| at.yawk.lz4:lz4-java |
CVE-2026-106451 |
HIGH |
1.11.1 |
1.11.4 |
https://access.redhat.com/security/cve/CVE-2026-106451
https://advisory.echohq.com/cve/CVE-2026-106451
https://github.com/advisories/GHSA-mcr4-qmvw-px4g
https://github.com/yawkat/lz4-java
https://github.com/yawkat/lz4-java/commit/7a48b7f6b8099b9dab6541e4ac2ee0979dc55aa3
https://github.com/yawkat/lz4-java/releases/tag/v1.11.4
https://github.com/yawkat/lz4-java/security/advisories/GHSA-mcr4-qmvw-px4g
https://nvd.nist.gov/vuln/detail/CVE-2026-106451
https://www.cve.org/CVERecord?id=CVE-2026-106451
|
| at.yawk.lz4:lz4-java |
CVE-2026-106450 |
MEDIUM |
1.11.1 |
1.11.4 |
https://access.redhat.com/security/cve/CVE-2026-106450
https://advisory.echohq.com/cve/CVE-2026-106450
https://github.com/advisories/GHSA-gm45-99xc-r7wv
https://github.com/yawkat/lz4-java
https://github.com/yawkat/lz4-java/commit/2acc0ec1ead226145c62a817c18c8ed49233a283
https://github.com/yawkat/lz4-java/releases/tag/v1.11.4
https://github.com/yawkat/lz4-java/security/advisories/GHSA-gm45-99xc-r7wv
https://nvd.nist.gov/vuln/detail/CVE-2026-106450
https://www.cve.org/CVERecord?id=CVE-2026-106450
|
| at.yawk.lz4:lz4-java |
CVE-2026-106452 |
MEDIUM |
1.11.1 |
1.11.2 |
https://access.redhat.com/security/cve/CVE-2026-106452
https://advisory.echohq.com/cve/CVE-2026-106452
https://github.com/advisories/GHSA-4v53-57pg-c464
https://github.com/yawkat/lz4-java
https://github.com/yawkat/lz4-java/commit/bb83dd16163cdb71231af06b0a5651881148a634
https://github.com/yawkat/lz4-java/releases/tag/v1.11.2
https://github.com/yawkat/lz4-java/security/advisories/GHSA-4v53-57pg-c464
https://nvd.nist.gov/vuln/detail/CVE-2026-106452
https://www.cve.org/CVERecord?id=CVE-2026-106452
|
| at.yawk.lz4:lz4-java |
CVE-2026-106453 |
MEDIUM |
1.11.1 |
1.11.2 |
https://access.redhat.com/security/cve/CVE-2026-106453
https://advisory.echohq.com/cve/CVE-2026-106453
https://github.com/advisories/GHSA-6cx8-rjf8-pr8g
https://github.com/yawkat/lz4-java
https://github.com/yawkat/lz4-java/commit/6492ce5aca6bd03ff9e08ee18a2beb94c431371a
https://github.com/yawkat/lz4-java/releases/tag/v1.11.2
https://github.com/yawkat/lz4-java/security/advisories/GHSA-6cx8-rjf8-pr8g
https://nvd.nist.gov/vuln/detail/CVE-2026-106453
https://www.cve.org/CVERecord?id=CVE-2026-106453
|
| at.yawk.lz4:lz4-java |
CVE-2026-106449 |
LOW |
1.11.1 |
1.11.4 |
https://access.redhat.com/security/cve/CVE-2026-106449
https://advisory.echohq.com/cve/CVE-2026-106449
https://github.com/advisories/GHSA-343h-94h5-c4wr
https://github.com/yawkat/lz4-java
https://github.com/yawkat/lz4-java/commit/c8ebf97d504fb34434fda46fc761e8202570e0d8
https://github.com/yawkat/lz4-java/releases/tag/v1.11.4
https://github.com/yawkat/lz4-java/security/advisories/GHSA-343h-94h5-c4wr
https://nvd.nist.gov/vuln/detail/CVE-2026-106449
https://www.cve.org/CVERecord?id=CVE-2026-106449
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-68497 |
HIGH |
2.18.9 |
2.18.10, 2.21.6, 2.22.2 |
https://access.redhat.com/errata/RHSA-2026:80504
https://access.redhat.com/security/cve/CVE-2026-68497
https://advisory.echohq.com/cve/CVE-2026-68497
https://bugzilla.redhat.com/2531964
https://bugzilla.redhat.com/show_bug.cgi?id=2531964
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68497
https://errata.almalinux.org/9/ALSA-2026-80504.html
https://errata.rockylinux.org/RLSA-2026:80504
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd
https://github.com/FasterXML/jackson-databind/pull/6127
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7
https://linux.oracle.com/cve/CVE-2026-68497.html
https://linux.oracle.com/errata/ELSA-2026-80504.html
https://nvd.nist.gov/vuln/detail/CVE-2026-68497
https://www.cve.org/CVERecord?id=CVE-2026-68497
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-91776 |
HIGH |
2.18.9 |
2.18.11, 2.21.7, 2.22.3 |
https://access.redhat.com/security/cve/CVE-2026-91776
https://advisory.echohq.com/cve/CVE-2026-91776
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/2870d1d6dc1b7e1c07ee11dd5b04ab71cddbb577
https://github.com/FasterXML/jackson-databind/issues/6203
https://github.com/FasterXML/jackson-databind/pull/6203
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54
https://nvd.nist.gov/vuln/detail/CVE-2026-91776
https://www.cve.org/CVERecord?id=CVE-2026-91776
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-91777 |
HIGH |
2.18.9 |
2.21.7, 2.18.11, 2.22.3 |
https://access.redhat.com/errata/RHSA-2026:85231
https://access.redhat.com/security/cve/CVE-2026-91777
https://advisory.echohq.com/cve/CVE-2026-91777
https://bugzilla.redhat.com/2539085
https://bugzilla.redhat.com/show_bug.cgi?id=2539085
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91777
https://errata.almalinux.org/9/ALSA-2026-85231.html
https://errata.rockylinux.org/RLSA-2026:85231
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/37ad9b81712cbb9fb62c2d2c1813593252a24b67
https://github.com/FasterXML/jackson-databind/issues/6204
https://github.com/FasterXML/jackson-databind/pull/6204
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24
https://linux.oracle.com/cve/CVE-2026-91777.html
https://linux.oracle.com/errata/ELSA-2026-85231.html
https://nvd.nist.gov/vuln/detail/CVE-2026-91777
https://www.cve.org/CVERecord?id=CVE-2026-91777
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-19032 |
MEDIUM |
2.18.9 |
2.18.10, 2.21.6, 2.22.2 |
https://access.redhat.com/security/cve/CVE-2026-19032
https://advisory.echohq.com/cve/CVE-2026-19032
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551
https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166
https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d
https://github.com/FasterXML/jackson-databind/pull/6129
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf
https://nvd.nist.gov/vuln/detail/CVE-2026-19032
https://www.cve.org/CVERecord?id=CVE-2026-19032
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-83557 |
MEDIUM |
2.18.9 |
2.18.10, 2.21.6, 2.22.2 |
https://access.redhat.com/security/cve/CVE-2026-83557
https://advisory.echohq.com/cve/CVE-2026-83557
https://getsafety.com/vulnerabilities/SFTY-20260901-46895/CVE-2026-83557
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f
https://github.com/FasterXML/jackson-databind/issues/6156
https://github.com/FasterXML/jackson-databind/pull/6155
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j
https://nvd.nist.gov/vuln/detail/CVE-2026-83557
https://www.cve.org/CVERecord?id=CVE-2026-83557
|
| net.sf.jasperreports:jasperreports |
CVE-2025-10492 |
HIGH |
6.21.5 |
7.0.4 |
https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6
https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6/
https://community.jaspersoft.com/forums/topic/69926-cve-2025-10492-%E2%80%93-no-fix-available-after-jasperreports-upgrade-community-edition
https://github.com/Jaspersoft/jasperreports
https://github.com/Jaspersoft/jasperreports/commit/3541a3e2b1ad8b78388ac505091da75cb652a647
https://github.com/Jaspersoft/jasperreports/commit/827c2f27c4ca8e2c5b3142d76df9c1c8575f3569
https://github.com/Jaspersoft/jasperreports/issues/542
https://nvd.nist.gov/vuln/detail/CVE-2025-10492
|
| net.sf.jasperreports:jasperreports |
CVE-2026-6009 |
HIGH |
6.21.5 |
7.0.7 |
https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11
https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11/
https://github.com/Jaspersoft/jasperreports
https://nvd.nist.gov/vuln/detail/CVE-2026-6009
|
| org.bouncycastle:bcprov-jdk18on |
CVE-2026-8763 |
CRITICAL |
1.84 |
1.85 |
https://access.redhat.com/security/cve/CVE-2026-8763
https://advisory.echohq.com/cve/CVE-2026-8763
https://github.com/advisories/GHSA-9pwp-9qqc-pr26
https://github.com/bcgit/bc-java
https://github.com/bcgit/bc-java/commit/2c28b253a44681fbbc562561eab6ad383d2ae558
https://github.com/bcgit/bc-java/releases/tag/r1rv85v2
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%908763
https://github.com/bcgit/bc-java/wiki/CVE-2026-8763
https://nvd.nist.gov/vuln/detail/CVE-2026-8763
https://www.cve.org/CVERecord?id=CVE-2026-8763
|
| org.bouncycastle:bcprov-jdk18on |
CVE-2026-13506 |
HIGH |
1.84 |
1.85 |
https://access.redhat.com/security/cve/CVE-2026-13506
https://advisory.echohq.com/cve/CVE-2026-13506
https://github.com/advisories/GHSA-qp49-qgx5-5m26
https://github.com/bcgit/bc-java
https://github.com/bcgit/bc-java/commit/77454da9b3dcaaa2991412d1c3c1a6e1a338ff84
https://github.com/bcgit/bc-java/wiki/CVE-2026-13506
https://nvd.nist.gov/vuln/detail/CVE-2026-13506
https://www.cve.org/CVERecord?id=CVE-2026-13506
|
| No Misconfigurations found |
|---|
| No Vulnerabilities found |
|---|
| Dockerfile Security Check |
DS026 |
No HEALTHCHECK defined |
LOW |
Add HEALTHCHECK instruction in your Dockerfile
https://avd.aquasec.com/misconfig/ds026
|