sz-portal-main-stat-app.tar (alt cpe:/o:alt:spcontainer:10.2.2) - Trivy Report - 2026-06-15 12:04:32.838183809 +0000 UTC m=+87.858273741

alt
No Vulnerabilities found
No Misconfigurations found
jar
Package Vulnerability ID Severity Installed Version Fixed Version Links
ch.qos.logback:logback-core CVE-2026-1225 LOW 1.5.20 1.5.25 https://access.redhat.com/security/cve/CVE-2026-1225 https://github.com/qos-ch/logback https://github.com/qos-ch/logback/commit/1f97ae1844b1be8486e4e9cade98d7123d3eded5 https://github.com/qos-ch/logback/issues/997 https://logback.qos.ch/news.html#1.5.25 https://nvd.nist.gov/vuln/detail/CVE-2026-1225 https://www.cve.org/CVERecord?id=CVE-2026-1225
com.fasterxml.jackson.core:jackson-core GHSA-72hv-8253-57qq MEDIUM 2.19.2 2.21.1, 2.18.6 https://github.com/FasterXML/jackson-core https://github.com/FasterXML/jackson-core/commit/b0c428e6f993e1b5ece5c1c3cb2523e887cd52cf https://github.com/FasterXML/jackson-core/pull/1555 https://github.com/FasterXML/jackson-core/security/advisories/GHSA-72hv-8253-57qq
io.netty:netty-codec CVE-2026-42583 HIGH 4.1.128.Final 4.1.133.Final https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6 https://nvd.nist.gov/vuln/detail/CVE-2026-42583
io.netty:netty-codec-dns CVE-2026-42579 HIGH 4.1.128.Final 4.2.13.Final, 4.1.133.Final https://access.redhat.com/security/cve/CVE-2026-42579 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm https://nvd.nist.gov/vuln/detail/CVE-2026-42579 https://tools.ietf.org/html/rfc1035#section-2.3.4 https://tools.ietf.org/html/rfc1035#section-4.1.4 https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42579
io.netty:netty-codec-http CVE-2026-33870 HIGH 4.1.128.Final 4.1.132.Final, 4.2.10.Final https://access.redhat.com/security/cve/CVE-2026-33870 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8 https://nvd.nist.gov/vuln/detail/CVE-2026-33870 https://w4ke.info/2025/06/18/funky-chunks.html https://w4ke.info/2025/10/29/funky-chunks-2.html https://www.cve.org/CVERecord?id=CVE-2026-33870 https://www.rfc-editor.org/rfc/rfc9110
io.netty:netty-codec-http CVE-2026-42584 HIGH 4.1.128.Final 4.2.13.Final, 4.1.133.Final https://access.redhat.com/security/cve/CVE-2026-42584 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3 https://nvd.nist.gov/vuln/detail/CVE-2026-42584 https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42584
io.netty:netty-codec-http CVE-2026-42587 HIGH 4.1.128.Final 4.2.13.Final, 4.1.133.Final https://access.redhat.com/security/cve/CVE-2026-42587 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv https://nvd.nist.gov/vuln/detail/CVE-2026-42587 https://www.cve.org/CVERecord?id=CVE-2026-42587
io.netty:netty-codec-http CVE-2025-67735 MEDIUM 4.1.128.Final 4.2.8.Final, 4.1.129.Final https://access.redhat.com/security/cve/CVE-2025-67735 https://github.com/netty/netty https://github.com/netty/netty/commit/77e81f1e5944d98b3acf887d3aa443b252752e94 https://github.com/netty/netty/security/advisories/GHSA-84h7-rjj3-6jx4 https://nvd.nist.gov/vuln/detail/CVE-2025-67735 https://www.cve.org/CVERecord?id=CVE-2025-67735
io.netty:netty-codec-http CVE-2026-41417 MEDIUM 4.1.128.Final 4.1.133.Final, 4.2.13.Final https://access.redhat.com/security/cve/CVE-2026-41417 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv https://nvd.nist.gov/vuln/detail/CVE-2026-41417 https://www.cve.org/CVERecord?id=CVE-2026-41417
io.netty:netty-codec-http CVE-2026-42580 MEDIUM 4.1.128.Final 4.2.13.Final, 4.1.133.Final https://access.redhat.com/security/cve/CVE-2026-42580 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723 https://nvd.nist.gov/vuln/detail/CVE-2026-42580 https://www.cve.org/CVERecord?id=CVE-2026-42580
io.netty:netty-codec-http CVE-2026-42581 MEDIUM 4.1.128.Final 4.2.13.Final, 4.1.133.Final https://access.redhat.com/security/cve/CVE-2026-42581 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9 https://nvd.nist.gov/vuln/detail/CVE-2026-42581 https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42581
io.netty:netty-codec-http CVE-2026-42585 MEDIUM 4.1.128.Final 4.2.13.Final, 4.1.133.Final https://access.redhat.com/security/cve/CVE-2026-42585 https://datatracker.ietf.org/doc/html/rfc9112#name-message-body-length https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv https://nvd.nist.gov/vuln/detail/CVE-2026-42585 https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42585
io.netty:netty-codec-http2 CVE-2026-33871 HIGH 4.1.128.Final 4.1.132.Final, 4.2.11.Final https://access.redhat.com/security/cve/CVE-2026-33871 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv https://nvd.nist.gov/vuln/detail/CVE-2026-33871 https://www.cve.org/CVERecord?id=CVE-2026-33871
io.netty:netty-codec-http2 CVE-2026-42587 HIGH 4.1.128.Final 4.2.13.Final, 4.1.133.Final https://access.redhat.com/security/cve/CVE-2026-42587 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv https://nvd.nist.gov/vuln/detail/CVE-2026-42587 https://www.cve.org/CVERecord?id=CVE-2026-42587
io.netty:netty-codec-http2 CVE-2026-47244 MEDIUM 4.1.128.Final 4.2.15.Final, 4.1.135.Final https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q https://nvd.nist.gov/vuln/detail/CVE-2026-47244
io.netty:netty-codec-http2 CVE-2026-48043 MEDIUM 4.1.128.Final 4.1.135.Final, 4.2.15.Final https://access.redhat.com/security/cve/CVE-2026-48043 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j https://nvd.nist.gov/vuln/detail/CVE-2026-48043 https://www.cve.org/CVERecord?id=CVE-2026-48043
io.netty:netty-handler CVE-2026-44249 HIGH 4.1.128.Final 4.2.15.Final, 4.1.135.Final https://access.redhat.com/security/cve/CVE-2026-44249 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86 https://nvd.nist.gov/vuln/detail/CVE-2026-44249 https://www.cve.org/CVERecord?id=CVE-2026-44249
io.netty:netty-handler CVE-2026-45416 HIGH 4.1.128.Final 4.2.15.Final, 4.1.135.Final https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh https://nvd.nist.gov/vuln/detail/CVE-2026-45416
io.netty:netty-handler-proxy CVE-2026-42578 LOW 4.1.128.Final 4.1.133.Final, 4.2.13.Final https://access.redhat.com/security/cve/CVE-2026-42578 https://github.com/advisories/GHSA-84h7-rjj3-6jx4 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr https://nvd.nist.gov/vuln/detail/CVE-2026-42578 https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42578
io.netty:netty-resolver-dns CVE-2026-45674 HIGH 4.1.128.Final 4.2.15.Final, 4.1.135.Final https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc https://nvd.nist.gov/vuln/detail/CVE-2026-45674
io.netty:netty-resolver-dns CVE-2026-47691 HIGH 4.1.128.Final 4.2.15.Final, 4.1.135.Final https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85 https://nvd.nist.gov/vuln/detail/CVE-2026-47691
io.netty:netty-resolver-dns CVE-2026-45673 MEDIUM 4.1.128.Final 4.2.15.Final, 4.1.135.Final https://access.redhat.com/security/cve/CVE-2026-45673 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-xmv7-r254-6q78 https://nvd.nist.gov/vuln/detail/CVE-2026-45673 https://www.cve.org/CVERecord?id=CVE-2026-45673
io.netty:netty-transport-native-epoll CVE-2026-45536 MEDIUM 4.1.128.Final 4.2.15.Final, 4.1.135.Final https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9 https://nvd.nist.gov/vuln/detail/CVE-2026-45536
org.apache.kafka:kafka-clients CVE-2026-35554 HIGH 3.9.1 3.9.2, 4.0.2, 4.1.2 http://www.openwall.com/lists/oss-security/2026/04/07/6 https://access.redhat.com/security/cve/CVE-2026-35554 https://github.com/apache/kafka https://github.com/apache/kafka/commit/1df2ac5b2ba4d1b5ed54b895ff6fb9539303ccb5 https://github.com/apache/kafka/pull/21065 https://github.com/apache/kafka/pull/21285 https://github.com/apache/kafka/pull/21286 https://github.com/apache/kafka/pull/21287 https://github.com/apache/kafka/pull/21288 https://issues.apache.org/jira/browse/KAFKA-19012 https://lists.apache.org/thread/f07x7j8ovyqhjd1to25jsnqbm6wj01d6 https://nvd.nist.gov/vuln/detail/CVE-2026-35554 https://www.cve.org/CVERecord?id=CVE-2026-35554
org.apache.kafka:kafka-clients CVE-2026-33558 MEDIUM 3.9.1 3.9.2, 4.0.1 http://www.openwall.com/lists/oss-security/2026/04/17/3 https://github.com/apache/kafka https://kafka.apache.org/cve-list https://lists.apache.org/thread/pz5g4ky3h0k91tfd14p0dzqjp80960kl https://nvd.nist.gov/vuln/detail/CVE-2026-33558
org.lz4:lz4-java CVE-2025-12183 HIGH 1.8.0 1.8.1 http://www.openwall.com/lists/oss-security/2025/12/01/5 https://access.redhat.com/security/cve/CVE-2025-12183 https://github.com/yawkat/lz4-java https://github.com/yawkat/lz4-java/releases/tag/v1.8.1 https://nvd.nist.gov/vuln/detail/CVE-2025-12183 https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-12183 https://www.cve.org/CVERecord?id=CVE-2025-12183 https://www.sonatype.com/security-advisories/cve-2025-12183
org.lz4:lz4-java CVE-2025-66566 HIGH 1.8.0 https://access.redhat.com/errata/RHSA-2026:0752 https://access.redhat.com/security/cve/CVE-2025-66566 https://bugzilla.redhat.com/2419500 https://errata.almalinux.org/9/ALSA-2026-0752.html https://github.com/yawkat/lz4-java https://github.com/yawkat/lz4-java/commit/33d180cb70c4d93c80fb0dc3ab3002f457e93840 https://github.com/yawkat/lz4-java/security/advisories/GHSA-cmp6-m4wj-q63q https://linux.oracle.com/cve/CVE-2025-66566.html https://linux.oracle.com/errata/ELSA-2026-0752.html https://nvd.nist.gov/vuln/detail/CVE-2025-66566 https://www.cve.org/CVERecord?id=CVE-2025-66566
org.postgresql:postgresql CVE-2026-42198 HIGH 42.7.8 42.7.11 https://access.redhat.com/errata/RHSA-2026:25030 https://access.redhat.com/security/cve/CVE-2026-42198 https://bugzilla.redhat.com/2463857 https://bugzilla.redhat.com/show_bug.cgi?id=2463857 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42198 https://errata.almalinux.org/8/ALSA-2026-25030.html https://errata.rockylinux.org/RLSA-2026:25030 https://github.com/pgjdbc/pgjdbc https://github.com/pgjdbc/pgjdbc/releases/tag/REL42.7.11 https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-98qh-xjc8-98pq https://linux.oracle.com/cve/CVE-2026-42198.html https://linux.oracle.com/errata/ELSA-2026-25030.html https://nvd.nist.gov/vuln/detail/CVE-2026-42198 https://www.cve.org/CVERecord?id=CVE-2026-42198
org.springframework.boot:spring-boot CVE-2026-40973 HIGH 3.5.7 4.0.6, 3.5.14 https://access.redhat.com/security/cve/CVE-2026-40973 https://github.com/spring-projects/spring-boot https://nvd.nist.gov/vuln/detail/CVE-2026-40973 https://spring.io/security/cve-2026-40973 https://www.cve.org/CVERecord?id=CVE-2026-40973
org.springframework.kafka:spring-kafka CVE-2026-41731 HIGH 3.3.10 4.0.6, 3.3.16 https://github.com/spring-projects/spring-kafka https://nvd.nist.gov/vuln/detail/CVE-2026-41731 https://spring.io/security/cve-2026-41731
org.springframework.kafka:spring-kafka CVE-2026-41726 MEDIUM 3.3.10 4.0.6, 3.3.16 https://access.redhat.com/security/cve/CVE-2026-41726 https://github.com/spring-projects/spring-kafka https://github.com/spring-projects/spring-kafka/commit/ca2337ba789c5778a10197bda17a62915247ff6c https://github.com/spring-projects/spring-kafka/issues/4489 https://nvd.nist.gov/vuln/detail/CVE-2026-41726 https://spring.io/security/cve-2026-41726 https://www.cve.org/CVERecord?id=CVE-2026-41726
org.springframework:spring-webflux CVE-2026-22737 MEDIUM 6.2.12 7.0.6, 6.2.17 https://access.redhat.com/security/cve/CVE-2026-22737 https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln/detail/CVE-2026-22737 https://spring.io/security/cve-2026-22737 https://www.cve.org/CVERecord?id=CVE-2026-22737
org.springframework:spring-webflux CVE-2026-22745 MEDIUM 6.2.12 7.0.7, 6.2.18 https://access.redhat.com/security/cve/CVE-2026-22745 https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L&version=3.1 https://nvd.nist.gov/vuln/detail/CVE-2026-22745 https://spring.io/security/cve-2026-22745 https://www.cve.org/CVERecord?id=CVE-2026-22745
org.springframework:spring-webflux CVE-2026-22735 LOW 6.2.12 7.0.6, 6.2.17 https://access.redhat.com/security/cve/CVE-2026-22735 https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln/detail/CVE-2026-22735 https://spring.io/security/cve-2026-22735 https://www.cve.org/CVERecord?id=CVE-2026-22735
org.springframework:spring-webflux CVE-2026-22740 LOW 6.2.12 7.0.7, 6.2.18 https://access.redhat.com/security/cve/CVE-2026-22740 https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H&version=3.1 https://nvd.nist.gov/vuln/detail/CVE-2026-22740 https://spring.io/security/cve-2026-22740 https://www.cve.org/CVERecord?id=CVE-2026-22740
org.springframework:spring-webflux CVE-2026-22741 LOW 6.2.12 7.0.7, 6.2.18 https://access.redhat.com/security/cve/CVE-2026-22741 https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L&version=3.1 https://nvd.nist.gov/vuln/detail/CVE-2026-22741 https://spring.io/security/cve-2026-22741 https://www.cve.org/CVERecord?id=CVE-2026-22741
No Misconfigurations found