21.4	https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5 https://github.com/FasterXML/jackson-databind/issues/5988 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	HIGH	2.21.2	2.18.8, 2.21.4, 3.1.4	https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5 https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e https://github.com/FasterXML/jackson-databind/issues/5981 https://github.com/FasterXML/jackson-databind/issues/5983 https://github.com/FasterXML/jackson-databind/pull/5984 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	MEDIUM	2.21.2	2.18.8, 2.21.4, 3.1.4	https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/1f5a1037b1e9e05920e755cb35f198bcd46667e4 https://github.com/FasterXML/jackson-databind/pull/5951 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-hgj6-7826-r7m5
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	MEDIUM	2.21.2	3.1.4, 2.18.9, 2.21.5	https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/0e1b0b211f7a53baa62ba2f4c9bd006c7bf4d5fa https://github.com/FasterXML/jackson-databind/issues/5962 https://github.com/FasterXML/jackson-databind/issues/5964 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5jmj-h7xm-6q6v
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54516	MEDIUM	2.21.2	2.21.4, 3.1.4	https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/c3d56dd25d52319828147c5b9aeabf2d485c250a https://github.com/FasterXML/jackson-databind/commit/e88cb17006b6af4883b973058f0bb6486e5074af https://github.com/FasterXML/jackson-databind/pull/5967 https://github.com/FasterXML/jackson-databind/pull/5968 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-9fxm-vc8v-hj55
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54517	MEDIUM	2.21.2	2.21.4, 3.1.4	https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/5bf23edb4221f7dd2ec8e71ff6d26c61640f261d https://github.com/FasterXML/jackson-databind/commit/94c5d215b3af1505098c686405d9641f041a9962 https://github.com/FasterXML/jackson-databind/pull/5969 https://github.com/FasterXML/jackson-databind/pull/5970 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5hh8-q8hv-fr38
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54518	MEDIUM	2.21.2	2.21.4	https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/721fa07ebbd4aab4a659a1a68940878315c3e341 https://github.com/FasterXML/jackson-databind/commit/d633bc038f200c1397c07f1a2b46f58e72c91eea https://github.com/FasterXML/jackson-databind/pull/5971 https://github.com/FasterXML/jackson-databind/pull/5973 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rcqc-6cw3-h962
io.netty:netty-codec	CVE-2026-42583	HIGH	4.1.132.Final	4.1.133.Final	https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6 https://nvd.nist.gov/vuln/detail/CVE-2026-42583
io.netty:netty-codec-dns	CVE-2026-42579	HIGH	4.1.132.Final	4.2.13.Final, 4.1.133.Final	https://access.redhat.com/security/cve/CVE-2026-42579 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm https://nvd.nist.gov/vuln/detail/CVE-2026-42579 https://tools.ietf.org/html/rfc1035#section-2.3.4 https://tools.ietf.org/html/rfc1035#section-4.1.4 https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42579
io.netty:netty-codec-http	CVE-2026-42584	HIGH	4.1.132.Final	4.2.13.Final, 4.1.133.Final	https://access.redhat.com/security/cve/CVE-2026-42584 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3 https://nvd.nist.gov/vuln/detail/CVE-2026-42584 https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42584
io.netty:netty-codec-http	CVE-2026-42587	HIGH	4.1.132.Final	4.2.13.Final, 4.1.133.Final	https://access.redhat.com/security/cve/CVE-2026-42587 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv https://nvd.nist.gov/vuln/detail/CVE-2026-42587 https://www.cve.org/CVERecord?id=CVE-2026-42587
io.netty:netty-codec-http	CVE-2026-41417	MEDIUM	4.1.132.Final	4.1.133.Final, 4.2.13.Final	https://access.redhat.com/security/cve/CVE-2026-41417 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv https://nvd.nist.gov/vuln/detail/CVE-2026-41417 https://www.cve.org/CVERecord?id=CVE-2026-41417
io.netty:netty-codec-http	CVE-2026-42580	MEDIUM	4.1.132.Final	4.2.13.Final, 4.1.133.Final	https://access.redhat.com/security/cve/CVE-2026-42580 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723 https://nvd.nist.gov/vuln/detail/CVE-2026-42580 https://www.cve.org/CVERecord?id=CVE-2026-42580
io.netty:netty-codec-http	CVE-2026-42581	MEDIUM	4.1.132.Final	4.2.13.Final, 4.1.133.Final	https://access.redhat.com/security/cve/CVE-2026-42581 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9 https://nvd.nist.gov/vuln/detail/CVE-2026-42581 https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42581
io.netty:netty-codec-http	CVE-2026-42585	MEDIUM	4.1.132.Final	4.2.13.Final, 4.1.133.Final	https://access.redhat.com/security/cve/CVE-2026-42585 https://datatracker.ietf.org/doc/html/rfc9112#name-message-body-length https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv https://nvd.nist.gov/vuln/detail/CVE-2026-42585 https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42585
io.netty:netty-codec-http	CVE-2026-50020	MEDIUM	4.1.132.Final	4.2.15.Final, 4.1.135.Final	https://access.redhat.com/security/cve/CVE-2026-50020 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c https://nvd.nist.gov/vuln/detail/CVE-2026-50020 https://www.cve.org/CVERecord?id=CVE-2026-50020
io.netty:netty-codec-http2	CVE-2026-42587	HIGH	4.1.132.Final	4.2.13.Final, 4.1.133.Final	https://access.redhat.com/security/cve/CVE-2026-42587 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv https://nvd.nist.gov/vuln/detail/CVE-2026-42587 https://www.cve.org/CVERecord?id=CVE-2026-42587
io.netty:netty-codec-http2	CVE-2026-47244	MEDIUM	4.1.132.Final	4.2.15.Final, 4.1.135.Final	https://access.redhat.com/security/cve/CVE-2026-47244 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q https://nvd.nist.gov/vuln/detail/CVE-2026-47244 https://www.cve.org/CVERecord?id=CVE-2026-47244
io.netty:netty-codec-http2	CVE-2026-48043	MEDIUM	4.1.132.Final	4.1.135.Final, 4.2.15.Final	https://access.redhat.com/security/cve/CVE-2026-48043 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j https://nvd.nist.gov/vuln/detail/CVE-2026-48043 https://www.cve.org/CVERecord?id=CVE-2026-48043
io.netty:netty-codec-http2	CVE-2026-50560	MEDIUM	4.1.132.Final	4.2.15.Final, 4.1.135.Final	https://access.redhat.com/security/cve/CVE-2026-50560 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm https://nvd.nist.gov/vuln/detail/CVE-2026-50560 https://www.cve.org/CVERecord?id=CVE-2026-50560 https://www.rfc-editor.org/rfc/rfc9113.html#name-defined-settings
io.netty:netty-handler	CVE-2026-44249	HIGH	4.1.132.Final	4.2.15.Final, 4.1.135.Final	https://access.redhat.com/security/cve/CVE-2026-44249 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86 https://nvd.nist.gov/vuln/detail/CVE-2026-44249 https://www.cve.org/CVERecord?id=CVE-2026-44249
io.netty:netty-handler	CVE-2026-45416	HIGH	4.1.132.Final	4.2.15.Final, 4.1.135.Final	https://access.redhat.com/security/cve/CVE-2026-45416 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh https://nvd.nist.gov/vuln/detail/CVE-2026-45416 https://www.cve.org/CVERecord?id=CVE-2026-45416
io.netty:netty-handler	CVE-2026-50010	HIGH	4.1.132.Final	4.2.15.Final, 4.1.135.Final	https://access.redhat.com/security/cve/CVE-2026-50010 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9 https://nvd.nist.gov/vuln/detail/CVE-2026-50010 https://www.cve.org/CVERecord?id=CVE-2026-50010
io.netty:netty-handler-proxy	CVE-2026-42578	LOW	4.1.132.Final	4.1.133.Final, 4.2.13.Final	https://access.redhat.com/security/cve/CVE-2026-42578 https://github.com/advisories/GHSA-84h7-rjj3-6jx4 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr https://nvd.nist.gov/vuln/detail/CVE-2026-42578 https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42578
io.netty:netty-resolver-dns	CVE-2026-45674	HIGH	4.1.132.Final	4.2.15.Final, 4.1.135.Final	https://access.redhat.com/security/cve/CVE-2026-45674 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc https://nvd.nist.gov/vuln/detail/CVE-2026-45674 https://www.cve.org/CVERecord?id=CVE-2026-45674
io.netty:netty-resolver-dns	CVE-2026-47691	HIGH	4.1.132.Final	4.2.15.Final, 4.1.135.Final	https://access.redhat.com/security/cve/CVE-2026-47691 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85 https://nvd.nist.gov/vuln/detail/CVE-2026-47691 https://www.cve.org/CVERecord?id=CVE-2026-47691
io.netty:netty-resolver-dns	CVE-2026-45673	MEDIUM	4.1.132.Final	4.2.15.Final, 4.1.135.Final	https://access.redhat.com/security/cve/CVE-2026-45673 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78 https://nvd.nist.gov/vuln/detail/CVE-2026-45673 https://www.cve.org/CVERecord?id=CVE-2026-45673
io.netty:netty-transport-native-epoll	CVE-2026-45536	MEDIUM	4.1.132.Final	4.2.15.Final, 4.1.135.Final	https://access.redhat.com/security/cve/CVE-2026-45536 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9 https://nvd.nist.gov/vuln/detail/CVE-2026-45536 https://www.cve.org/CVERecord?id=CVE-2026-45536
org.bouncycastle:bcprov-jdk18on	CVE-2026-0636	MEDIUM	1.80	1.84	https://access.redhat.com/security/cve/CVE-2026-0636 https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/commit/d20cdb8430e09224114fec0179a71859929fcbde https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%900636 https://nvd.nist.gov/vuln/detail/CVE-2026-0636 https://www.cve.org/CVERecord?id=CVE-2026-0636
org.springframework.boot:spring-boot	CVE-2026-40973	HIGH	3.5.13	4.0.6, 3.5.14	https://access.redhat.com/security/cve/CVE-2026-40973 https://github.com/spring-projects/spring-boot https://nvd.nist.gov/vuln/detail/CVE-2026-40973 https://spring.io/security/cve-2026-40973 https://www.cve.org/CVERecord?id=CVE-2026-40973
org.springframework.security:spring-security-core	CVE-2026-22751	MEDIUM	6.5.9	6.5.10, 7.0.5	https://access.redhat.com/security/cve/CVE-2026-22751 https://github.com/spring-projects/spring-security https://github.com/spring-projects/spring-security/commit/163772775036c4146815a5266874278c6f45f047 https://github.com/spring-projects/spring-security/commit/4187af38b251fc97fdf9949f7869618111e6e261 https://nvd.nist.gov/vuln/detail/CVE-2026-22751 https://spring.io/security/cve-2026-22751 https://www.cve.org/CVERecord?id=CVE-2026-22751
org.springframework.security:spring-security-core	CVE-2026-22746	LOW	6.5.9	6.5.10, 7.0.5	https://access.redhat.com/security/cve/CVE-2026-22746 https://github.com/spring-projects/spring-security https://nvd.nist.gov/vuln/detail/CVE-2026-22746 https://spring.io/security/cve-2026-22746 https://www.cve.org/CVERecord?id=CVE-2026-22746
org.springframework:spring-webflux	CVE-2026-22745	MEDIUM	6.2.17	7.0.7, 6.2.18	https://access.redhat.com/security/cve/CVE-2026-22745 https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L&version=3.1 https://nvd.nist.gov/vuln/detail/CVE-2026-22745 https://spring.io/security/cve-2026-22745 https://www.cve.org/CVERecord?id=CVE-2026-22745
org.springframework:spring-webflux	CVE-2026-22740	LOW	6.2.17	7.0.7, 6.2.18	https://access.redhat.com/security/cve/CVE-2026-22740 https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H&version=3.1 https://nvd.nist.gov/vuln/detail/CVE-2026-22740 https://spring.io/security/cve-2026-22740 https://www.cve.org/CVERecord?id=CVE-2026-22740
org.springframework:spring-webflux	CVE-2026-22741	LOW	6.2.17	7.0.7, 6.2.18	https://access.redhat.com/security/cve/CVE-2026-22741 https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L&version=3.1 https://nvd.nist.gov/vuln/detail/CVE-2026-22741 https://spring.io/security/cve-2026-22741 https://www.cve.org/CVERecord?id=CVE-2026-22741
No Misconfigurations found