deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-5568-6qcg-g7fx
Package: org.apache.activemq:activemq-all (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: < 5.19.4
Patched in: 5.19.4

Summary:  Apache ActiveMQ: Denial of Service via Out of Memory vulnerability

Details:
Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ.

ActiveMQ NIO SSL transports do not correctly handle TLSv1.3 handshake KeyUpdates triggered by clients. This makes it possible for a client to rapidly trigger updates which causes the broker to exhaust all its memory in the SSL engine leading to DoS.

Note: TLS versions before TLSv1.3 (such as TLSv1.2) are broken but are not vulnerable to OOM. Previous TLS versions require a full handshake renegotiation which causes a connection to hang but not OOM. This is fixed as well.
This issue affects Apache ActiveMQ Client: before 5.19.4, from 6.0.0 before 6.2.4; Apache ActiveMQ Broker: before 5.19.4, from 6.0.0 before 6.2.4; Apache ActiveMQ: before 5.19.4, from 6.0.0 before 6.2.4.

Users are recommended to upgrade to version 6.2.4 or 5.19.5, which fixes the issue.
GitHub Security Advisory: GHSA-5568-6qcg-g7fx
Package: org.apache.activemq:activemq-broker (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: >= 6.0.0, < 6.2.4
Patched in: 6.2.4

Summary:  Apache ActiveMQ: Denial of Service via Out of Memory vulnerability

Details:
Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ.

ActiveMQ NIO SSL transports do not correctly handle TLSv1.3 handshake KeyUpdates triggered by clients. This makes it possible for a client to rapidly trigger updates which causes the broker to exhaust all its memory in the SSL engine leading to DoS.

Note: TLS versions before TLSv1.3 (such as TLSv1.2) are broken but are not vulnerable to OOM. Previous TLS versions require a full handshake renegotiation which causes a connection to hang but not OOM. This is fixed as well.
This issue affects Apache ActiveMQ Client: before 5.19.4, from 6.0.0 before 6.2.4; Apache ActiveMQ Broker: before 5.19.4, from 6.0.0 before 6.2.4; Apache ActiveMQ: before 5.19.4, from 6.0.0 before 6.2.4.

Users are recommended to upgrade to version 6.2.4 or 5.19.5, which fixes the issue.
GitHub Security Advisory: GHSA-5568-6qcg-g7fx
Package: org.apache.activemq:activemq-broker (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: < 5.19.4
Patched in: 5.19.4

Summary:  Apache ActiveMQ: Denial of Service via Out of Memory vulnerability

Details:
Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ.

ActiveMQ NIO SSL transports do not correctly handle TLSv1.3 handshake KeyUpdates triggered by clients. This makes it possible for a client to rapidly trigger updates which causes the broker to exhaust all its memory in the SSL engine leading to DoS.

Note: TLS versions before TLSv1.3 (such as TLSv1.2) are broken but are not vulnerable to OOM. Previous TLS versions require a full handshake renegotiation which causes a connection to hang but not OOM. This is fixed as well.
This issue affects Apache ActiveMQ Client: before 5.19.4, from 6.0.0 before 6.2.4; Apache ActiveMQ Broker: before 5.19.4, from 6.0.0 before 6.2.4; Apache ActiveMQ: before 5.19.4, from 6.0.0 before 6.2.4.

Users are recommended to upgrade to version 6.2.4 or 5.19.5, which fixes the issue.
GitHub Security Advisory: GHSA-5568-6qcg-g7fx
Package: org.apache.activemq:activemq-client (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: >= 6.0.0, < 6.2.4
Patched in: 6.2.4

Summary:  Apache ActiveMQ: Denial of Service via Out of Memory vulnerability

Details:
Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ.

ActiveMQ NIO SSL transports do not correctly handle TLSv1.3 handshake KeyUpdates triggered by clients. This makes it possible for a client to rapidly trigger updates which causes the broker to exhaust all its memory in the SSL engine leading to DoS.

Note: TLS versions before TLSv1.3 (such as TLSv1.2) are broken but are not vulnerable to OOM. Previous TLS versions require a full handshake renegotiation which causes a connection to hang but not OOM. This is fixed as well.
This issue affects Apache ActiveMQ Client: before 5.19.4, from 6.0.0 before 6.2.4; Apache ActiveMQ Broker: before 5.19.4, from 6.0.0 before 6.2.4; Apache ActiveMQ: before 5.19.4, from 6.0.0 before 6.2.4.

Users are recommended to upgrade to version 6.2.4 or 5.19.5, which fixes the issue.
GitHub Security Advisory: GHSA-5568-6qcg-g7fx
Package: org.apache.activemq:activemq-client (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: < 5.19.4
Patched in: 5.19.4

Summary:  Apache ActiveMQ: Denial of Service via Out of Memory vulnerability

Details:
Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ.

ActiveMQ NIO SSL transports do not correctly handle TLSv1.3 handshake KeyUpdates triggered by clients. This makes it possible for a client to rapidly trigger updates which causes the broker to exhaust all its memory in the SSL engine leading to DoS.

Note: TLS versions before TLSv1.3 (such as TLSv1.2) are broken but are not vulnerable to OOM. Previous TLS versions require a full handshake renegotiation which causes a connection to hang but not OOM. This is fixed as well.
This issue affects Apache ActiveMQ Client: before 5.19.4, from 6.0.0 before 6.2.4; Apache ActiveMQ Broker: before 5.19.4, from 6.0.0 before 6.2.4; Apache ActiveMQ: before 5.19.4, from 6.0.0 before 6.2.4.

Users are recommended to upgrade to version 6.2.4 or 5.19.5, which fixes the issue.
GitHub Security Advisory: GHSA-3cjc-vhfm-ffp2
Package: org.apache.dolphinscheduler:dolphinscheduler (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerable versions: >= 3.1.0, < 3.2.0
Patched in: 3.2.0

Summary: Apache DolphinScheduler vulnerable to sensitive information disclosure

Details:
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Apache DolphinScheduler.

This vulnerability may allow unauthorized actors to access sensitive information, including database credentials.


This issue affects Apache DolphinScheduler versions 3.1.*.


Users are recommended to upgrade to:

  *  version ≥ 3.2.0 if using 3.1.x

As a temporary workaround, users who cannot upgrade immediately may restrict the exposed management endpoints by setting the following environment variable:


```
MANAGEMENT_ENDPOINTS_WEB_EXPOSURE_INCLUDE=health,metrics,prometheus
```

Alternatively, add the following configuration to the application.yaml file:


```
management:
   endpoints:
     web:
        exposure:
          include: health,metrics,prometheus
```

This issue has been reported as CVE-2023-48796:

 https://cveprocess.apache.org/cve5/CVE-2023-48796
GitHub Security Advisory: GHSA-xvqc-pp94-fmpx
Package: org.apache.activemq:activemq-mqtt (MAVEN)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-190: Integer Overflow or Wraparound
Vulnerable versions: >= 6.0.0, < 6.2.4
Patched in: 6.2.4

Summary: Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT vulnerable to Integer Overflow or Wraparound

Details:
Integer Overflow or Wraparound vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT.

The fix for "CVE-2025-66168: MQTT control packet remaining length field is not properly validated" was only applied to 5.19.2 (and future 5.19.x) releases but was missed for all 6.0.0+ versions. This issue affects Apache ActiveMQ: from 6.0.0 before 6.2.4; Apache ActiveMQ All: from 6.0.0 before 6.2.4; Apache ActiveMQ MQTT: from 6.0.0 before 6.2.4.

Users are recommended to upgrade to version 6.2.4 or a 5.19.x version starting with 5.19.2 or later (currently latest is 5.19.5), which fixes the issue.
GitHub Security Advisory: GHSA-xvqc-pp94-fmpx
Package: org.apache.activemq:activemq-all (MAVEN)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-190: Integer Overflow or Wraparound
Vulnerable versions: >= 6.0.0, < 6.2.4
Patched in: 6.2.4

Summary: Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT vulnerable to Integer Overflow or Wraparound

Details:
Integer Overflow or Wraparound vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT.

The fix for "CVE-2025-66168: MQTT control packet remaining length field is not properly validated" was only applied to 5.19.2 (and future 5.19.x) releases but was missed for all 6.0.0+ versions. This issue affects Apache ActiveMQ: from 6.0.0 before 6.2.4; Apache ActiveMQ All: from 6.0.0 before 6.2.4; Apache ActiveMQ MQTT: from 6.0.0 before 6.2.4.

Users are recommended to upgrade to version 6.2.4 or a 5.19.x version starting with 5.19.2 or later (currently latest is 5.19.5), which fixes the issue.
GitHub Security Advisory: GHSA-xvqc-pp94-fmpx
Package: org.apache.activemq:apache-activemq (MAVEN)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-190: Integer Overflow or Wraparound
Vulnerable versions: >= 6.0.0, < 6.2.4
Patched in: 6.2.4

Summary: Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT vulnerable to Integer Overflow or Wraparound

Details:
Integer Overflow or Wraparound vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT.

The fix for "CVE-2025-66168: MQTT control packet remaining length field is not properly validated" was only applied to 5.19.2 (and future 5.19.x) releases but was missed for all 6.0.0+ versions. This issue affects Apache ActiveMQ: from 6.0.0 before 6.2.4; Apache ActiveMQ All: from 6.0.0 before 6.2.4; Apache ActiveMQ MQTT: from 6.0.0 before 6.2.4.

Users are recommended to upgrade to version 6.2.4 or a 5.19.x version starting with 5.19.2 or later (currently latest is 5.19.5), which fixes the issue.
GitHub Security Advisory: GHSA-6fmv-xxpf-w3cw
Package: org.codehaus.plexus:plexus-utils (MAVEN)
Severity: HIGH (CVSS 0.0)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: < 3.6.1
Patched in: 3.6.1

Summary: Plexus-Utils has a Directory Traversal vulnerability in its extractFile method 

Details:
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b[PII_REDACTED]ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
GitHub Security Advisory: GHSA-6fmv-xxpf-w3cw
Package: org.codehaus.plexus:plexus-utils (MAVEN)
Severity: HIGH (CVSS 0.0)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: >= 4.0.0, < 4.0.3
Patched in: 4.0.3

Summary: Plexus-Utils has a Directory Traversal vulnerability in its extractFile method 

Details:
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b[PII_REDACTED]ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
GitHub Security Advisory: GHSA-gv3v-2cpp-3pmq
Package: org.keycloak:keycloak-quarkus-server (MAVEN)
Severity: MODERATE (CVSS 5.0)
CWE: CWE-117: Improper Output Neutralization for Logs
Vulnerable versions: < 26.5.6
Patched in: 26.5.6

Summary: Keycloak logs sensitive headers

Details:
A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern (such as the pre-defined 'long' pattern), sensitive headers including Authorization and Cookie are disclosed to the logs in cleartext. An attacker with read access to the log files can extract these credentials (e.g., bearer tokens, session cookies) and use them to impersonate users, leading to a full account compromise.

Patches are available, see:

- https://github.com/keycloak/keycloak/releases/tag/26.4.11
- https://github.com/keycloak/keycloak/releases/tag/26.5.6
- https://github.com/keycloak/keycloak/releases/tag/26.6.0
GitHub Security Advisory: GHSA-wpwf-v25w-54g3
Package: tech.powerjob:powerjob-server-starter (MAVEN)
Severity: MODERATE (CVSS 7.3)
CWE: CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Vulnerable versions: >= 5.1.0, <= 5.1.2
Patched in: unpatched

Summary: PowerJob's GroovyEvaluator.evaluate endpoint vulnerable to code injection

Details:
A security flaw has been discovered in PowerJob 5.1.0/5.1.1/5.1.2. The affected element is the function GroovyEvaluator.evaluate of the file /openApi/addWorkflowNode of the component OpenAPI Endpoint. The manipulation of the argument nodeParams results in code injection. The attack can be executed remotely. The project was informed of the problem early through an issue report but has not responded yet.
GitHub Security Advisory: GHSA-4fp2-3xgg-jg4w
Package: tech.powerjob:powerjob-server-starter (MAVEN)
Severity: MODERATE (CVSS 7.3)
CWE: CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Vulnerable versions: >= 5.1.0, <= 5.1.2
Patched in: unpatched

Summary: PowerJob vulnerable to SQL injection

Details:
A vulnerability was identified in PowerJob 5.1.0/5.1.1/5.1.2. Impacted is an unknown function of the file powerjob-server/powerjob-server-starter/src/main/java/tech/powerjob/server/web/controller/InstanceController.java of the component detailPlus Endpoint. The manipulation of the argument customQuery leads to sql injection. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue report but has not responded yet.
GitHub Security Advisory: GHSA-qffm-gf3j-6mvg
Package: org.apache.cassandra:cassandra-all (MAVEN)
Severity: LOW (CVSS 0.0)
CWE: CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: >= 5.0, < 5.0.7
Patched in: 5.0.7

Summary: Apache Cassandra has an authenticated DoS over CQL

Details:
Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes.
Users are recommended to upgrade to version 4.0.20, 4.1.11, 5.0.7, which fixes this issue.
GitHub Security Advisory: GHSA-qffm-gf3j-6mvg
Package: org.apache.cassandra:cassandra-all (MAVEN)
Severity: LOW (CVSS 0.0)
CWE: CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: >= 4.1, < 4.1.11
Patched in: 4.1.11

Summary: Apache Cassandra has an authenticated DoS over CQL

Details:
Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes.
Users are recommended to upgrade to version 4.0.20, 4.1.11, 5.0.7, which fixes this issue.
GitHub Security Advisory: GHSA-qffm-gf3j-6mvg
Package: org.apache.cassandra:cassandra-all (MAVEN)
Severity: LOW (CVSS 0.0)
CWE: CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: >= 4.0, < 4.0.20
Patched in: 4.0.20

Summary: Apache Cassandra has an authenticated DoS over CQL

Details:
Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes.
Users are recommended to upgrade to version 4.0.20, 4.1.11, 5.0.7, which fixes this issue.
GitHub Security Advisory: GHSA-fh34-c629-p8xj
Package: org.apache.cassandra:cassandra-all (MAVEN)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-532: Insertion of Sensitive Information into Log File
Vulnerable versions: >= 4.0, < 4.0.20
Patched in: 4.0.20

Summary: Apache Cassandra has sensitive Information Leak in cqlsh

Details:
Sensitive Information Leak in cqlsh in Apache Cassandra 4.0 allows access to sensitive information, like passwords, from previously executed cqlsh command via  ~/.cassandra/cqlsh_history local file access.

Users are recommended to upgrade to version 4.0.20, which fixes this issue.

--
Description: Cassandra's command-line tool, cqlsh, provides a command history feature that allows users to recall previously executed commands using the up/down arrow keys. These history records are saved in the ~/.cassandra/cqlsh_history file in the user's home directory.

However, cqlsh does not redact sensitive information when saving command history. This means that if a user executes operations involving passwords (such as logging in or creating users) within cqlsh, these passwords are permanently stored in cleartext in the history file on the disk.
GitHub Security Advisory: GHSA-gc59-r5jq-98qw
Package: org.eclipse.jetty.ee10:jetty-ee10 (MAVEN)
Severity: HIGH (CVSS 7.4)
CWE: CWE-226: Sensitive Information in Resource Not Removed Before Reuse
Vulnerable versions: >= 9.4.0, < 9.4.60
Patched in: 9.4.60

Summary: Duplicate Advisory: Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables

Details:
## Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-r7p8-xq5m-436c. This link is maintained to preserve external references.

## Original Description
In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable.


Upon returning from the initial checks, there are conditions that cause an early return from the JASPIAuthenticator code without clearing those ThreadLocals.


A subsequent request using the same thread inherits the ThreadLocal values, leading to a broken access control and privilege escalation.
GitHub Security Advisory: GHSA-gc59-r5jq-98qw
Package: org.eclipse.jetty.ee10:jetty-ee10 (MAVEN)
Severity: HIGH (CVSS 7.4)
CWE: CWE-226: Sensitive Information in Resource Not Removed Before Reuse
Vulnerable versions: >= 10.0.0, < 10.0.28
Patched in: 10.0.28

Summary: Duplicate Advisory: Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables

Details:
## Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-r7p8-xq5m-436c. This link is maintained to preserve external references.

## Original Description
In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable.


Upon returning from the initial checks, there are conditions that cause an early return from the JASPIAuthenticator code without clearing those ThreadLocals.


A subsequent request using the same thread inherits the ThreadLocal values, leading to a broken access control and privilege escalation.
GitHub Security Advisory: GHSA-gc59-r5jq-98qw
Package: org.eclipse.jetty.ee10:jetty-ee10 (MAVEN)
Severity: HIGH (CVSS 7.4)
CWE: CWE-226: Sensitive Information in Resource Not Removed Before Reuse
Vulnerable versions: >= 11.0.0, < 11.0.28
Patched in: 11.0.28

Summary: Duplicate Advisory: Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables

Details:
## Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-r7p8-xq5m-436c. This link is maintained to preserve external references.

## Original Description
In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable.


Upon returning from the initial checks, there are conditions that cause an early return from the JASPIAuthenticator code without clearing those ThreadLocals.


A subsequent request using the same thread inherits the ThreadLocal values, leading to a broken access control and privilege escalation.
GitHub Security Advisory: GHSA-gc59-r5jq-98qw
Package: org.eclipse.jetty.ee10:jetty-ee10 (MAVEN)
Severity: HIGH (CVSS 7.4)
CWE: CWE-226: Sensitive Information in Resource Not Removed Before Reuse
Vulnerable versions: >= 12.0.0, < 12.0.33
Patched in: 12.0.33

Summary: Duplicate Advisory: Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables

Details:
## Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-r7p8-xq5m-436c. This link is maintained to preserve external references.

## Original Description
In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable.


Upon returning from the initial checks, there are conditions that cause an early return from the JASPIAuthenticator code without clearing those ThreadLocals.


A subsequent request using the same thread inherits the ThreadLocal values, leading to a broken access control and privilege escalation.
GitHub Security Advisory: GHSA-gc59-r5jq-98qw
Package: org.eclipse.jetty.ee10:jetty-ee10 (MAVEN)
Severity: HIGH (CVSS 7.4)
CWE: CWE-226: Sensitive Information in Resource Not Removed Before Reuse
Vulnerable versions: >= 12.1.0, < 12.1.7
Patched in: 12.1.7

Summary: Duplicate Advisory: Eclipse Jetty: Early return from the JASPIAuthenticator code can potentially no clear ThreadLocal variables

Details:
## Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-r7p8-xq5m-436c. This link is maintained to preserve external references.

## Original Description
In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable.


Upon returning from the initial checks, there are conditions that cause an early return from the JASPIAuthenticator code without clearing those ThreadLocals.


A subsequent request using the same thread inherits the ThreadLocal values, leading to a broken access control and privilege escalation.
GitHub Security Advisory: GHSA-qxpc-96fq-wwmg
Package: org.apache.cassandra:cassandra-all (MAVEN)
Severity: HIGH (CVSS 8.8)
CWE: CWE-267: Privilege Defined With Unsafe Actions
Vulnerable versions: >= 5.0-alpha1, < 5.0.7
Patched in: 5.0.7

Summary: Apache Cassandra is vulnerable to privilege escalation in an mTLS environment using MutualTlsAuthenticator

Details:
Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator allows a user with only CREATE permission to associate their own certificate identity with an arbitrary role, including a superuser role, and authenticate as that role via ADD IDENTITY.

Users are recommended to upgrade to version 5.0.7+, which fixes this issue.