infinispan-server-core vulnerabilities

CVEs whose affected-version data names the infinispan-server-core package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-92171Medium· 6.5

today

Infinispan-operator: infinispan operator: sensitive information disclosure due pod args store

A flaw was found in the Infinispan Operator for Red Hat Data Grid. When cross-site (xsite) TLS is enabled, the operator launches the Gossip Router container with keystore and truststore passwords passed as plain-text command-line argumen…

▾ SunlitRed Hat · infinispan-server-corevia CVEORG