sz-lk-purchase-plan-app.tar (alt cpe:/o:alt:spcontainer:10.2.2) - Trivy Report - 2026-08-25 14:10:07.656540355 +0000 UTC m=+4.221565548

alt
No Vulnerabilities found
No Misconfigurations found
jar
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
io.netty:netty-codec-http	CVE-2026-59903	MEDIUM	4.1.136.Final	4.2.17.Final, 4.1.137.Final	https://github.com/netty/netty https://github.com/netty/netty/pull/17213 https://github.com/netty/netty/pull/17217 https://github.com/netty/netty/releases/tag/netty-4.1.137.Final https://github.com/netty/netty/releases/tag/netty-4.2.17.Final https://github.com/netty/netty/security/advisories/GHSA-8c42-7qj2-3j46
net.sf.jasperreports:jasperreports	CVE-2025-10492	HIGH	6.21.5	7.0.4	https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6 https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6/ https://community.jaspersoft.com/forums/topic/69926-cve-2025-10492-%E2%80%93-no-fix-available-after-jasperreports-upgrade-community-edition https://github.com/Jaspersoft/jasperreports https://github.com/Jaspersoft/jasperreports/commit/3541a3e2b1ad8b78388ac505091da75cb652a647 https://github.com/Jaspersoft/jasperreports/commit/827c2f27c4ca8e2c5b3142d76df9c1c8575f3569 https://github.com/Jaspersoft/jasperreports/issues/542 https://nvd.nist.gov/vuln/detail/CVE-2025-10492
net.sf.jasperreports:jasperreports	CVE-2026-6009	HIGH	6.21.5	7.0.7	https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11 https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11/ https://github.com/Jaspersoft/jasperreports https://nvd.nist.gov/vuln/detail/CVE-2026-6009
org.apache.httpcomponents.client5:httpclient5	CVE-2026-64607	MEDIUM	5.5.2	5.6.3	http://www.openwall.com/lists/oss-security/2026/08/13/5 https://github.com/apache/httpcomponents-client https://github.com/apache/httpcomponents-client/commit/55733f4121f7ba26ddf04fe12739d9c15962cb94 https://github.com/apache/httpcomponents-client/commit/ebac9512f555c4a355cad3f59ef2db69b597cc97 https://github.com/apache/httpcomponents-client/releases/tag/rel/v5.6.3 https://github.com/apache/httpcomponents-client/releases/tag/rel/v5.7-alpha1 https://lists.apache.org/thread/qqfzo3fqcdk4l5496vz95ppvl4ty511q https://nvd.nist.gov/vuln/detail/CVE-2026-64607
org.apache.httpcomponents.core5:httpcore5	CVE-2026-54399	HIGH	5.3.6	5.4.3, 5.5-beta2	http://www.openwall.com/lists/oss-security/2026/07/01/4 https://access.redhat.com/security/cve/CVE-2026-54399 https://github.com/apache/httpcomponents-core https://github.com/apache/httpcomponents-core/commit/d96a00fec9b2e19f8005e35681df5f6cd6e21a9e https://github.com/apache/httpcomponents-core/commit/fdc53a32fe0fccf098cc67e71cd125e447c759ed https://lists.apache.org/thread/zmxh1pl2zohov5ntdh4lt85gfrlchgpy https://nvd.nist.gov/vuln/detail/CVE-2026-54399 https://www.cve.org/CVERecord?id=CVE-2026-54399
org.apache.httpcomponents.core5:httpcore5-h2	CVE-2026-54428	HIGH	5.3.6	5.4.3, 5.5-beta2	http://www.openwall.com/lists/oss-security/2026/07/01/3 https://access.redhat.com/security/cve/CVE-2026-54428 https://github.com/apache/httpcomponents-core https://github.com/apache/httpcomponents-core/commit/1ea1239bbbe3442a8382a87279c0a8119a7e358e https://github.com/apache/httpcomponents-core/commit/cc30ee058a7b10cbf4ad3dd6270ab6d1f6a74c49 https://lists.apache.org/thread/5zjp8vczvxq19pw2rvhs21q446bhl0sd https://nvd.nist.gov/vuln/detail/CVE-2026-54428 https://www.cve.org/CVERecord?id=CVE-2026-54428
org.apache.logging.log4j:log4j-api	CVE-2026-49844	MEDIUM	2.24.3	2.25.5, 2.26.1	https://access.redhat.com/security/cve/CVE-2026-49844 https://github.com/apache/logging-log4j2 https://github.com/apache/logging-log4j2/commit/19edb23e162d6c728a8c2221a240037d389ed300 https://github.com/apache/logging-log4j2/commit/feadf8eb0b4acb6ddfa4c0ab2bbc6d88b8e12d82 https://github.com/apache/logging-log4j2/pull/4163 https://github.com/apache/logging-log4j2/releases/tag/rel/2.25.5 https://github.com/apache/logging-log4j2/releases/tag/rel/2.26.1 https://logging.apache.org/cyclonedx/vdr.xml https://logging.apache.org/log4j/2.x/manual/json-template-layout.html#event-template-resolver-message https://logging.apache.org/security.html#CVE-2026-49844 https://nvd.nist.gov/vuln/detail/CVE-2026-49844 https://www.cve.org/CVERecord?id=CVE-2026-49844
No Misconfigurations found