Search results

CVE-2026-54512

Status: Open.

#4251 In flyway/flyway;

· karavanis opened on Jun 24, 2026

Replace the buggy (in case of OIDC) Flyway JDBC driver with known security flaws

Status: Open.

#4250 In flyway/flyway;

· evgf opened on Jun 23, 2026

Flyway SQL parser fail to parse direct snowflake DROP AGENT statement

Status: Open.

#4248 In flyway/flyway;

· ntcong1310 opened on Jun 19, 2026

Add/formalise MariaDB 11.8, 12.3 LTS support

Status: Open.

#4247 In flyway/flyway;

· oliverlockwood opened on Jun 18, 2026

slf4j-api jar is missing in /lib (flyway-commandline)

Status: Open.

#4245 In flyway/flyway;

· beth-soptim opened on Jun 15, 2026

Transitive Netty dependencies via Couchbase core-io contain multiple CVEs (CVE-2026-42579, CVE-2026-42577)

Status: Open.

#4244 In flyway/flyway;

· hsuwting opened on Jun 12, 2026

Native connectors have hardcoded process timeout of 5 minutes

Status: Open.

#4243 In flyway/flyway;

· cermakcz opened on Jun 4, 2026

flyway-database-nc-mongodb hard-codes "mongosh" on the host PATH

s: needs investigation

Status: Open.

#4242 In flyway/flyway;

· ozgliderpilot opened on May 22, 2026

ClasspathSqlMigrationScanner.matchesPath NPEs under classloaders returning null for getResource(".")

Status: Open.

#4241 In flyway/flyway;

· ozgliderpilot opened on May 20, 2026

[Bug] Java callbacks are not logged to console - but they do run

Status: Open.

#4240 In flyway/flyway;

· pyrocks opened on May 17, 2026

Open CVEs from Netty (CVE-2026-42583, CVE-2026-42584, CVE-2026-42584)

Status: Open.

#4239 In flyway/flyway;

· sjenkinsali opened on May 8, 2026

Upgrade Couchbase java-client dependency to fix CVE-2026-33870 and CVE-2026-33871 (Netty vulnerabilities)

Status: Open.

#4236 In flyway/flyway;

· hsuwting opened on May 5, 2026