CGA-2XRP-G3W5-RMP3: akhq
Unknown
Published Date unknownLast modified Date unknown
Status not reported
The data service did not report a status for this record. Only the available sections are shown.Vulnerability summary
CGA-2XRP-G3W5-RMP3 is a vulnerability in akhq with no CVSS score yet.
Priority
Insufficient evidence
No CVSS vector published; no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?CVSS score
Not scored
010
No CVSS score recordedEPSS scoreNot scoredRisk metrics not yet published.
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 0 · Related 1Timeline
No timeline events recorded.
Description
No description has been published for this record.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Version check
Known conditions: not stated in public data.
Chainguard200 products
- akhqAll versions (No fix recorded)
- apache-activemq-artemisAll versions (No fix recorded)
- apache-activemq-artemis-compatAll versions (No fix recorded)
- apache-nifiAll versions (No fix recorded)
- apache-nifi-compatAll versions (No fix recorded)
- apache-nifi-toolkitAll versions (No fix recorded)
- apache-pulsarAll versions (No fix recorded)
- apache-pulsar-compatAll versions (No fix recorded)
- apicurio-registryAll versions (No fix recorded)
- apicurio-registry-nginx-configAll versions (No fix recorded)
- apicurio-registry-uiAll versions (No fix recorded)
- cassandra-5.0All versions (No fix recorded)
- cassandra-5.0-compatAll versions (No fix recorded)
- cassandra-5.0-entrypoint-compatAll versions (No fix recorded)
- cassandra-5.0-iamguarded-compatAll versions (No fix recorded)
- cassandra-fips-5.0All versions (No fix recorded)
- cassandra-fips-5.0-compatAll versions (No fix recorded)
- cassandra-reaperAll versions (No fix recorded)
- celeborn-0.6< 0.6.3-r7
- cqlsh-5.0All versions (No fix recorded)
- cqlsh-fips-5.0All versions (No fix recorded)
- docker-seleniumAll versions (No fix recorded)
- docker-selenium-baseAll versions (No fix recorded)
- docker-selenium-compatAll versions (No fix recorded)
- docker-selenium-distributorAll versions (No fix recorded)
- docker-selenium-event-busAll versions (No fix recorded)
- docker-selenium-hubAll versions (No fix recorded)
- docker-selenium-node-baseAll versions (No fix recorded)
- docker-selenium-node-chromiumAll versions (No fix recorded)
- docker-selenium-node-dockerAll versions (No fix recorded)
- docker-selenium-node-firefoxAll versions (No fix recorded)
- docker-selenium-routerAll versions (No fix recorded)
- docker-selenium-session-queueAll versions (No fix recorded)
- docker-selenium-sessionsAll versions (No fix recorded)
- docker-selenium-standaloneAll versions (No fix recorded)
- docker-selenium-standalone-chromeAll versions (No fix recorded)
- docker-selenium-standalone-chromiumAll versions (No fix recorded)
- docker-selenium-standalone-dockerAll versions (No fix recorded)
- docker-selenium-standalone-firefoxAll versions (No fix recorded)
- docker-selenium-supervisor-configAll versions (No fix recorded)
- druidAll versions (No fix recorded)
- druid-compatAll versions (No fix recorded)
- elasticsearch-7All versions (No fix recorded)
- elasticsearch-7-iamguardedAll versions (No fix recorded)
- flywayAll versions (No fix recorded)
- grpc-java-fips-1.56.0All versions (No fix recorded)
- grpc-java-fips-1.56.0-m2All versions (No fix recorded)
- kafka_exporter-strimzi-compatAll versions (No fix recorded)
- kafka-3.7All versions (No fix recorded)
- kafka-3.9All versions (No fix recorded)
- kafka-strimzi-compatAll versions (No fix recorded)
- keycloak< 26.1.3-r0
- knative-kafka-broker-1.17-dispatcher-loom< 1.17.3-r8
- knative-kafka-broker-1.17-receiver-loom< 1.17.3-r8
- kserve-modelmeshAll versions (No fix recorded)
- kserve-modelmesh-compatAll versions (No fix recorded)
- logstash-8-with-output-opensearchAll versions (No fix recorded)
- management-api-for-apache-cassandra-4.0All versions (No fix recorded)
- management-api-for-apache-cassandra-4.0-compatAll versions (No fix recorded)
- management-api-for-apache-cassandra-4.1All versions (No fix recorded)
- management-api-for-apache-cassandra-4.1-compatAll versions (No fix recorded)
- management-api-for-apache-cassandra-5.0All versions (No fix recorded)
- management-api-for-apache-cassandra-5.0-compatAll versions (No fix recorded)
- neo4j-4.4All versions (No fix recorded)
- neo4j-4.4-docker-publishAll versions (No fix recorded)
- neo4j-5.26All versions (No fix recorded)
- neo4j-5.26-docker-publishAll versions (No fix recorded)
- opensearch-2All versions (No fix recorded)
- opensearch-2-alertingAll versions (No fix recorded)
- opensearch-2-analysis-icuAll versions (No fix recorded)
- opensearch-2-analysis-kuromojiAll versions (No fix recorded)
- opensearch-2-analysis-noriAll versions (No fix recorded)
- opensearch-2-analysis-phoneticAll versions (No fix recorded)
- opensearch-2-analysis-smartcnAll versions (No fix recorded)
- opensearch-2-analysis-stempelAll versions (No fix recorded)
- opensearch-2-analysis-ukrainianAll versions (No fix recorded)
- opensearch-2-anomaly-detectionAll versions (No fix recorded)
- opensearch-2-asynchronous-searchAll versions (No fix recorded)
- opensearch-2-cross-cluster-replicationAll versions (No fix recorded)
- opensearch-2-crypto-kmsAll versions (No fix recorded)
- opensearch-2-custom-codecsAll versions (No fix recorded)
- opensearch-2-discovery-azure-classicAll versions (No fix recorded)
- opensearch-2-discovery-ec2All versions (No fix recorded)
- opensearch-2-discovery-gceAll versions (No fix recorded)
- opensearch-2-entrypoint-compatAll versions (No fix recorded)
- opensearch-2-geospatialAll versions (No fix recorded)
- opensearch-2-identity-shiroAll versions (No fix recorded)
- opensearch-2-index-managementAll versions (No fix recorded)
- opensearch-2-ingest-attachmentAll versions (No fix recorded)
- opensearch-2-job-schedulerAll versions (No fix recorded)
- opensearch-2-k-nnAll versions (No fix recorded)
- opensearch-2-mapper-annotated-textAll versions (No fix recorded)
- opensearch-2-mapper-murmur3All versions (No fix recorded)
- opensearch-2-mapper-sizeAll versions (No fix recorded)
- opensearch-2-ml-commonsAll versions (No fix recorded)
- opensearch-2-neural-searchAll versions (No fix recorded)
- opensearch-2-notificationsAll versions (No fix recorded)
- opensearch-2-observabilityAll versions (No fix recorded)
- opensearch-2-performance-analyzerAll versions (No fix recorded)
- opensearch-2-reportingAll versions (No fix recorded)
- opensearch-2-repository-azureAll versions (No fix recorded)
- opensearch-2-repository-gcsAll versions (No fix recorded)
- opensearch-2-repository-s3All versions (No fix recorded)
- opensearch-2-securityAll versions (No fix recorded)
- opensearch-2-security-analyticsAll versions (No fix recorded)
- opensearch-2-sqlAll versions (No fix recorded)
- opensearch-2-store-smbAll versions (No fix recorded)
- opensearch-2-telemetry-otelAll versions (No fix recorded)
- opensearch-2-transport-nioAll versions (No fix recorded)
- prometheus-jmx-exporter-strimzi-compatAll versions (No fix recorded)
- seata-server< 2.7.0-r3
- seleniumAll versions (No fix recorded)
- selenium-serverAll versions (No fix recorded)
- selenium-server-compatAll versions (No fix recorded)
- selenium-server-standaloneAll versions (No fix recorded)
- solrAll versions (No fix recorded)
- solr-oci-compatAll versions (No fix recorded)
- sonarqubeAll versions (No fix recorded)
- sonarqube-10All versions (No fix recorded)
- sonarqube-docker-compatAll versions (No fix recorded)
- sonarqube-scriptsAll versions (No fix recorded)
- spark-3.5All versions (No fix recorded)
- spark-3.5-scala-2.12All versions (No fix recorded)
- spark-3.5-scala-2.12-compatAll versions (No fix recorded)
- spark-3.5-scala-2.12-iamguarded-compatAll versions (No fix recorded)
- spark-3.5-scala-2.13All versions (No fix recorded)
- spark-3.5-scala-2.13-compatAll versions (No fix recorded)
- strimzi-kafka-operatorAll versions (No fix recorded)
- strimzi-kafka-operator-cluster-operatorAll versions (No fix recorded)
- strimzi-kafka-operator-kafka-agentAll versions (No fix recorded)
- strimzi-kafka-operator-kafka-baseAll versions (No fix recorded)
- strimzi-kafka-operator-kafka-initAll versions (No fix recorded)
- strimzi-kafka-operator-kafka-thirdparty-libsAll versions (No fix recorded)
- strimzi-kafka-operator-kafka-thirdparty-libs-ccAll versions (No fix recorded)
- strimzi-kafka-operator-topic-operatorAll versions (No fix recorded)
- strimzi-kafka-operator-tracing-agentAll versions (No fix recorded)
- strimzi-kafka-operator-user-operatorAll versions (No fix recorded)
- tezAll versions (No fix recorded)
- thingsboardAll versions (No fix recorded)
- thingsboard-tb-js-executorAll versions (No fix recorded)
- thingsboard-tb-mqtt-transportAll versions (No fix recorded)
- thingsboard-tb-nodeAll versions (No fix recorded)
- thingsboard-tb-web-uiAll versions (No fix recorded)
- trinoAll versions (No fix recorded)
- trino-configAll versions (No fix recorded)
- trino-oci-entrypointAll versions (No fix recorded)
- trino-plugin-ai-functionsAll versions (No fix recorded)
- trino-plugin-bigqueryAll versions (No fix recorded)
- trino-plugin-blackholeAll versions (No fix recorded)
- trino-plugin-cassandraAll versions (No fix recorded)
- trino-plugin-clickhouseAll versions (No fix recorded)
- trino-plugin-delta-lakeAll versions (No fix recorded)
- trino-plugin-druidAll versions (No fix recorded)
- trino-plugin-duckdbAll versions (No fix recorded)
- trino-plugin-elasticsearchAll versions (No fix recorded)
- trino-plugin-exasolAll versions (No fix recorded)
- trino-plugin-exchange-filesystemAll versions (No fix recorded)
- trino-plugin-exchange-hdfsAll versions (No fix recorded)
- trino-plugin-fakerAll versions (No fix recorded)
- trino-plugin-functions-pythonAll versions (No fix recorded)
- trino-plugin-geospatialAll versions (No fix recorded)
- trino-plugin-google-sheetsAll versions (No fix recorded)
- trino-plugin-hiveAll versions (No fix recorded)
- trino-plugin-http-event-listenerAll versions (No fix recorded)
- trino-plugin-http-server-event-listenerAll versions (No fix recorded)
- trino-plugin-hudiAll versions (No fix recorded)
- trino-plugin-icebergAll versions (No fix recorded)
- trino-plugin-igniteAll versions (No fix recorded)
- trino-plugin-jmxAll versions (No fix recorded)
- trino-plugin-kafkaAll versions (No fix recorded)
- trino-plugin-kafka-event-listenerAll versions (No fix recorded)
- trino-plugin-lakehouseAll versions (No fix recorded)
- trino-plugin-ldap-group-providerAll versions (No fix recorded)
- trino-plugin-lokiAll versions (No fix recorded)
- trino-plugin-mariadbAll versions (No fix recorded)
- trino-plugin-memoryAll versions (No fix recorded)
- trino-plugin-mlAll versions (No fix recorded)
- trino-plugin-mongodbAll versions (No fix recorded)
- trino-plugin-mysqlAll versions (No fix recorded)
- trino-plugin-mysql-event-listenerAll versions (No fix recorded)
- trino-plugin-opaAll versions (No fix recorded)
- trino-plugin-openlineageAll versions (No fix recorded)
- trino-plugin-opensearchAll versions (No fix recorded)
- trino-plugin-oracleAll versions (No fix recorded)
- trino-plugin-password-authenticatorsAll versions (No fix recorded)
- trino-plugin-pinotAll versions (No fix recorded)
- trino-plugin-postgresqlAll versions (No fix recorded)
- trino-plugin-prometheusAll versions (No fix recorded)
- trino-plugin-rangerAll versions (No fix recorded)
- trino-plugin-redisAll versions (No fix recorded)
- trino-plugin-redshiftAll versions (No fix recorded)
- trino-plugin-resource-group-managersAll versions (No fix recorded)
- trino-plugin-session-property-managersAll versions (No fix recorded)
- trino-plugin-singlestoreAll versions (No fix recorded)
- trino-plugin-snowflakeAll versions (No fix recorded)
- trino-plugin-spooling-filesystemAll versions (No fix recorded)
- trino-plugin-sqlserverAll versions (No fix recorded)
- trino-plugin-teradata-functionsAll versions (No fix recorded)
- trino-plugin-thriftAll versions (No fix recorded)
- trino-plugin-tpcdsAll versions (No fix recorded)
1 vendor · 200 products · Showing 200 of 355
References
0 linksNo references have been published for this record.
Related vulnerabilities
PrioritiseCVE-2026-102554google · guava +481 moreDenial of Service via Eager Array Allocation During Deserialization in GuavaAllocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances, Guava eagerly allocates an array based on a caller-specified size parameter without throttling, permitting memory exhaustion from crafted serialization streams.CVSS8.2HighEPSS0.35%RoutineCVE-2026-106453yawkat · lz4-java +220 moreyawkat LZ4 Java: LZ4DecompressorWithLength allocates the unvalidated size from the 4-byte length header, so a 5-byte input triggers a 1 GiB allocation and OutOfMemoryErroryawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, LZ4DecompressorWithLength uses getDecompressedLength to trust the four-byte decompressed-length header before validating the compressed input, allowing a five-byte attacker-supplied input whose header declares a large output size to request up to approximately 2 GiB and exhaust the JVM heap. Convenience overloads backed by LZ4FastDecompressor or LZ4SafeDecompressor allocate the untrusted size, while overloads that write to a caller-provided destination buffer are not affected because the caller controls the destination size. This issue is fixed in version 1.11.2.CVSS5.3MediumEPSS0.37%RoutineCVE-2026-106452yawkat · lz4-java +220 moreyawkat LZ4 Java: LZ4BlockInputStream allocates an unvalidated compressed length from the stream headeryawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, net.jpountz.lz4.LZ4BlockInputStream refill() validates that the compressedLen field in a legacy LZ4Block header is nonnegative but allocates a compressed-input buffer of that attacker-controlled size before reading payload data, allowing a header-only stream to request a near-2 GiB allocation and exhaust the JVM heap. Canonical writers emit raw blocks when compression is not smaller than the original block, but vulnerable readers accept non-canonical oversized compressed blocks. This issue is fixed in version 1.11.2.CVSS5.3MediumEPSS0.45%RoutineCVE-2026-106451yawkat · lz4-java +225 moreyawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local useryawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.load() uses File.createTempFile to create an exclusive temporary .lck file but derives the native-library path by removing the suffix, then FileOutputStream opens that predictable path without exclusive creation, allowing another local user with access to the same shared temporary directory to create or replace the library file before System.load() uses it. Successful exploitation depends on shared-directory permissions, host protections, and winning the race, and can execute native code as the victim; hardened systems may instead cause library loading to fail and fall back to Java implementations. Configurations using a system library, a private java.io.tmpdir, or Java-only implementations are not affected. This issue is fixed in version 1.11.4.CVSS7.3HighEPSS0.11%RoutineCVE-2026-106450yawkat · lz4-java +225 moreyawkat LZ4 Java: LZ4FrameInputStream reallocates block buffers for every frame, allowing CPU and GC amplification from small inputsyawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4FrameInputStream readHeader() allocates two new 4 MiB block buffers whenever a maximum-block-size frame header is read, and the default concatenated-frame mode allows attacker-controlled streams containing many minimal empty frames to trigger roughly 8 MiB of allocation for every 11 input bytes. The stream produces no decompressed output while consuming CPU and garbage-collection time, so decompressed-size limits do not mitigate the issue; readSingleFrame mode is not affected. This issue is fixed in version 1.11.4.CVSS5.3MediumEPSS0.45%RoutineCVE-2026-106449yawkat · lz4-java +225 moreyawkat LZ4 Java: LZ4BlockInputStream with stopOnEmptyBlock=false recurses once per empty block, causing StackOverflowErroryawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4BlockInputStream configured with stopOnEmptyBlock set to false handles each well-formed empty LZ4Block by recursively calling refill(), allowing a long sequence of empty blocks in an attacker-controlled compressed stream to exhaust the decoding thread's stack and throw StackOverflowError. The default stopOnEmptyBlock setting is true and is not affected, and the issue does not cause memory corruption. This issue is fixed in version 1.11.4.CVSS3.7LowEPSS0.42%