sz-lk-purchase-plan-app.tar (alt cpe:/o:alt:spcontainer:10.2.2) - Trivy Report - 2026-09-25 14:14:02.176096832 +0000 UTC m=+7.039337523

alt
No Vulnerabilities found
No Misconfigurations found
jar
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
io.netty:netty-codec-http	CVE-2026-59903	MEDIUM	4.1.136.Final	4.2.17.Final, 4.1.137.Final	https://access.redhat.com/security/cve/CVE-2026-59903 https://github.com/netty/netty https://github.com/netty/netty/pull/17213 https://github.com/netty/netty/pull/17217 https://github.com/netty/netty/releases/tag/netty-4.1.137.Final https://github.com/netty/netty/releases/tag/netty-4.2.17.Final https://github.com/netty/netty/security/advisories/GHSA-8c42-7qj2-3j46 https://nvd.nist.gov/vuln/detail/CVE-2026-59903 https://www.cve.org/CVERecord?id=CVE-2026-59903
io.netty:netty-handler	CVE-2026-75595	CRITICAL	4.1.136.Final	4.2.17.Final, 4.1.137.Final	https://access.redhat.com/security/cve/CVE-2026-75595 https://github.com/netty/netty https://github.com/netty/netty/commit/1b5abc6443b63726c72cdd285af2feb7ddbb8ff7 https://github.com/netty/netty/commit/9e0519239108a69b7e9bbc5e9182ee139a0d7961 https://github.com/netty/netty/pull/17213 https://github.com/netty/netty/pull/17217 https://github.com/netty/netty/releases/tag/netty-4.1.137.Final https://github.com/netty/netty/releases/tag/netty-4.2.17.Final https://github.com/netty/netty/security/advisories/GHSA-c4c3-7fpv-j4q5 https://nvd.nist.gov/vuln/detail/CVE-2026-75595 https://www.cve.org/CVERecord?id=CVE-2026-75595
io.netty:netty-handler	CVE-2026-75596	MEDIUM	4.1.136.Final	4.2.17.Final, 4.1.137.Final	https://github.com/netty/netty https://github.com/netty/netty/commit/1b5abc6443b63726c72cdd285af2feb7ddbb8ff7 https://github.com/netty/netty/commit/9e0519239108a69b7e9bbc5e9182ee139a0d7961 https://github.com/netty/netty/pull/17213 https://github.com/netty/netty/pull/17217 https://github.com/netty/netty/releases/tag/netty-4.1.137.Final https://github.com/netty/netty/releases/tag/netty-4.2.17.Final https://github.com/netty/netty/security/advisories/GHSA-fccg-mwvh-qqg4 https://nvd.nist.gov/vuln/detail/CVE-2026-75596
net.sf.jasperreports:jasperreports	CVE-2025-10492	HIGH	6.21.5	7.0.4	https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6 https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6/ https://community.jaspersoft.com/forums/topic/69926-cve-2025-10492-%E2%80%93-no-fix-available-after-jasperreports-upgrade-community-edition https://github.com/Jaspersoft/jasperreports https://github.com/Jaspersoft/jasperreports/commit/3541a3e2b1ad8b78388ac505091da75cb652a647 https://github.com/Jaspersoft/jasperreports/commit/827c2f27c4ca8e2c5b3142d76df9c1c8575f3569 https://github.com/Jaspersoft/jasperreports/issues/542 https://nvd.nist.gov/vuln/detail/CVE-2025-10492
net.sf.jasperreports:jasperreports	CVE-2026-6009	HIGH	6.21.5	7.0.7	https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11 https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11/ https://github.com/Jaspersoft/jasperreports https://nvd.nist.gov/vuln/detail/CVE-2026-6009
org.apache.httpcomponents.client5:httpclient5	CVE-2026-64607	MEDIUM	5.5.2	5.6.3	http://www.openwall.com/lists/oss-security/2026/08/13/5 https://access.redhat.com/security/cve/CVE-2026-64607 https://github.com/apache/httpcomponents-client https://github.com/apache/httpcomponents-client/commit/55733f4121f7ba26ddf04fe12739d9c15962cb94 https://github.com/apache/httpcomponents-client/commit/ebac9512f555c4a355cad3f59ef2db69b597cc97 https://github.com/apache/httpcomponents-client/releases/tag/rel/v5.6.3 https://github.com/apache/httpcomponents-client/releases/tag/rel/v5.7-alpha1 https://lists.apache.org/thread/qqfzo3fqcdk4l5496vz95ppvl4ty511q https://nvd.nist.gov/vuln/detail/CVE-2026-64607 https://www.cve.org/CVERecord?id=CVE-2026-64607
org.apache.httpcomponents.core5:httpcore5	CVE-2026-54399	HIGH	5.3.6	5.4.3, 5.5-beta2	http://www.openwall.com/lists/oss-security/2026/07/01/4 https://access.redhat.com/security/cve/CVE-2026-54399 https://github.com/apache/httpcomponents-core https://github.com/apache/httpcomponents-core/commit/d96a00fec9b2e19f8005e35681df5f6cd6e21a9e https://github.com/apache/httpcomponents-core/commit/fdc53a32fe0fccf098cc67e71cd125e447c759ed https://lists.apache.org/thread/zmxh1pl2zohov5ntdh4lt85gfrlchgpy https://nvd.nist.gov/vuln/detail/CVE-2026-54399 https://www.cve.org/CVERecord?id=CVE-2026-54399
org.apache.httpcomponents.core5:httpcore5-h2	CVE-2026-54428	HIGH	5.3.6	5.4.3, 5.5-beta2	http://www.openwall.com/lists/oss-security/2026/07/01/3 https://access.redhat.com/security/cve/CVE-2026-54428 https://github.com/apache/httpcomponents-core https://github.com/apache/httpcomponents-core/commit/1ea1239bbbe3442a8382a87279c0a8119a7e358e https://github.com/apache/httpcomponents-core/commit/cc30ee058a7b10cbf4ad3dd6270ab6d1f6a74c49 https://lists.apache.org/thread/5zjp8vczvxq19pw2rvhs21q446bhl0sd https://nvd.nist.gov/vuln/detail/CVE-2026-54428 https://www.cve.org/CVERecord?id=CVE-2026-54428
org.apache.logging.log4j:log4j-api	CVE-2026-49844	MEDIUM	2.24.3	2.25.5, 2.26.1	https://access.redhat.com/security/cve/CVE-2026-49844 https://github.com/apache/logging-log4j2 https://github.com/apache/logging-log4j2/commit/19edb23e162d6c728a8c2221a240037d389ed300 https://github.com/apache/logging-log4j2/commit/feadf8eb0b4acb6ddfa4c0ab2bbc6d88b8e12d82 https://github.com/apache/logging-log4j2/pull/4163 https://github.com/apache/logging-log4j2/releases/tag/rel/2.25.5 https://github.com/apache/logging-log4j2/releases/tag/rel/2.26.1 https://logging.apache.org/cyclonedx/vdr.xml https://logging.apache.org/log4j/2.x/manual/json-template-layout.html#event-template-resolver-message https://logging.apache.org/security.html#CVE-2026-49844 https://nvd.nist.gov/vuln/detail/CVE-2026-49844 https://www.cve.org/CVERecord?id=CVE-2026-49844
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-65182	CRITICAL	10.1.55	11.0.25, 10.1.58, 9.0.121	http://www.openwall.com/lists/oss-security/2026/08/26/1 https://access.redhat.com/security/cve/CVE-2026-65182 https://github.com/apache/tomcat/commit/8bafd79a3b54684e80e9cb1bafd4746aede7d3f5 https://github.com/apache/tomcat/commit/b2c56ec8f20c66773a1a813034ffcdb60841f1cf https://github.com/apache/tomcat/commit/b79752d2a8578d94743e2a95c50af297f780c0df https://lists.apache.org/thread/joosxvzc9b49ttj8lj0jw9mqt0ml767m https://nvd.nist.gov/vuln/detail/CVE-2026-65182 https://tomcat.apache.org/security-10.html https://tomcat.apache.org/security-11.html https://tomcat.apache.org/security-9.html https://www.cve.org/CVERecord?id=CVE-2026-65182
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-65905	CRITICAL	10.1.55	11.0.25, 10.1.58, 9.0.121	http://www.openwall.com/lists/oss-security/2026/08/26/4 https://access.redhat.com/security/cve/CVE-2026-65905 https://github.com/apache/tomcat https://lists.apache.org/thread/9v114xlpgbzrrbzz5vf9f6r2q4wnxwwj https://nvd.nist.gov/vuln/detail/CVE-2026-65905 https://www.cve.org/CVERecord?id=CVE-2026-65905
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-68525	CRITICAL	10.1.55	11.0.25, 10.1.58, 9.0.121	http://www.openwall.com/lists/oss-security/2026/08/26/7 https://access.redhat.com/security/cve/CVE-2026-68525 https://github.com/apache/tomcat https://github.com/apache/tomcat/commit/10d048e16034ddf12055e0cede0da05b15c823b8 https://github.com/apache/tomcat/commit/32f0c38526b4e655ff0c17cd97afedefc624fe43 https://github.com/apache/tomcat/commit/58123aa468a20e2a079b7e0c68a4009e2475c098 https://lists.apache.org/thread/x1y2lfsgzxwzc456f8954vbvgn03zhd7 https://nvd.nist.gov/vuln/detail/CVE-2026-68525 https://tomcat.apache.org/security-10.html https://tomcat.apache.org/security-11.html https://tomcat.apache.org/security-9.html https://www.cve.org/CVERecord?id=CVE-2026-68525
org.bouncycastle:bcprov-jdk18on	CVE-2026-8763	CRITICAL	1.84	1.85	https://access.redhat.com/security/cve/CVE-2026-8763 https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/commit/2c28b253a44681fbbc562561eab6ad383d2ae558 https://github.com/bcgit/bc-java/releases/tag/r1rv85v2 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%908763 https://github.com/bcgit/bc-java/wiki/CVE-2026-8763 https://nvd.nist.gov/vuln/detail/CVE-2026-8763 https://www.cve.org/CVERecord?id=CVE-2026-8763
org.bouncycastle:bcprov-jdk18on	CVE-2026-13506	HIGH	1.84	1.85	https://access.redhat.com/security/cve/CVE-2026-13506 https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/commit/77454da9b3dcaaa2991412d1c3c1a6e1a338ff84 https://github.com/bcgit/bc-java/wiki/CVE-2026-13506 https://nvd.nist.gov/vuln/detail/CVE-2026-13506 https://www.cve.org/CVERecord?id=CVE-2026-13506
No Misconfigurations found