sz-lk-map-proxy-app.tar (alt cpe:/o:alt:spcontainer:10.2.2) - Trivy Report - 2026-10-08 14:40:28.578782147 +0000 UTC m=+2.624079822
alt
No Vulnerabilities found
No Misconfigurations found
jar
Package
Vulnerability ID
Severity
Installed Version
Fixed Version
Links
com.fasterxml.jackson.core:jackson-core
CVE-2026-89407
HIGH
2.21.4
2.18.11, 2.21.7, 2.22.3
https://access.redhat.com/security/cve/CVE-2026-89407
https://github.com/FasterXML/jackson-core
https://github.com/FasterXML/jackson-core/commit/731e794f62623aa0d86ced52490166be903fbb1d
https://github.com/FasterXML/jackson-core/commit/e7acd64cc99bd346704423dc2bfea1ab0a08ddff
https://github.com/FasterXML/jackson-core/issues/1649
https://github.com/FasterXML/jackson-core/pull/1650
https://github.com/FasterXML/jackson-core/pull/1701
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-p6pp-m3f8-5c89
https://nvd.nist.gov/vuln/detail/CVE-2026-89407
https://www.cve.org/CVERecord?id=CVE-2026-89407
com.fasterxml.jackson.core:jackson-core
CVE-2026-89425
HIGH
2.21.4
2.21.7, 2.22.3, 2.18.11
https://access.redhat.com/security/cve/CVE-2026-89425
https://github.com/FasterXML/jackson-core
https://github.com/FasterXML/jackson-core/commit/211cf2c5d91abbec38067f37efc1363cd4e88ee3
https://github.com/FasterXML/jackson-core/pull/1698
https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-2.18.11
https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-3.2.3
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf
https://nvd.nist.gov/vuln/detail/CVE-2026-89425
https://www.cve.org/CVERecord?id=CVE-2026-89425
org.apache.httpcomponents.core5:httpcore5
CVE-2026-54399
HIGH
5.3.6
5.4.3, 5.5-beta2
http://www.openwall.com/lists/oss-security/2026/07/01/4
https://access.redhat.com/security/cve/CVE-2026-54399
https://github.com/apache/httpcomponents-core
https://github.com/apache/httpcomponents-core/commit/d96a00fec9b2e19f8005e35681df5f6cd6e21a9e
https://github.com/apache/httpcomponents-core/commit/fdc53a32fe0fccf098cc67e71cd125e447c759ed
https://lists.apache.org/thread/zmxh1pl2zohov5ntdh4lt85gfrlchgpy
https://nvd.nist.gov/vuln/detail/CVE-2026-54399
https://www.cve.org/CVERecord?id=CVE-2026-54399
org.apache.httpcomponents.core5:httpcore5-h2
CVE-2026-54428
HIGH
5.3.6
5.4.3, 5.5-beta2
http://www.openwall.com/lists/oss-security/2026/07/01/3
https://access.redhat.com/security/cve/CVE-2026-54428
https://github.com/apache/httpcomponents-core
https://github.com/apache/httpcomponents-core/commit/1ea1239bbbe3442a8382a87279c0a8119a7e358e
https://github.com/apache/httpcomponents-core/commit/cc30ee058a7b10cbf4ad3dd6270ab6d1f6a74c49
https://lists.apache.org/thread/5zjp8vczvxq19pw2rvhs21q446bhl0sd
https://nvd.nist.gov/vuln/detail/CVE-2026-54428
https://www.cve.org/CVERecord?id=CVE-2026-54428
org.apache.logging.log4j:log4j-api
CVE-2026-49844
MEDIUM
2.24.3
2.25.5, 2.26.1
https://access.redhat.com/security/cve/CVE-2026-49844
https://github.com/apache/logging-log4j2
https://github.com/apache/logging-log4j2/commit/19edb23e162d6c728a8c2221a240037d389ed300
https://github.com/apache/logging-log4j2/commit/feadf8eb0b4acb6ddfa4c0ab2bbc6d88b8e12d82
https://github.com/apache/logging-log4j2/pull/4163
https://github.com/apache/logging-log4j2/releases/tag/rel/2.25.5
https://github.com/apache/logging-log4j2/releases/tag/rel/2.26.1
https://logging.apache.org/cyclonedx/vdr.xml
https://logging.apache.org/log4j/2.x/manual/json-template-layout.html#event-template-resolver-message
https://logging.apache.org/security.html#CVE-2026-49844
https://nvd.nist.gov/vuln/detail/CVE-2026-49844
https://www.cve.org/CVERecord?id=CVE-2026-49844
org.springframework:spring-webmvc
CVE-2026-47884
CRITICAL
6.2.19
7.0.9
https://access.redhat.com/security/cve/CVE-2026-47884
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/692dbc9160de3b5de50ccedeee014716d0cedb7b
https://nvd.nist.gov/vuln/detail/CVE-2026-47884
https://spring.io/security/cve-2026-47884
https://www.cve.org/CVERecord?id=CVE-2026-47884
No Misconfigurations found