debezium records
8 published records for vendor debezium.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm2
- CWE-400 Uncontrolled Resource Consumption2
- CWE-385 Covert Timing Channel1
- CWE-829 Inclusion of Functionality from Untrusted Control Sphere1
- CWE-90 Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2025-70974No exploit | Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a Javaalibaba · fastjson · CWE-829 | Critical10.0 | — | 0.7% | Jan 9, 2026 |
37Monitor | CVE-2025-14813No exploit | GOSTCTR implementation unable to process more than 255 blocks correctlylegion of the bouncy castle inc. · bc-java · CWE-327 | Critical9.3 | — | 0.3% | Apr 15, 2026 |
35Monitor | CVE-2026-5598No exploit | Non-constant time comparisons risk private key leakage in FrodoKEM.legion of the bouncy castle inc. · bc-java · CWE-385 | High8.9 | — | 0.8% | Apr 15, 2026 |
35Monitor | CVE-2026-27830No exploit | c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString propertyswaldman · c3p0 · CWE-94 | High8.9 | — | 0.5% | Feb 25, 2026 |
30Monitor | CVE-2026-40984No exploit | Micrometer HTTP server instrumentations DoS vulnerabilityspring · micrometer · CWE-400 | High7.5 | — | 0.7% | Jun 9, 2026 |
30Monitor | CVE-2026-40983No exploit | Micrometer gRPC server instrumentation DoS vulnerabilityspring · micrometer · CWE-400 | High7.5 | — | 0.6% | Jun 9, 2026 |
25Monitor | CVE-2026-5588No exploit | PKIX draft CompositeVerifier accepts empty signature sequence as valid.legion of the bouncy castle inc. · bc-java · CWE-327 | Medium6.3 | — | 0.7% | Apr 15, 2026 |
22Monitor | CVE-2026-0636No exploit | LDAP Injection Vulnerability in LDAPStoreHelper.javalegion of the bouncy castle inc. · bc-java · CWE-90 | Medium5.5 | — | 0.5% | Apr 15, 2026 |
- CVE-2025-7097440Plan
Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a Java
CriticalCVSS 10.0No exploitEPSS 0%alibaba · fastjsonJan 9, 2026
- CVE-2025-1481337Monitor
GOSTCTR implementation unable to process more than 255 blocks correctly
CriticalCVSS 9.3No exploitEPSS 0%legion of the bouncy castle inc. · bc-javaApr 15, 2026
- CVE-2026-559835Monitor
Non-constant time comparisons risk private key leakage in FrodoKEM.
HighCVSS 8.9No exploitEPSS 0%legion of the bouncy castle inc. · bc-javaApr 15, 2026
- CVE-2026-2783035Monitor
c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property
HighCVSS 8.9No exploitEPSS 0%swaldman · c3p0Feb 25, 2026
- CVE-2026-4098430Monitor
Micrometer HTTP server instrumentations DoS vulnerability
HighCVSS 7.5No exploitEPSS 0%spring · micrometerJun 9, 2026
- CVE-2026-4098330Monitor
Micrometer gRPC server instrumentation DoS vulnerability
HighCVSS 7.5No exploitEPSS 0%spring · micrometerJun 9, 2026
- CVE-2026-558825Monitor
PKIX draft CompositeVerifier accepts empty signature sequence as valid.
MediumCVSS 6.3No exploitEPSS 0%legion of the bouncy castle inc. · bc-javaApr 15, 2026
- CVE-2026-063622Monitor
LDAP Injection Vulnerability in LDAPStoreHelper.java
MediumCVSS 5.5No exploitEPSS 0%legion of the bouncy castle inc. · bc-javaApr 15, 2026