camunda-zeebe-8.8

Direct Vulnerabilities

Known vulnerabilities in the camunda-zeebe-8.8 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L CVE-2025-37727	<8.8.40-r0
L GHSA-56r7-h6mw-rcfv	<8.8.40-r0
L CVE-2024-52980	<8.8.39-r1
L GHSA-m9gh-789g-q5pv	<8.8.39-r1
H CVE-2025-37731	<8.8.39-r1
L GHSA-ghfh-p92w-j4mg	<8.8.39-r1
L GHSA-qp49-qgx5-5m26	<8.8.39-r1
C CVE-2026-8763	<8.8.39-r1
H CVE-2026-13506	<8.8.39-r1
L GHSA-9pwp-9qqc-pr26	<8.8.39-r1
L GHSA-gcx9-497g-6cp6	<8.8.37-r1
L Incorrect Authorization	<8.8.37-r1
L GHSA-h3x4-894j-xpx5	<8.8.37-r1
L Authentication Bypass	<8.8.37-r1
L Improper Access Control	<8.8.37-r1
L GHSA-9xv2-5v5q-p794	<8.8.37-r1
L CVE-2026-18401	<8.8.22-r0
L GHSA-6qm2-mcq7-53qp	<8.8.22-r0
L Cleartext Transmission of Sensitive Information	<8.8.36-r2
L GHSA-g9jj-cgmh-9f38	<8.8.36-r2
L GHSA-qxvw-fvwx-5cp7	<8.8.36-r2
L GHSA-8c42-7qj2-3j46	<8.8.36-r1
H Information Exposure Through Caching	<8.8.36-r1
L GHSA-xvr9-35cr-46v9	<8.8.36-r2
L Insufficiently Protected Credentials	<8.8.36-r2
L Inappropriate Encoding for Output Context	<8.8.36-r2
L Missing Release of Resource after Effective Lifetime	<8.8.35-r1
L GHSA-hjcp-jmpx-g3qm	<8.8.35-r1
H Missing Release of Resource after Effective Lifetime	<8.8.32-r1
L Resource Exhaustion	<8.8.32-r1
H Allocation of Resources Without Limits or Throttling	<8.8.32-r1
L Resource Exhaustion	<8.8.32-r1
L GHSA-gcjf-9mgh-3p7g	<8.8.32-r1
L Improper Access Control	<8.8.32-r1
L GHSA-jppx-w49h-x2qq	<8.8.32-r1
M CRLF Injection	<8.8.32-r1
L GHSA-c69g-56f8-xwqj	<8.8.32-r1
L GHSA-mvh2-crg5-v77c	<8.8.32-r1
L GHSA-6cqp-g7gg-8hr5	<8.8.32-r1
M HTTP Request Smuggling	<8.8.32-r1
L GHSA-4mp9-239f-g9hg	<8.8.32-r1
L GHSA-6jqx-86gh-f27w	<8.8.32-r1
H HTTP Request Smuggling	<8.8.32-r1
H Resource Exhaustion	<8.8.32-r1
L GHSA-q4f6-jm68-57ww	<8.8.32-r1
L GHSA-558v-64gr-wgg4	<8.8.32-r1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<8.8.32-r1
L GHSA-mfg7-5gfp-c4w3	<8.8.32-r1
L Incorrect Authorization	<8.8.32-r0
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<8.8.32-r0
L GHSA-mhm7-754m-9p8w	<8.8.32-r0
L GHSA-5gvw-p9qm-jgwh	<8.8.32-r0
L GHSA-5jmj-h7xm-6q6v	<8.8.32-r0
L GHSA-676x-f7gg-47vc	<8.8.26-r0
L Use of Insufficiently Random Values	<8.8.26-r0
L Improper Access Control	<8.8.26-r0
L GHSA-x4gw-5cx5-pgmh	<8.8.26-r0
L Information Exposure	<8.8.26-r0
L GHSA-5pvg-856g-cp85	<8.8.26-r0
L GHSA-5x3r-wrvg-rp6q	<8.8.26-r0
C Insufficient Verification of Data Authenticity	<8.8.26-r0
L GHSA-w573-9ffj-6ff9	<8.8.26-r0
L GHSA-xmv7-r254-6q78	<8.8.26-r0
L Resource Exhaustion	<8.8.26-r0
L Allocation of Resources Without Limits or Throttling	<8.8.26-r0
L GHSA-3qp7-7mw8-wx86	<8.8.26-r0
C Insufficient Verification of Data Authenticity	<8.8.26-r0
L GHSA-r29c-68gh-xp6x	<8.8.24-r1
L GHSA-mj4r-2hfc-f8p6	<8.8.24-r1
L GHSA-5m62-pw8w-7w9f	<8.8.24-r1
L GHSA-m4cv-j2px-7723	<8.8.24-r1
C HTTP Request Smuggling	<8.8.24-r1
C Improper Input Validation	<8.8.24-r1
L GHSA-gx5v-xp9w-j4cg	<8.8.24-r1
L Improper Handling of Case Sensitivity	<8.8.24-r1
L Information Exposure	<8.8.24-r1
L Information Exposure	<8.8.24-r1
L GHSA-57rv-r2g8-2cj3	<8.8.24-r1
L Improper Input Validation	<8.8.24-r1
L GHSA-fv25-8xcx-gqjc	<8.8.24-r1
L GHSA-38f8-5428-x5cv	<8.8.24-r1
L GHSA-45q3-82m4-75jr	<8.8.24-r1
L GHSA-v8h7-rr48-vmmv	<8.8.24-r1
L GHSA-9m89-8frq-c98c	<8.8.24-r1
L Improper Authorization	<8.8.24-r1
L Resource Exhaustion	<8.8.24-r1
L Allocation of Resources Without Limits or Throttling	<8.8.24-r1
L Authentication Bypass	<8.8.24-r1
H HTTP Response Splitting	<8.8.24-r1
L GHSA-f6hv-jmp6-3vwv	<8.8.24-r1
L GHSA-cm33-6792-r9fm	<8.8.24-r1
L CRLF Injection	<8.8.24-r1
L Resource Exhaustion	<8.8.24-r1
L Integer Overflow or Wraparound	<8.8.24-r1
L GHSA-xxqh-mfjm-7mv9	<8.8.24-r1
H HTTP Request Smuggling	<8.8.24-r1
L GHSA-5mp6-jrq3-r938	<8.8.24-r1
C HTTP Request Smuggling	<8.8.24-r1
L GHSA-h6fc-48rj-7qqh	<8.8.24-r1
L Missing Release of Resource after Effective Lifetime	<8.8.24-r0
L GHSA-rwm7-x88c-3g2p	<8.8.24-r0
L CVE-2026-22751	<8.8.24-r0
L CVE-2026-40973	<8.8.24-r0
L GHSA-wwpq-f5c3-7hvx	<8.8.24-r0
L Allocation of Resources Without Limits or Throttling	<8.8.24-r0
L GHSA-vxf7-qj7q-83fh	<8.8.24-r0
M CVE-2026-22748	<8.8.24-r0
L GHSA-98qh-xjc8-98pq	<8.8.24-r0
L CVE-2026-22746	<8.8.24-r0
L GHSA-cvc6-q2cp-2xhw	<8.8.24-r0
L GHSA-x2wq-9x2f-fhj7	<8.8.24-r0
L GHSA-c3fc-8qff-9hwx	<8.8.23-r0
L CVE-2026-0636	<8.8.23-r0
L CVE-2026-5588	<8.8.23-r0
L GHSA-wg6q-6289-32hp	<8.8.23-r0
H Missing Authentication for Critical Function	<8.8.22-r0
L GHSA-8hfc-fq58-r658	<8.8.22-r0
L CVE-2026-29145	<8.8.22-r0
L GHSA-24j9-x2wg-9qv6	<8.8.22-r0
L CVE-2026-29129	<8.8.22-r0
L GHSA-8mc5-53m5-3qj2	<8.8.22-r0
L GHSA-mf92-479x-3373	<8.8.22-r0
L GHSA-95jq-rwvf-vjx4	<8.8.22-r0
L GHSA-4773-3jfm-qmx3	<8.8.22-r0
L GHSA-w35j-pv5h-q9q9	<8.8.22-r0
H Improper Encoding or Escaping of Output	<8.8.22-r0
L GHSA-72hv-8253-57qq	<8.8.22-r0
L GHSA-69cc-cv78-qc8g	<8.8.22-r0
L Open Redirect	<8.8.22-r0
L GHSA-6hcq-hmm3-jj3c	<8.8.22-r0
H Allocation of Resources Without Limits or Throttling	<8.8.22-r0
L CVE-2026-29146	<8.8.22-r0
L CVE-2026-34500	<8.8.22-r0
L Improper Encoding or Escaping of Output	<8.8.22-r0
H CVE-2026-22733	<8.8.22-r0
L CVE-2026-22732	<8.8.22-r0
L CVE-2026-22735	<8.8.22-r0
L HTTP Request Smuggling	<8.8.22-r0
L GHSA-mgvc-8q2h-5pgc	<8.8.22-r0
L GHSA-3pxv-7cmr-fjr4	<8.8.22-r0
L GHSA-9m3c-qcxr-9x87	<8.8.22-r0
L Improper Input Validation	<8.8.22-r0
L CVE-2026-22737	<8.8.22-r0
H Improper Encoding or Escaping of Output	<8.8.22-r0
L GHSA-x4m4-345f-5h5g	<8.8.22-r0
L GHSA-w9fj-cfpg-grvv	<8.8.22-r0
L GHSA-h468-7pvh-8vr8	<8.8.22-r0
L Information Exposure Through Log Files	<8.8.22-r0
L GHSA-pwqr-wmgm-9rr8	<8.8.22-r0
L GHSA-rv64-5gf8-9qq8	<8.8.22-r0
L GHSA-cw39-r4h6-8j3x	<8.8.9-r1
L Resource Exhaustion	<8.8.9-r1
M Improper Certificate Validation	<8.8.8-r2
L GHSA-vc5p-v9hr-52mj	<8.8.8-r2
L CRLF Injection	<8.8.8-r1
L GHSA-84h7-rjj3-6jx4	<8.8.8-r1

Vulnerability

Vulnerable Version

CVE-2025-37727

<8.8.40-r0