GHSA-prv5-c2px-j9q3
NoneCVSS
—
EPSS
—
Published
Dec 12, 2025
CISA due date
—
The record
Apache StreamPark has a hard-coded encryption key
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | org.apache.streampark:streampark | 2.0.0 | 2.1.7 |
| maven | org.apache.streampark/streampark | 2.0.0 | 2.1.7 |
Related vulnerabilities
- CVE-2025-54947 Apache StreamPark has a hard-coded encryption key Same vulnerability
- GHSA-3hg2-rh4r-8qf6 Apache StreamPark: Use the user’s password as the secret key Vulnerability Also affects org.apache.streampark:streampark
- GHSA-749j-2hp6-8cxm Apache StreamPark uses a Weak Encryption Algorithm Also affects org.apache.streampark:streampark
- CVE-2025-54981 Apache StreamPark uses a Weak Encryption Algorithm Also affects org.apache.streampark:streampark
- CVE-2025-53960 Apache StreamPark: Use the user’s password as the secret key Vulnerability Also affects org.apache.streampark:streampark
- CVE-2026-79735 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-321
- CVE-2026-78486 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-321
- CVE-2026-78481 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-321