Eclipse Foundation vulnerabilities

Products

• Edc 2
• Mosquitto 2

Newest

• eclipse mosquitto Eclipse Mosquito: Double free vulnerability CVE-2024-3935 Fix available 6.0 MediumOctober 30, 2024
• eclipse mosquitto Eclipse Mosquito: Heap Buffer Overflow in my_subscribe_callback CVE-2024-10525 Fix available EPSS 59.2% 7.2 HighOctober 30, 2024
• eclipse glassfish Glassfish redirect to untrusted site CVE-2024-9329 Fix available 6.9 MediumSeptember 30, 2024
• eclipse dataspace components, eclipse foundation edc, edc connector +2 more Eclipse EDC: Consumer pull transfer token validation checks not applied CVE-2024-8642 Fix available 5.0 MediumSeptember 11, 2024
• eclipse vert.x Eclipse Vert.x gRPC server does not limit the maximum message size CVE-2024-8391 Fix available 6.9 MediumSeptember 4, 2024
• eclipse parsson Eclipse Parsson stack overflow with deeply nested objects CVE-2023-7272 Fix available 8.6 HighJuly 17, 2024
• eclipse edc connector, eclipse foundation edc +1 more Eclipse EDC: OAuth2 Credential Exfiltration Vulnerability CVE-2024-4536 Fix available 6.8 MediumMay 7, 2024
• eclipse kura Eclipse Kura LogServlet vulnerability CVE-2024-3046 7.5 HighApril 9, 2024
• eclipse threadx Integer wraparounds, under-allocations, and heap buffer overflows in Eclipse ThreadX xQueueCreate() and xQueueCreateSet() CVE-2024-2212 7.3 HighMarch 26, 2024