apicurio-registry vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the apicurio-registry package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
L GHSA-3p8m-j85q-pgmj	<3.0.13-r1
L Improper Handling of Highly Compressed Data (Data Amplification)	<3.0.13-r1
L GHSA-prj3-ccx8-p6x4	<3.0.12-r1
L Allocation of Resources Without Limits or Throttling	<3.0.12-r1
H Improper Neutralization	<3.0.11-r1
L GHSA-9342-92gg-6v29	<3.0.11-r1
L Uncontrolled Recursion	<3.0.9-r6
L GHSA-xwmg-2g98-w7v9	<3.0.9-r6
L Uncontrolled Recursion	<3.0.9-r5
L GHSA-j288-q9x7-2f5v	<3.0.9-r5
L GHSA-hq9p-pm7w-8p54	<3.0.9-r2
L Improper Authentication	<3.0.9-r2
L GHSA-vgq5-3255-v292	<3.0.9-r1
L CVE-2025-27817	<3.0.9-r1
L CVE-2025-48734	<3.0.8-r0
L GHSA-wxr5-93ph-8wr9	<3.0.8-r0
C XML External Entity (XXE) Injection	<3.0.7-r1
L GHSA-vrpq-qp53-qv56	<3.0.7-r1
L GHSA-gfh6-3pqw-x2j4	<3.0.6-r2
L GHSA-4fwr-mh5q-hchh	<3.0.6-r2
H Improperly Controlled Sequential Memory Allocation	<3.0.6-r2
H Memory Leak	<3.0.6-r2
H HTTP Request Smuggling	<3.0.6-r1
L GHSA-cxrx-q234-m22m	<3.0.6-r1
L CVE-2025-24970	<3.0.6-r1
L CVE-2024-57699	<3.0.6-r1
L GHSA-pq2g-wx69-c263	<3.0.6-r1
L Resource Exhaustion	<3.0.6-r1
L GHSA-xq3w-v528-46rv	<3.0.6-r1
L GHSA-4g8c-wm8x-jfhw	<3.0.6-r1
L GHSA-3832-9276-x7gf	<3.0.6-r2
M Improper Certificate Validation	<3.0.6-r2