Your dependencies cross-checked against the OSV vulnerability database.
-
Serious GHSA-vmfg-rjjm-rjrj QOS.ch Logback vulnerable to Deserialization of Untrusted Data
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2017-5929). Fix: Update that package to its patched version.
-
Serious GHSA-vmfg-rjjm-rjrj QOS.ch Logback vulnerable to Deserialization of Untrusted Data
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2017-5929). Fix: Update that package to its patched version.
-
Serious GHSA-c27h-mcmw-48hv Deserialization of Untrusted Data in org.codehaus.jackson:jackson-mapper-asl
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2019-10202). Fix: Update that package to its patched version.
-
Worth fixing GHSA-vmq6-5m68-f53m logback serialization vulnerability
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2023-6378). Fix: Update that package to its patched version.
-
Worth fixing GHSA-25qh-j22f-pwp8 QOS.CH logback-core is vulnerable to Arbitrary Code Execution through file processing
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2025-11226). Fix: Update that package to its patched version.
-
Worth fixing GHSA-668q-qrv7-99fm Deserialization of Untrusted Data in logback
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2021-42550). Fix: Update that package to its patched version.
-
Worth fixing GHSA-pr98-23f8-jwxv QOS.CH logback-core Expression Language Injection vulnerability
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2024-12798). Fix: Update that package to its patched version.
-
Worth fixing GHSA-vmq6-5m68-f53m logback serialization vulnerability
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2023-6378). Fix: Update that package to its patched version.
-
Worth fixing GHSA-269g-pwp5-87pp TemporaryFolder on unix-like systems does not limit access to created files
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2020-15250). Fix: Update that package to its patched version.
-
Worth fixing GHSA-wmcc-9vch-jmx4 Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2025-23015). Fix: Update that package to its patched version.
-
Worth fixing GHSA-r6j9-8759-g62w Improper Restriction of XML External Entity Reference in jackson-mapper-asl
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2019-10172). Fix: Update that package to its patched version.
-
Worth fixing GHSA-7g45-4rm6-3mm3 Guava vulnerable to insecure use of temporary directory
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2023-2976). Fix: Update that package to its patched version.
-
Worth fixing GHSA-mvr2-9pj6-7w5j Denial of Service in Google Guava
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2018-10237). Fix: Update that package to its patched version.
-
Worth fixing GHSA-p979-4mfw-53vg HTTP Request Smuggling in Netty
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2019-16869). Fix: Update that package to its patched version.
-
Worth fixing GHSA-cmp6-m4wj-q63q yawkat LZ4 Java has a possible information leak in Java safe decompressor
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2025-66566). Fix: Update that package to its patched version.
-
Worth fixing GHSA-vqf4-7m7x-wgfc LZ4 Java Compression has Out-of-bounds memory operations which can cause DoS
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2025-12183). Fix: Update that package to its patched version.
-
Worth fixing GHSA-4p6w-m9wc-c9c9 Sensitive Data Exposure in Apache Ant
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2020-1945). Fix: Update that package to its patched version.
-
Worth fixing GHSA-f62v-xpxf-3v68 Code injection in Apache Ant
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2020-11979). Fix: Update that package to its patched version.
-
Worth fixing GHSA-q5r4-cfpx-h6fh Improper Handling of Length Parameter Inconsistency in Apache Ant
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2021-36373). Fix: Update that package to its patched version.
-
Worth fixing GHSA-j288-q9x7-2f5v Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2025-48924). Fix: Update that package to its patched version.
-
Worth fixing GHSA-7r82-7xv7-xcpj Cross-site scripting in Apache HttpClient
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2020-13956). Fix: Update that package to its patched version.
-
Worth fixing GHSA-7pwc-h2j2-rjgj Apache Thrift has an Improper Validation of Certificate with Host Mismatch Vulnerability
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2026-43869). Fix: Update that package to its patched version.
-
Worth fixing GHSA-rj7p-rfgp-852x Loop with Unreachable Exit Condition in Apache Thrift
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2019-0205). Fix: Update that package to its patched version.
-
Worth fixing GHSA-vx85-mj8c-4qm6 Apache Thrift Node.js static web server sandbox escape
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2018-11798). Fix: Update that package to its patched version.
-
Worth fixing GHSA-wjxj-f8rg-99wx Improper Input Validation in Apache Thrift
/workdirs/scan-2a655867-c94a-4d1a-816e-2a27b4aeb4b3/vendor/k8s.io/kubernetes/examples/storage/cassandra/java/pom.xml
A package you depend on has a known security hole (CVE-2018-1320). Fix: Update that package to its patched version.