CGA-JRMR-PVJW-RMXV: akhq
CVSS: UnknownUnknown
Published Date unknownLast modified Date unknown
Status not reported
The data service did not report a status for this record. Only the available sections are shown.Vulnerability summary
CGA-JRMR-PVJW-RMXV is a vulnerability in akhq with no CVSS score yet.
CVSS score
Not scored
010
No CVSS score recordedEPSS score
Not scored
0%100%
No EPSS score yetKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 0 · Related 1Timeline
No timeline events recorded.
Description
No description has been published for this record.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Chainguard200 products
- airbyte-platform-bootloader< 2.0.0-r4
- airbyte-platform-cron< 2.0.0-r4
- airbyte-platform-fips-bootloader< 2.0.0-r4
- airbyte-platform-fips-cron< 2.0.0-r4
- airbyte-platform-fips-server< 2.0.0-r4
- airbyte-platform-fips-workers< 2.0.0-r4
- airbyte-platform-fips-workload-api-server< 2.0.0-r4
- airbyte-platform-fips-workload-launcher< 2.0.0-r4
- airbyte-platform-server< 2.0.0-r4
- airbyte-platform-workers< 2.0.0-r4
- airbyte-platform-workload-api-server< 2.0.0-r4
- airbyte-platform-workload-launcher< 2.0.0-r4
- airbyte-server< 2.0.0-r13
- airbyte-server-fips< 2.0.0-r14
- akhq< 0.28.0-r7
- apache-activemq-artemis< 2.55.0-r4
- apache-activemq-artemis-fips< 2.55.0-r2
- apache-camel-karavan-devmode< 4.18.1-r11
- apache-hop< 2.19.0-r2
- apache-hop-fips< 2.19.0-r1
- apache-nifi-2.11< 2.11.0-r4
- apache-polaris< 1.7.0-r3
- apache-polaris-fips< 1.7.0-r3
- apache-pulsar-4.0< 4.0.13-r2
- apache-pulsar-4.1< 4.1.3-r15
- apache-pulsar-4.2< 4.2.4-r2
- apache-pulsar-fips-4.0< 4.0.13-r1
- apache-pulsar-fips-4.2< 4.2.4-r2
- apicurio-registry< 3.3.1-r7
- apicurio-registry-3-operator< 3.3.1-r7
- apicurio-registry-3-operator-fips< 3.3.1-r6
- apicurio-registry-fips< 3.3.1-r6
- camunda-8.8< 8.8.35-r2
- camunda-8.9< 8.9.16-r1
- camunda-zeebe-8.6< 8.6.39-r10
- camunda-zeebe-8.7< 8.7.37-r2
- camunda-zeebe-8.8< 8.8.36-r1
- camunda-zeebe-8.9< 8.9.16-r1
- conductor< 3.32.1-r2
- conductor-fips< 3.32.1-r2
- cruise-control-fips-jars< 2.5.146-r4
- cruise-control-jars< 2.5.146-r3
- druid< 37.0.0-r53
- elasticsearch-8.19< 8.19.20-r1
- elasticsearch-8.19-iamguarded< 8.19.20-r1
- elasticsearch-8.19-iamguarded-fips< 8.19.20-r2
- elasticsearch-9.2< 9.2.8-r12
- elasticsearch-9.2-iamguarded< 9.2.8-r12
- elasticsearch-9.2-iamguarded-fips< 9.2.8-r12
- elasticsearch-9.3< 9.3.8-r5
- elasticsearch-9.3-iamguarded< 9.3.8-r5
- elasticsearch-9.3-iamguarded-fips< 9.3.7-r9
- elasticsearch-9.4< 9.4.5-r2
- elasticsearch-9.4-iamguarded< 9.4.5-r2
- elasticsearch-9.4-iamguarded-fips< 9.4.5-r3
- elasticsearch-9.5< 9.5.2-r1
- elasticsearch-9.5-iamguarded< 9.5.2-r1
- elasticsearch-9.5-iamguarded-fips< 9.5.2-r3
- elasticsearch-fips-8.19< 8.19.20-r2
- elasticsearch-fips-9.2< 9.2.8-r12
- elasticsearch-fips-9.3< 9.3.7-r9
- elasticsearch-fips-9.4< 9.4.5-r3
- elasticsearch-fips-9.5< 9.5.2-r3
- floci< 1.7.0-r1
- floci-az< 0.11.0-r1
- flyway-fips< 13.3.0-r1
- gremlin-server< 3.8.1-r3
- grpc-java-fips-1.56.0-m2< 1.56.0-r8
- hono-adapter-mqtt< 2.7.0-r38
- hono-cli< 2.7.0-r38
- hono-service-auth< 2.7.0-r38
- hono-service-command-router< 2.7.0-r38
- hono-service-device-registry-jdbc< 2.7.0-r38
- infinispan-15.0< 15.0.22-r17
- infinispan-15.1< 15.1.7-r28
- infinispan-15.2< 15.2.6-r26
- infinispan-16.0< 16.0.14-r4
- infinispan-16.1< 16.1.4-r11
- infinispan-16.2< 16.2.2-r3
- kafbat-ui< 1.5.0-r14
- kafbat-ui-fips< 1.5.0-r7
- kafka-bridge< 1.1.0-r2
- kafka-bridge-fips< 1.1.0-r3
- kayenta-2025.2< 2025.2.4-r8
- kayenta-2026.0< 2026.0.7-r3
- kayenta-2026.1< 2026.1.2-r4
- kayenta-fips-2025.2< 2025.2.4-r8
- kayenta-fips-2025.4< 2025.4.6-r7
- kayenta-fips-2026.0< 2026.0.5-r2
- kayenta-fips-2026.1< 2026.1.2-r4
- keycloak-26.6< 26.6.4-r24
- keycloak-26.6-iamguarded-compat< 26.6.4-r24
- keycloak-26.6-operator< 26.6.4-r24
- keycloak-26.7< 26.7.1-r4
- keycloak-26.7-iamguarded-compat< 26.7.1-r4
- keycloak-26.7-operator< 26.7.1-r4
- keycloak-fips-26.5< 26.5.7-r10
- keycloak-fips-26.5-iamguarded-fips< 26.5.7-r10
- keycloak-fips-26.5-operator< 26.5.7-r10
- keycloak-fips-26.6< 26.6.4-r10
- keycloak-fips-26.6-iamguarded-fips< 26.6.4-r10
- keycloak-fips-26.6-operator< 26.6.4-r10
- keycloak-fips-26.7< 26.7.1-r4
- keycloak-fips-26.7-iamguarded-fips< 26.7.1-r4
- keycloak-fips-26.7-operator< 26.7.1-r4
- knative-kafka-broker-1.20-dispatcher-loom< 1.20.3-r12
- knative-kafka-broker-1.20-receiver-loom< 1.20.3-r12
- knative-kafka-broker-1.21-dispatcher-loom< 1.21.5-r3
- knative-kafka-broker-1.21-receiver-loom< 1.21.5-r3
- knative-kafka-broker-1.22-dispatcher-loom< 1.22.3-r7
- knative-kafka-broker-1.22-receiver-loom< 1.22.3-r7
- knative-kafka-broker-1.23-dispatcher-loom< 1.23.0-r3
- knative-kafka-broker-1.23-receiver-loom< 1.23.0-r3
- knative-kafka-broker-fips-1.20-dispatcher-loom< 1.20.3-r10
- knative-kafka-broker-fips-1.20-receiver-loom< 1.20.3-r10
- knative-kafka-broker-fips-1.21-dispatcher-loom< 1.21.5-r2
- knative-kafka-broker-fips-1.21-receiver-loom< 1.21.5-r2
- knative-kafka-broker-fips-1.22-dispatcher-loom< 1.22.3-r3
- knative-kafka-broker-fips-1.22-receiver-loom< 1.22.3-r3
- knative-kafka-broker-fips-1.23-dispatcher-loom< 1.23.0-r4
- knative-kafka-broker-fips-1.23-receiver-loom< 1.23.0-r4
- kserve-modelmesh< 0.12.0-r39
- localstack< 4.14.0-r24
- logstash-8.19< 8.19.20-r4
- logstash-8.19-iamguarded-compat< 8.19.20-r4
- logstash-8.19-with-output-opensearch< 8.19.20-r4
- logstash-9.4< 9.4.5-r3
- logstash-9.4-iamguarded-compat< 9.4.5-r3
- logstash-9.5< 9.5.2-r3
- logstash-9.5-iamguarded-compat< 9.5.2-r3
- logstash-fips-9.4< 9.4.5-r1
- logstash-fips-9.4-iamguarded-compat< 9.4.5-r1
- logstash-fips-9.5< 9.5.2-r2
- logstash-fips-9.5-iamguarded-compat< 9.5.2-r2
- management-api-for-apache-cassandra-4.0< 0.1.125-r2
- management-api-for-apache-cassandra-4.1< 0.1.124-r1
- management-api-for-apache-cassandra-5.0< 0.1.124-r1
- metabase< 0.63.15-r1
- neo4j-2026.04< 2026.04.0-r3
- neo4j-2026.05< 2026.05.0-r12
- neo4j-2026.06< 2026.06.0-r9
- neo4j-2026.07< 2026.07.1-r2
- neo4j-5.26< 5.26.29-r2
- nuxeo-2023< 2023.45-r9
- opensearch-2< 2.19.6-r8
- opensearch-2-ml-commons< 2.19.6-r8
- opensearch-2-performance-analyzer< 2.19.6-r8
- opensearch-2-repository-azure< 2.19.6-r8
- opensearch-2-repository-s3< 2.19.6-r8
- opensearch-2-security< 2.19.6-r8
- opensearch-2-transport-nio< 2.19.6-r8
- opensearch-3< 3.8.0-r0
- opensearch-3-ml-commons< 3.8.0-r0
- opensearch-3-notifications< 3.8.0-r0
- opensearch-3-performance-analyzer< 3.8.0-r0
- opensearch-3-repository-azure< 3.8.0-r0
- opensearch-3-repository-s3< 3.8.0-r0
- opensearch-3-security< 3.8.0-r0
- opensearch-fips-3< 3.8.0-r2
- opensearch-fips-3-ml-commons< 3.8.0-r2
- opensearch-fips-3-notifications< 3.8.0-r2
- opensearch-fips-3-performance-analyzer< 3.8.0-r2
- opensearch-fips-3-repository-azure< 3.8.0-r2
- opensearch-fips-3-repository-s3< 3.8.0-r2
- opensearch-fips-3-security< 3.8.0-r2
- opensearch-fips-3-security-analytics< 3.8.0-r2
- pinot< 1.5.1-r18
- pinot-fips< 1.5.1-r13
- reposilite< 3.6.2-r3
- request-9047-keycloak-fips-26.4< 26.4.7-r33
- request-9047-keycloak-fips-26.4-iamguarded-fips< 26.4.7-r33
- request-9047-keycloak-fips-26.4-operator< 26.4.7-r33
- request-9047-keycloak-fips-26.5< 26.5.7-r23
- request-9047-keycloak-fips-26.5-iamguarded-fips< 26.5.7-r23
- request-9047-keycloak-fips-26.5-operator< 26.5.7-r23
- request-9047-keycloak-fips-26.6< 26.6.4-r15
- request-9047-keycloak-fips-26.6-iamguarded-fips< 26.6.4-r15
- request-9047-keycloak-fips-26.6-operator< 26.6.4-r15
- s3proxy< 4.0.0-r2
- s3proxy-fips< 4.0.0-r2
- seata-server< 2.7.0-r6
- spark-3.5-scala-2.12< 3.5.9-r3
- spark-3.5-scala-2.13< 3.5.9-r3
- spark-4.0-scala-2.13< 4.0.4-r2
- spark-4.1-scala-2.13< 4.1.3-r4
- spark-4.2-scala-2.13< 4.2.0-r6
- spark-fips-3.5-scala-2.12< 3.5.8-r8
- spark-fips-3.5-scala-2.13< 3.5.8-r8
- spark-fips-4.1-scala-2.13< 4.1.2-r8
- spark-fips-4.2-scala-2.13< 4.2.0-r5
- strimzi-kafka-operator-cluster-operator< 1.2.0-r1
- strimzi-kafka-operator-fips-cluster-operator< 1.1.0-r6
- strimzi-kafka-operator-fips-kafka-agent< 1.1.0-r6
- strimzi-kafka-operator-fips-kafka-init< 1.1.0-r6
- strimzi-kafka-operator-fips-kafka-thirdparty-libs-cc< 1.1.0-r5
- strimzi-kafka-operator-fips-topic-operator< 1.1.0-r6
- strimzi-kafka-operator-fips-tracing-agent< 1.1.0-r6
- strimzi-kafka-operator-fips-user-operator< 1.1.0-r6
- strimzi-kafka-operator-kafka-agent< 1.2.0-r1
- strimzi-kafka-operator-kafka-init< 1.2.0-r1
1 vendor · 200 products · Showing 200 of 288. Use Open JSON for the complete list.
References
0 linksNo references have been published for this record.
Related vulnerabilities
CVE-2026-54428apache software foundationapache httpcomponents core+1460.87%Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core (5.4.2 and earlier, 5.5-beta1 and earlier) allows an remote attacker to cause a denial of service through memory exhaustion by sending oversized compressed header blocks before the HTTP/2 SETTINGS acknowledgement causes the configured header list size limit to be applied.CVE-2026-54399apache software foundationapache httpcomponents core+1510.87%Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core (5.4.2 and earlier, 5.5-beta1 and earlier) allows an remote attacker to cause a denial of service through memory exhaustion by sending messages with excessive number of headers / excessive header lengthCVE-2026-91777chainguardairbyte-platform-cron+6910.45%Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference() and the equivalent implementation in MapDeserializer. When a document first creates N unresolved object-ID references in an identity-enabled collection or map and then defines those same IDs in reverse order, completion performs on the order of N * (N + 1) / 2 identity comparisons, so a shallow document whose size grows linearly causes quadratic CPU work during deserialization. The reporter instrumented equals() calls on the ID class and measured exactly 2,003,000 comparisons at N = 2,000, against zero comparisons in the pending-reference lookup path for an equally sized control in which every reference was already resolved. The input requires no deep nesting and no syntactically unusual JSON. Exploitation requires an application that deserializes attacker-influenced JSON into an identity-enabled collection or map. The fix replaces the repeated linear lookup with a keyed pending-reference structure.CVE-2026-91776chainguardairbyte-platform-cron+7030.45%TypeDeserializerBase._findDeserializer() in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based polymorphism is configured with a fallback, for example @JsonTypeInfo(use = Id.NAME, defaultImpl = ...), every distinct unrecognized type ID resolves to the same fallback deserializer but is retained as its own key in the _deserializers map. That map has no configurable bound and lives for the lifetime of the type deserializer, so an attacker who can repeatedly supply fresh unknown type IDs causes monotonic memory retention across requests. The reporter observed 10,000 retained entries from 10,000 distinct unknown IDs, against a single entry for a control that repeated one unknown ID the same number of times, isolating attacker-controlled key cardinality from request volume. Exploitation requires an application that enables name-based polymorphism with a defaultImpl or equivalent fallback, accepts attacker-influenced type IDs, and reuses a long-lived ObjectMapper across requests. The fix stops caching fallback resolutions for unrecognized IDs and bounds both the number of cached entries and the length of a cacheable type ID.CVE-2026-71497chainguardairbyte-platform-bootloader+1550.30%jsoup is a Java library for working with real-world HTML. From 1.14.3 until 1.23.1, jsoup's HTML parser could incorrectly handle a malformed tag name ending in a control character, causing the tag to acquire the parsing behavior of a different element. When a custom Safelist permits certain raw-text elements, this misparsing can cause content that should remain inert text to be emitted as active markup after serialization, potentially resulting in cross-site scripting. jsoup's built-in Safelists are not affected. This issue is fixed in version 1.23.1.CVE-2026-59903chainguardairbyte-platform-bootloader+3590.25%Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.http.cors.CorsHandler setVaryHeader replaces application Vary headers such as Authorization or Cookie with Origin, allowing a caching proxy or CDN to reuse authenticated responses across users and disclose sensitive information. This issue is fixed in versions 4.1.137.Final and 4.2.17.Final.