OpenIntegrationEngine 4.5.2 vulnerabilities


## Scan

| | |
|-------------|-----------------------------------------------------------------|
| **Target** | `brightcodecompany/openintegrationengine:latest` |
| **Digest** | `sha256:8ebf4c81f07235566a328a261e646c8e7ff37578673f5910369b0374aff2286b` |
| **Scanner** | `Docker Scout 1.20.4` |
| **Timestamp** | `2026-06-01T20:58:41Z` |` |
| **Filter** | `severity ≥ High; base-image vulns excluded; fixed only` |

**Totals:** 🔴 Critical `4` · 🟠 High `24` · 🟡 Medium `0` · ⚪ Low `0`

## Findings

| CVE | Sev | CVSS | Package | Installed | Fixed in |
|------|-----|------|---------|-----------|----------|
| [CVE-2024-1597](https://scout.docker.com/v/CVE-2024-1597?s=github&n=postgresql&ns=org.postgresql&t=maven&vr=%3E%3D42.6.0%2C%3C42.6.1) | 🔴 | 10 | `maven/org.postgresql/postgresql` | `42.6.0` | `42.6.1` | |
| [CVE-2022-46337](https://scout.docker.com/v/CVE-2022-46337?s=github&n=derby&ns=org.apache.derby&t=maven&vr=%3E%3D10.1.1.0%2C%3C10.14.3) | 🔴 | 9.8 | `maven/org.apache.derby/derby` | `10.10.2.0` | `10.14.3` | |
| [CVE-2023-25330](https://scout.docker.com/v/CVE-2023-25330?s=gitlab&n=mybatis&ns=org.mybatis&t=maven&vr=%3C3.5.3.1) | 🔴 | 9.8 | `maven/org.mybatis/mybatis` | `3.1.1` | `3.5.4` | |
| [CVE-2015-1832](https://scout.docker.com/v/CVE-2015-1832?s=github&n=derby&ns=org.apache.derby&t=maven&vr=%3C%3D10.11.1.1) | 🔴 | 9.1 | `maven/org.apache.derby/derby` | `10.10.2.0` | `10.12.1.1` | |
| [CVE-2026-5598](https://scout.docker.com/v/CVE-2026-5598?s=github&n=bcprov-jdk18on&ns=org.bouncycastle&t=maven&vr=%3E%3D1.71%2C%3C1.84) | 🟠 | 8.9 | `maven/org.bouncycastle/bcprov-jdk18on` | `1.78.1` | `1.84` | |
| [CVE-2017-9096](https://scout.docker.com/v/CVE-2017-9096?s=github&n=itext&ns=com.lowagie&t=maven&vr=%3C%3D4.2.2) | 🟠 | 8.8 | `maven/com.lowagie/itext` | `2.1.7` | `not fixed` | |
| [CVE-2025-48734](https://scout.docker.com/v/CVE-2025-48734?s=github&n=commons-beanutils&ns=commons-beanutils&t=maven&vr=%3E%3D1.0%2C%3C%3D1.10.1) | 🟠 | 8.8 | `maven/commons-beanutils/commons-beanutils` | `1.9.4` | `1.11.0` | |
| [CVE-2024-47554](https://scout.docker.com/v/CVE-2024-47554?s=github&n=commons-io&ns=commons-io&t=maven&vr=%3E%3D2.0%2C%3C2.14.0) | 🟠 | 8.7 | `maven/commons-io/commons-io` | `2.13.0` | `2.14.0` | |
| [CVE-2025-48976](https://scout.docker.com/v/CVE-2025-48976?s=github&n=commons-fileupload&ns=commons-fileupload&t=maven&vr=%3E%3D1.0%2C%3C1.6.0) | 🟠 | 8.7 | `maven/commons-fileupload/commons-fileupload` | `1.5` | `1.6.0` | |
| [CVE-2025-52999](https://scout.docker.com/v/CVE-2025-52999?s=github&n=jackson-core&ns=com.fasterxml.jackson.core&t=maven&vr=%3C2.15.0) | 🟠 | 8.7 | `maven/com.fasterxml.jackson.core/jackson-core` | `2.14.3` | `2.15.0` | |
| [CVE-2026-33871](https://scout.docker.com/v/CVE-2026-33871?s=github&n=netty-codec-http2&ns=io.netty&t=maven&vr=%3C4.1.132.Final) | 🟠 | 8.7 | `maven/io.netty/netty-codec-http2` | `4.1.97.Final` | `4.1.132.Final` | |
| [CVE-2025-55163](https://scout.docker.com/v/CVE-2025-55163?s=github&n=netty-codec-http2&ns=io.netty&t=maven&vr=%3C%3D4.1.123.Final) | 🟠 | 8.2 | `maven/io.netty/netty-codec-http2` | `4.1.97.Final` | `4.1.124.Final` | |
| [CVE-2020-26945](https://scout.docker.com/v/CVE-2020-26945?s=github&n=mybatis&ns=org.mybatis&t=maven&vr=%3C3.5.6) | 🟠 | 8.1 | `maven/org.mybatis/mybatis` | `3.1.1` | `3.5.6` | |
| [CVE-2025-59250](https://scout.docker.com/v/CVE-2025-59250?s=github&n=mssql-jdbc&ns=com.microsoft.sqlserver&t=maven&vr=%3E%3D8.3.0.jre11-preview%2C%3C10.2.4.jre11) | 🟠 | 8.1 | `maven/com.microsoft.sqlserver/mssql-jdbc` | `8.4.1` | `10.2.4.jre8` | |
| [CVE-2024-47072](https://scout.docker.com/v/CVE-2024-47072?s=github&n=xstream&ns=com.thoughtworks.xstream&t=maven&vr=%3C1.4.21) | 🟠 | 7.7 | `maven/com.thoughtworks.xstream/xstream` | `1.4.20` | `1.4.21` | |
| [CVE-2017-9801](https://scout.docker.com/v/CVE-2017-9801?s=github&n=commons-email&ns=org.apache.commons&t=maven&vr=%3E%3D1.0%2C%3C%3D1.4) | 🟠 | 7.5 | `maven/org.apache.commons/commons-email` | `1.3.1` | `1.5` | |
| [CVE-2018-1294](https://scout.docker.com/v/CVE-2018-1294?s=github&n=commons-email&ns=org.apache.commons&t=maven&vr=%3C1.5) | 🟠 | 7.5 | `maven/org.apache.commons/commons-email` | `1.3.1` | `1.5` | |
| [CVE-2023-44487](https://scout.docker.com/v/CVE-2023-44487?s=gitlab&n=netty-codec-http2&ns=io.netty&t=maven&vr=%3C4.1.100) | 🟠 | 7.5 | `maven/io.netty/netty-codec-http2` | `4.1.97.Final` | `4.1.100.Final` | |
| [CVE-2025-24970](https://scout.docker.com/v/CVE-2025-24970?s=github&n=netty-handler&ns=io.netty&t=maven&vr=%3E%3D4.1.91.Final%2C%3C%3D4.1.117.Final) | 🟠 | 7.5 | `maven/io.netty/netty-handler` | `4.1.97.Final` | `4.1.118.Final` | |
| [CVE-2025-27553](https://scout.docker.com/v/CVE-2025-27553?s=github&n=commons-vfs2&ns=org.apache.commons&t=maven&vr=%3C2.10.0) | 🟠 | 7.5 | `maven/org.apache.commons/commons-vfs2` | `2.9.0` | `2.10.0` | |
| [CVE-2026-33870](https://scout.docker.com/v/CVE-2026-33870?s=github&n=netty-codec-http&ns=io.netty&t=maven&vr=%3C4.1.132.Final) | 🟠 | 7.5 | `maven/io.netty/netty-codec-http` | `4.1.97.Final` | `4.1.132.Final` | |
| [CVE-2026-42198](https://scout.docker.com/v/CVE-2026-42198?s=github&n=postgresql&ns=org.postgresql&t=maven&vr=%3E%3D42.2.0%2C%3C42.7.11) | 🟠 | 7.5 | `maven/org.postgresql/postgresql` | `42.6.0` | `42.7.11` | |
| [CVE-2026-42583](https://scout.docker.com/v/CVE-2026-42583?s=github&n=netty-codec&ns=io.netty&t=maven&vr=%3C%3D4.1.132.Final) | 🟠 | 7.5 | `maven/io.netty/netty-codec` | `4.1.97.Final` | `4.1.133.Final` | |
| [CVE-2026-42587](https://scout.docker.com/v/CVE-2026-42587?s=github&n=netty-codec-http2&ns=io.netty&t=maven&vr=%3C%3D4.1.132.Final) | 🟠 | 7.5 | `maven/io.netty/netty-codec-http2` | `4.1.97.Final` | `4.1.133.Final` | |
| [GHSA-xpw8-rcwv-8f8p](https://scout.docker.com/v/GHSA-xpw8-rcwv-8f8p?s=github&n=netty-codec-http2&ns=io.netty&t=maven&vr=%3C4.1.100.Final) | 🟠 | 7.5 | `maven/io.netty/netty-codec-http2` | `4.1.97.Final` | `4.1.100.Final` | |
| [CVE-2026-2332](https://scout.docker.com/v/CVE-2026-2332?s=github&n=jetty-http&ns=org.eclipse.jetty&t=maven&vr=%3E%3D9.4.0%2C%3C%3D9.4.59) | 🟠 | 7.4 | `maven/org.eclipse.jetty/jetty-http` | `9.4.53.v20231009` | `not fixed` | |
| [CVE-2026-42584](https://scout.docker.com/v/CVE-2026-42584?s=github&n=netty-codec-http&ns=io.netty&t=maven&vr=%3C%3D4.1.132.Final) | 🟠 | 7.3 | `maven/io.netty/netty-codec-http` | `4.1.97.Final` | `4.1.133.Final` | |
| [CVE-2024-13009](https://scout.docker.com/v/CVE-2024-13009?s=github&n=jetty-server&ns=org.eclipse.jetty&t=maven&vr=%3E%3D9.4.0%2C%3C%3D9.4.56) | 🟠 | 7.2 | `maven/org.eclipse.jetty/jetty-server` | `9.4.53.v20231009` | `9.4.57.v20241219` | |



Target	`brightcodecompany/openintegrationengine:latest`
Digest	`sha256:8ebf4c81f07235566a328a261e646c8e7ff37578673f5910369b0374aff2286b`
Scanner	`Docker Scout 1.20.4`
Timestamp	`2026-06-01T20:58:41Z`
Filter	`severity ≥ High; base-image vulns excluded; fixed only`

Navigation Menu

Uh oh!

OpenIntegrationEngine 4.5.2 vulnerabilities #2

Scan

Findings

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

CVE	Sev	CVSS	Package	Installed	Fixed in
CVE-2024-1597	🔴	10	`maven/org.postgresql/postgresql`	`42.6.0`	`42.6.1`
CVE-2022-46337	🔴	9.8	`maven/org.apache.derby/derby`	`10.10.2.0`	`10.14.3`
CVE-2023-25330	🔴	9.8	`maven/org.mybatis/mybatis`	`3.1.1`	`3.5.4`
CVE-2015-1832	🔴	9.1	`maven/org.apache.derby/derby`	`10.10.2.0`	`10.12.1.1`
CVE-2026-5598	🟠	8.9	`maven/org.bouncycastle/bcprov-jdk18on`	`1.78.1`	`1.84`
CVE-2017-9096	🟠	8.8	`maven/com.lowagie/itext`	`2.1.7`	`not fixed`
CVE-2025-48734	🟠	8.8	`maven/commons-beanutils/commons-beanutils`	`1.9.4`	`1.11.0`
CVE-2024-47554	🟠	8.7	`maven/commons-io/commons-io`	`2.13.0`	`2.14.0`
CVE-2025-48976	🟠	8.7	`maven/commons-fileupload/commons-fileupload`	`1.5`	`1.6.0`
CVE-2025-52999	🟠	8.7	`maven/com.fasterxml.jackson.core/jackson-core`	`2.14.3`	`2.15.0`
CVE-2026-33871	🟠	8.7	`maven/io.netty/netty-codec-http2`	`4.1.97.Final`	`4.1.132.Final`
CVE-2025-55163	🟠	8.2	`maven/io.netty/netty-codec-http2`	`4.1.97.Final`	`4.1.124.Final`
CVE-2020-26945	🟠	8.1	`maven/org.mybatis/mybatis`	`3.1.1`	`3.5.6`
CVE-2025-59250	🟠	8.1	`maven/com.microsoft.sqlserver/mssql-jdbc`	`8.4.1`	`10.2.4.jre8`
CVE-2024-47072	🟠	7.7	`maven/com.thoughtworks.xstream/xstream`	`1.4.20`	`1.4.21`
CVE-2017-9801	🟠	7.5	`maven/org.apache.commons/commons-email`	`1.3.1`	`1.5`
CVE-2018-1294	🟠	7.5	`maven/org.apache.commons/commons-email`	`1.3.1`	`1.5`
CVE-2023-44487	🟠	7.5	`maven/io.netty/netty-codec-http2`	`4.1.97.Final`	`4.1.100.Final`
CVE-2025-24970	🟠	7.5	`maven/io.netty/netty-handler`	`4.1.97.Final`	`4.1.118.Final`
CVE-2025-27553	🟠	7.5	`maven/org.apache.commons/commons-vfs2`	`2.9.0`	`2.10.0`
CVE-2026-33870	🟠	7.5	`maven/io.netty/netty-codec-http`	`4.1.97.Final`	`4.1.132.Final`
CVE-2026-42198	🟠	7.5	`maven/org.postgresql/postgresql`	`42.6.0`	`42.7.11`
CVE-2026-42583	🟠	7.5	`maven/io.netty/netty-codec`	`4.1.97.Final`	`4.1.133.Final`
CVE-2026-42587	🟠	7.5	`maven/io.netty/netty-codec-http2`	`4.1.97.Final`	`4.1.133.Final`
GHSA-xpw8-rcwv-8f8p	🟠	7.5	`maven/io.netty/netty-codec-http2`	`4.1.97.Final`	`4.1.100.Final`
CVE-2026-2332	🟠	7.4	`maven/org.eclipse.jetty/jetty-http`	`9.4.53.v20231009`	`not fixed`
CVE-2026-42584	🟠	7.3	`maven/io.netty/netty-codec-http`	`4.1.97.Final`	`4.1.133.Final`
CVE-2024-13009	🟠	7.2	`maven/org.eclipse.jetty/jetty-server`	`9.4.53.v20231009`	`9.4.57.v20241219`

Uh oh!

OpenIntegrationEngine 4.5.2 vulnerabilities #2

Description

Scan

Findings

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions