Search results

[CVE-2025-41249] HIGH: spring-core 6.1.16 - Annotation Detection Vulnerability

securitySecurity-related issuesSecurity-related issues

vulnerabilityDependency vulnerabilityDependency vulnerability

Status: Open.

#85 In conductor-oss/java-sdk;

· nthmost-orkes opened on Feb 27, 2026

[CVE-2025-22235] HIGH: spring-boot 3.3.7 - EndpointRequest.to() wrong matcher

securitySecurity-related issuesSecurity-related issues

vulnerabilityDependency vulnerabilityDependency vulnerability

Status: Open.

#84 In conductor-oss/java-sdk;

· nthmost-orkes opened on Feb 27, 2026

[CVE-2025-12183] HIGH: lz4-java 1.8.0 - Out-of-bounds memory and information disclosure

securitySecurity-related issuesSecurity-related issues

vulnerabilityDependency vulnerabilityDependency vulnerability

Status: Open.

#83 In conductor-oss/java-sdk;

· nthmost-orkes opened on Feb 27, 2026

[CVE-2025-55163] HIGH: grpc-netty-shaded / netty-codec-http2 - HTTP/2 DDoS vulnerability

securitySecurity-related issuesSecurity-related issues

vulnerabilityDependency vulnerabilityDependency vulnerability

Status: Open.

#82 In conductor-oss/java-sdk;

· nthmost-orkes opened on Feb 27, 2026

[CVE-2025-48734] HIGH: commons-beanutils 1.9.4 - PropertyUtilsBean enum suppression

securitySecurity-related issuesSecurity-related issues

vulnerabilityDependency vulnerabilityDependency vulnerability

Status: Open.

#81 In conductor-oss/java-sdk;

· nthmost-orkes opened on Feb 27, 2026

[CVE-2025-59250] HIGH: mssql-jdbc 12.6.4 - Improper input validation

securitySecurity-related issuesSecurity-related issues

vulnerabilityDependency vulnerabilityDependency vulnerability

Status: Open.

#80 In conductor-oss/java-sdk;

· nthmost-orkes opened on Feb 27, 2026

[CVE-2025-55752] HIGH: Apache Tomcat tomcat-embed-core 10.1.35 - Directory traversal with possible RCE

securitySecurity-related issuesSecurity-related issues

vulnerabilityDependency vulnerabilityDependency vulnerability

Status: Open.

#79 In conductor-oss/java-sdk;

· nthmost-orkes opened on Feb 27, 2026

[CVE-2025-66516] CRITICAL: Apache Tika tika-core 3.0.0 - Parser PDF Module Vulnerability

securitySecurity-related issuesSecurity-related issues

vulnerabilityDependency vulnerabilityDependency vulnerability

Status: Open.

#78 In conductor-oss/java-sdk;

· nthmost-orkes opened on Feb 27, 2026

TaskRunnerConfigurer behavior change of withThreadCount method

Status: Open.

#71 In conductor-oss/java-sdk;

· redteanotblack opened on Jan 22, 2026