chore(deps): update actions/setup-python action to v7 by renovate-wenisch-tech[bot] · Pull Request #46 · wenisch-tech/proxera

renovate-wenisch-tech · 2026-07-20T04:03:57Z

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-python	action	major	`v6` → `v7`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/setup-python (actions/setup-python)

`v7.0.0`

Compare Source

What's Changed

Enhancements

Migrate to ESM and upgrade dependencies by @priyagupta108 in #1330
Pin SHA commits and update docs with latest versions by @HarithaVattikuti in #1338
Remove the pip-install input by @gowridurgad in #1336

Bug Fix

Fix to Classify stderr warning messages as warnings instead of errors in annotations by @lmvysakh in #1335
Validate and retry manifest fetch to prevent silent failures by @priyagupta108 in #1332

Dependency Upgrade

Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data by @dependabot in #1328
Remove EOL Python versions and Bumps numpy text fixture by @priya-kinthali in #1333
Upgrade @actions/cache to 6.2.0 by @philip-gai in #1337

New Contributors

@lmvysakh made their first contribution in #1335
@philip-gai made their first contribution in #1337

Full Changelog: actions/setup-python@v6...v7.0.0

`v7`

Compare Source

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

github-actions · 2026-07-20T04:06:59Z

Container Endpoint Check

Image: ghcr.io/wenisch-tech/proxera:0.12.21-pr.46.271

Endpoint	URL	Status	Latency
✅ Proxy Health	http://localhost:18080/actuator/health	200	225ms
✅ Admin Health	http://localhost:18080/actuator/health	200	14ms
✅ Admin Login	http://localhost:18080/login	200	245ms
✅ Admin Dashboard	http://localhost:18080/admin/	302	17ms

Container logs (last 50 lines):

2026-07-20T04:06:31.726Z  INFO 1 --- [           main] com.zaxxer.hikari.HikariDataSource       : HikariPool-1 - Start completed.
2026-07-20T04:06:31.741Z  INFO 1 --- [           main] org.flywaydb.core.FlywayExecutor         : Database: jdbc:h2:file:./data/proxera (H2 2.4)
2026-07-20T04:06:31.799Z  WARN 1 --- [           main] o.f.c.internal.database.base.Database    : Using H2 2.4.240 which is newer than the version Flyway has been verified with. The latest verified version of H2 is 2.3.232.
2026-07-20T04:06:31.831Z  INFO 1 --- [           main] o.f.c.i.s.JdbcTableSchemaHistory         : Schema history table "PUBLIC"."flyway_schema_history" does not exist yet
2026-07-20T04:06:31.834Z  INFO 1 --- [           main] o.f.core.internal.command.DbValidate     : Successfully validated 9 migrations (execution time 00:00.017s)
2026-07-20T04:06:31.844Z  INFO 1 --- [           main] org.flywaydb.core.Flyway                 : All configured schemas are empty; a baseline marker will not be added to Flyway's schema history table. A baseline or migration script with a lower version than the baseline version may execute if available. Check the Schemas parameter if this is not intended. See https://help.red-gate.com/help/flyway-cli12/help_4.aspx?topic=baseline-on-migrate for more info
2026-07-20T04:06:31.845Z  INFO 1 --- [           main] o.f.c.i.s.JdbcTableSchemaHistory         : Creating Schema History table "PUBLIC"."flyway_schema_history" ...
2026-07-20T04:06:31.880Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Current version of schema "PUBLIC": << Empty Schema >>
2026-07-20T04:06:31.898Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "1 - init"
2026-07-20T04:06:31.927Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "2 - add api key revoked"
2026-07-20T04:06:31.938Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "3 - rename client to agent"
2026-07-20T04:06:31.948Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "4 - move prefix to domains"
2026-07-20T04:06:31.977Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "5 - add settings"
2026-07-20T04:06:31.982Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "6 - add agent remote ip"
2026-07-20T04:06:31.991Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "7 - add route forward client ip headers"
2026-07-20T04:06:32.001Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "8 - allow unmatched access log entries"
2026-07-20T04:06:32.005Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "9 - add route preserve host header"
2026-07-20T04:06:32.017Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Successfully applied 9 migrations to schema "PUBLIC", now at version v9 (execution time 00:00.070s)
2026-07-20T04:06:32.158Z  INFO 1 --- [           main] org.hibernate.orm.jpa                    : HHH008540: Processing PersistenceUnitInfo [name: default]
2026-07-20T04:06:32.230Z  INFO 1 --- [           main] org.hibernate.orm.core                   : HHH000001: Hibernate ORM core version 7.4.1.Final
2026-07-20T04:06:32.886Z  INFO 1 --- [           main] o.s.o.j.p.SpringPersistenceUnitInfo      : No LoadTimeWeaver setup: ignoring JPA class transformer
2026-07-20T04:06:32.966Z  INFO 1 --- [           main] org.hibernate.orm.connections.pooling    : HHH10001005: Database info:
	Database JDBC URL [jdbc:h2:file:./data/proxera]
	Database driver: H2 JDBC Driver
	Database dialect: H2Dialect
	Database version: 2.4.240
	Default catalog/schema: proxera/PUBLIC
	Autocommit mode: undefined/unknown
	Isolation level: READ_COMMITTED [default READ_COMMITTED]
	JDBC fetch size: 100
	Pool: DataSourceConnectionProvider
	Minimum pool size: undefined/unknown
	Maximum pool size: undefined/unknown
2026-07-20T04:06:34.056Z  INFO 1 --- [           main] org.hibernate.orm.core                   : HHH000489: No JTA platform available (set 'hibernate.transaction.jta.platform' to enable JTA platform integration)
2026-07-20T04:06:34.064Z  INFO 1 --- [           main] j.LocalContainerEntityManagerFactoryBean : Initialized JPA EntityManagerFactory for persistence unit 'default'
2026-07-20T04:06:34.137Z  INFO 1 --- [           main] o.s.d.j.r.query.QueryEnhancerFactories   : Hibernate is in classpath; If applicable, HQL parser will be used.
2026-07-20T04:06:34.391Z DEBUG 1 --- [           main] t.w.proxera.security.ApiKeyAuthFilter    : Filter 'apiKeyAuthFilter' configured for use
2026-07-20T04:06:35.410Z DEBUG 1 --- [           main] t.w.proxera.service.IngressService       : Not running in Kubernetes - ingress management unavailable
2026-07-20T04:06:35.694Z  INFO 1 --- [           main] r$InitializeUserDetailsManagerConfigurer : Global AuthenticationManager configured with UserDetailsService bean with name proxeraUserDetailsService
2026-07-20T04:06:35.974Z DEBUG 1 --- [           main] o.s.w.s.s.s.WebSocketHandlerMapping      : Patterns [/tunnel] in 'webSocketHandlerMapping'
2026-07-20T04:06:36.470Z  INFO 1 --- [           main] o.s.b.h.a.H2ConsoleAutoConfiguration     : H2 console available at '/h2-console'. Database available at 'jdbc:h2:file:./data/proxera'
2026-07-20T04:06:36.538Z  INFO 1 --- [           main] o.s.b.a.e.web.EndpointLinksResolver      : Exposing 4 endpoints beneath base path '/actuator'
2026-07-20T04:06:36.632Z  INFO 1 --- [           main] o.s.boot.tomcat.TomcatWebServer          : Tomcat started on port 8080 (http) with context path '/'
2026-07-20T04:06:36.656Z  INFO 1 --- [           main] t.wenisch.proxera.ProxeraApplication     : Started ProxeraApplication in 8.787 seconds (process running for 9.49)
2026-07-20T04:06:36.817Z  WARN 1 --- [           main] t.wenisch.proxera.service.UserService    : No users found — creating default admin/admin. CHANGE THE PASSWORD!
2026-07-20T04:06:37.054Z  WARN 1 --- [           main] o.s.core.events.SpringDocAppInitializer  : SpringDoc /v3/api-docs endpoint is enabled by default. To disable it in production, set the property 'springdoc.api-docs.enabled=false'
2026-07-20T04:06:57.217Z  INFO 1 --- [omcat-handler-0] o.a.c.c.C.[Tomcat].[localhost].[/]       : Initializing Spring DispatcherServlet 'dispatcherServlet'
2026-07-20T04:06:57.218Z  INFO 1 --- [omcat-handler-0] o.s.web.servlet.DispatcherServlet        : Initializing Servlet 'dispatcherServlet'
2026-07-20T04:06:57.220Z  INFO 1 --- [omcat-handler-0] o.s.web.servlet.DispatcherServlet        : Completed initialization in 2 ms
2026-07-20T04:06:57.288Z DEBUG 1 --- [omcat-handler-0] t.w.proxera.service.RoutingService       : Route cache built with 0 domain entries

Container state:

{"Status":"running","Running":true,"Paused":false,"Restarting":false,"OOMKilled":false,"Dead":false,"Pid":3422,"ExitCode":0,"Error":"","StartedAt":"2026-07-20T04:06:27.031852796Z","FinishedAt":"0001-01-01T00:00:00Z"}

github-actions · 2026-07-20T04:07:33Z

Trivy vulnerability report

Image: ghcr.io/wenisch-tech/proxera:0.12.21-pr.46.271


Report Summary

┌─────────────────────────────────────────────────────────────────┬───────┬─────────────────┐
│                             Target                              │ Type  │ Vulnerabilities │
├─────────────────────────────────────────────────────────────────┼───────┼─────────────────┤
│ ghcr.io/wenisch-tech/proxera:0.12.21-pr.46.271 (wolfi 20230201) │ wolfi │        0        │
├─────────────────────────────────────────────────────────────────┼───────┼─────────────────┤
│ app/app.jar                                                     │  jar  │        1        │
└─────────────────────────────────────────────────────────────────┴───────┴─────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.72/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


Java (jar)
==========
Total: 1 (MEDIUM: 1, HIGH: 0, CRITICAL: 0)

┌───────────────────────────────────────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────────────────────┬────────────────────────────────────────────────────────────┐
│                        Library                        │ Vulnerability  │ Severity │ Status │ Installed Version │         Fixed Version         │                           Title                            │
├───────────────────────────────────────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────────────────────┼────────────────────────────────────────────────────────────┤
│ com.fasterxml.jackson.core:jackson-databind (app.jar) │ CVE-2026-54515 │ MEDIUM   │ fixed  │ 2.21.4            │ 3.1.4, 2.18.9, 2.21.5, 2.22.1 │ jackson-databind: jackson-databind: Ignored properties can │
│                                                       │                │          │        │                   │                               │ be unexpectedly modified                                   │
│                                                       │                │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-54515                 │
└───────────────────────────────────────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────────────────────┴────────────────────────────────────────────────────────────┘

github-actions · 2026-07-20T04:16:08Z

Trivy vulnerability report (native-distroless)

Image: ghcr.io/wenisch-tech/proxera:native-distroless-0.12.21-pr.46.271


Report Summary

┌─────────────────────────────────────────────────────────────────────────────────┬────────┬─────────────────┐
│                                     Target                                      │  Type  │ Vulnerabilities │
├─────────────────────────────────────────────────────────────────────────────────┼────────┼─────────────────┤
│ ghcr.io/wenisch-tech/proxera:native-distroless-0.12.21-pr.46.271 (debian 12.15) │ debian │        4        │
├─────────────────────────────────────────────────────────────────────────────────┼────────┼─────────────────┤
│ app/proxera.jar                                                                 │  jar   │        1        │
└─────────────────────────────────────────────────────────────────────────────────┴────────┴─────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.72/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


ghcr.io/wenisch-tech/proxera:native-distroless-0.12.21-pr.46.271 (debian 12.15)
===============================================================================
Total: 4 (MEDIUM: 4, HIGH: 0, CRITICAL: 0)

┌─────────┬───────────────┬──────────┬──────────┬───────────────────┬───────────────┬──────────────────────────────────────────────────────────────┐
│ Library │ Vulnerability │ Severity │  Status  │ Installed Version │ Fixed Version │                            Title                             │
├─────────┼───────────────┼──────────┼──────────┼───────────────────┼───────────────┼──────────────────────────────────────────────────────────────┤
│ libc6   │ CVE-2026-5435 │ MEDIUM   │ affected │ 2.36-9+deb12u14   │               │ glibc: glibc: Out-of-bounds write via TSIG record processing │
│         │               │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-5435                    │
│         ├───────────────┤          │          │                   ├───────────────┼──────────────────────────────────────────────────────────────┤
│         │ CVE-2026-5450 │          │          │                   │               │ glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc`     │
│         │               │          │          │                   │               │ format specifier and...                                      │
│         │               │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-5450                    │
│         ├───────────────┤          │          │                   ├───────────────┼──────────────────────────────────────────────────────────────┤
│         │ CVE-2026-5928 │          │          │                   │               │ glibc: glibc: Information disclosure or denial of service    │
│         │               │          │          │                   │               │ via ungetwc function with...                                 │
│         │               │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-5928                    │
│         ├───────────────┤          │          │                   ├───────────────┼──────────────────────────────────────────────────────────────┤
│         │ CVE-2026-6238 │          │          │                   │               │ glibc: glibc: Application crash or uninitialized memory read │
│         │               │          │          │                   │               │ via crafted DNS response...                                  │
│         │               │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-6238                    │
└─────────┴───────────────┴──────────┴──────────┴───────────────────┴───────────────┴──────────────────────────────────────────────────────────────┘

Java (jar)
==========
Total: 1 (MEDIUM: 1, HIGH: 0, CRITICAL: 0)

┌───────────────────────────────────────────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────────────────────┬────────────────────────────────────────────────────────────┐
│                          Library                          │ Vulnerability  │ Severity │ Status │ Installed Version │         Fixed Version         │                           Title                            │
├───────────────────────────────────────────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────────────────────┼────────────────────────────────────────────────────────────┤
│ com.fasterxml.jackson.core:jackson-databind (proxera.jar) │ CVE-2026-54515 │ MEDIUM   │ fixed  │ 2.21.4            │ 3.1.4, 2.18.9, 2.21.5, 2.22.1 │ jackson-databind: jackson-databind: Ignored properties can │
│                                                           │                │          │        │                   │                               │ be unexpectedly modified                                   │
│                                                           │                │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-54515                 │
└───────────────────────────────────────────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────────────────────┴────────────────────────────────────────────────────────────┘

github-actions · 2026-07-20T04:16:09Z

Native Container Endpoint Check

Image: ghcr.io/wenisch-tech/proxera:native-distroless-0.12.21-pr.46.271

Endpoint	URL	Status	Latency
✅ Proxy Health	http://localhost:18081/actuator/health	200	21ms
✅ Admin Health	http://localhost:18081/actuator/health	200	8ms
✅ Admin Login	http://localhost:18081/login	200	38ms
✅ Admin Dashboard	http://localhost:18081/admin/	302	9ms

Container logs (last 50 lines):

2026-07-20T04:14:34.090Z  WARN 1 --- [           main] o.f.c.i.s.classpath.ClassPathScanner     : Unable to scan location: /db/migration (unsupported protocol: resource)
2026-07-20T04:14:34.090Z  WARN 1 --- [           main] o.f.c.i.s.classpath.ClassPathScanner     : Unable to scan location: /db/migration (unsupported protocol: resource)
2026-07-20T04:14:34.142Z  WARN 1 --- [           main] o.f.c.internal.database.base.Database    : Using H2 2.4.240 which is newer than the version Flyway has been verified with. The latest verified version of H2 is 2.3.232.
2026-07-20T04:14:34.145Z  INFO 1 --- [           main] o.f.c.i.s.JdbcTableSchemaHistory         : Schema history table "PUBLIC"."flyway_schema_history" does not exist yet
2026-07-20T04:14:34.145Z  INFO 1 --- [           main] o.f.core.internal.command.DbValidate     : Successfully validated 9 migrations (execution time 00:00.001s)
2026-07-20T04:14:34.145Z  INFO 1 --- [           main] org.flywaydb.core.Flyway                 : All configured schemas are empty; a baseline marker will not be added to Flyway's schema history table. A baseline or migration script with a lower version than the baseline version may execute if available. Check the Schemas parameter if this is not intended. See https://help.red-gate.com/help/flyway-cli12/help_4.aspx?topic=baseline-on-migrate for more info
2026-07-20T04:14:34.145Z  INFO 1 --- [           main] o.f.c.i.s.JdbcTableSchemaHistory         : Creating Schema History table "PUBLIC"."flyway_schema_history" ...
2026-07-20T04:14:34.147Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Current version of schema "PUBLIC": << Empty Schema >>
2026-07-20T04:14:34.148Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "1 - init"
2026-07-20T04:14:34.149Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "2 - add api key revoked"
2026-07-20T04:14:34.150Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "3 - rename client to agent"
2026-07-20T04:14:34.151Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "4 - move prefix to domains"
2026-07-20T04:14:34.154Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "5 - add settings"
2026-07-20T04:14:34.154Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "6 - add agent remote ip"
2026-07-20T04:14:34.155Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "7 - add route forward client ip headers"
2026-07-20T04:14:34.156Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "8 - allow unmatched access log entries"
2026-07-20T04:14:34.157Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "9 - add route preserve host header"
2026-07-20T04:14:34.158Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Successfully applied 9 migrations to schema "PUBLIC", now at version v9 (execution time 00:00.003s)
2026-07-20T04:14:34.167Z  INFO 1 --- [           main] org.hibernate.orm.jpa                    : HHH008540: Processing PersistenceUnitInfo [name: default]
2026-07-20T04:14:34.170Z  INFO 1 --- [           main] org.hibernate.orm.core                   : HHH000001: Hibernate ORM core version 7.4.1.Final
2026-07-20T04:14:34.188Z  INFO 1 --- [           main] org.hibernate.orm.connections.pooling    : HHH10001005: Database info:
	Database JDBC URL [jdbc:h2:file:./data/proxera]
	Database driver: H2 JDBC Driver
	Database dialect: H2Dialect
	Database version: 2.4.240
	Default catalog/schema: proxera/PUBLIC
	Autocommit mode: undefined/unknown
	Isolation level: READ_COMMITTED [default READ_COMMITTED]
	JDBC fetch size: 100
	Pool: DataSourceConnectionProvider
	Minimum pool size: undefined/unknown
	Maximum pool size: undefined/unknown
2026-07-20T04:14:34.213Z  INFO 1 --- [           main] org.hibernate.orm.core                   : HHH000489: No JTA platform available (set 'hibernate.transaction.jta.platform' to enable JTA platform integration)
2026-07-20T04:14:34.215Z  INFO 1 --- [           main] j.LocalContainerEntityManagerFactoryBean : Initialized JPA EntityManagerFactory for persistence unit 'default'
2026-07-20T04:14:34.223Z  INFO 1 --- [           main] o.s.d.j.r.query.QueryEnhancerFactories   : Hibernate is in classpath; If applicable, HQL parser will be used.
2026-07-20T04:14:34.269Z DEBUG 1 --- [           main] t.w.proxera.security.ApiKeyAuthFilter    : Filter 'apiKeyAuthFilter' configured for use
2026-07-20T04:14:34.295Z DEBUG 1 --- [           main] t.w.proxera.service.IngressService       : Not running in Kubernetes - ingress management unavailable
2026-07-20T04:14:34.323Z  INFO 1 --- [           main] r$InitializeUserDetailsManagerConfigurer : Global AuthenticationManager configured with UserDetailsService bean with name proxeraUserDetailsService
2026-07-20T04:14:34.349Z DEBUG 1 --- [           main] o.s.w.s.s.s.WebSocketHandlerMapping      : Patterns [/tunnel] in 'webSocketHandlerMapping'
2026-07-20T04:14:34.429Z  INFO 1 --- [           main] o.s.b.h.a.H2ConsoleAutoConfiguration     : H2 console available at '/h2-console'. Database available at 'jdbc:h2:file:./data/proxera'
2026-07-20T04:14:34.431Z  WARN 1 --- [           main] i.m.c.i.binder.jvm.JvmGcMetrics          : GC notifications will not be available because no GarbageCollectorMXBean of the JVM provides any. GCs=[young generation scavenger, complete scavenger]
2026-07-20T04:14:34.436Z  INFO 1 --- [           main] o.s.b.a.e.web.EndpointLinksResolver      : Exposing 4 endpoints beneath base path '/actuator'
2026-07-20T04:14:34.443Z  INFO 1 --- [           main] o.s.boot.tomcat.TomcatWebServer          : Tomcat started on port 8080 (http) with context path '/'
2026-07-20T04:14:34.444Z  INFO 1 --- [           main] t.wenisch.proxera.ProxeraApplication     : Started ProxeraApplication in 0.489 seconds (process running for 0.501)
2026-07-20T04:14:34.454Z  WARN 1 --- [           main] t.wenisch.proxera.service.UserService    : No users found — creating default admin/admin. CHANGE THE PASSWORD!
2026-07-20T04:14:34.536Z  WARN 1 --- [           main] o.s.core.events.SpringDocAppInitializer  : SpringDoc /v3/api-docs endpoint is enabled by default. To disable it in production, set the property 'springdoc.api-docs.enabled=false'
2026-07-20T04:15:03.973Z  INFO 1 --- [omcat-handler-0] o.a.c.c.C.[Tomcat].[localhost].[/]       : Initializing Spring DispatcherServlet 'dispatcherServlet'
2026-07-20T04:15:03.973Z  INFO 1 --- [omcat-handler-0] o.s.web.servlet.DispatcherServlet        : Initializing Servlet 'dispatcherServlet'
2026-07-20T04:15:03.974Z  INFO 1 --- [omcat-handler-0] o.s.web.servlet.DispatcherServlet        : Completed initialization in 1 ms
2026-07-20T04:15:03.977Z DEBUG 1 --- [omcat-handler-0] t.w.proxera.service.RoutingService       : Route cache built with 0 domain entries

Container state:

{"Status":"running","Running":true,"Paused":false,"Restarting":false,"OOMKilled":false,"Dead":false,"Pid":3955,"ExitCode":0,"Error":"","StartedAt":"2026-07-20T04:14:33.801705256Z","FinishedAt":"0001-01-01T00:00:00Z"}

github-actions · 2026-07-20T05:07:05Z

Container Endpoint Check

Image: ghcr.io/wenisch-tech/proxera:0.12.21-pr.46.273

Endpoint	URL	Status	Latency
✅ Proxy Health	http://localhost:18080/actuator/health	200	223ms
✅ Admin Health	http://localhost:18080/actuator/health	200	16ms
✅ Admin Login	http://localhost:18080/login	200	239ms
✅ Admin Dashboard	http://localhost:18080/admin/	302	19ms

Container logs (last 50 lines):

2026-07-20T05:06:38.026Z  INFO 1 --- [           main] com.zaxxer.hikari.HikariDataSource       : HikariPool-1 - Start completed.
2026-07-20T05:06:38.042Z  INFO 1 --- [           main] org.flywaydb.core.FlywayExecutor         : Database: jdbc:h2:file:./data/proxera (H2 2.4)
2026-07-20T05:06:38.112Z  WARN 1 --- [           main] o.f.c.internal.database.base.Database    : Using H2 2.4.240 which is newer than the version Flyway has been verified with. The latest verified version of H2 is 2.3.232.
2026-07-20T05:06:38.151Z  INFO 1 --- [           main] o.f.c.i.s.JdbcTableSchemaHistory         : Schema history table "PUBLIC"."flyway_schema_history" does not exist yet
2026-07-20T05:06:38.154Z  INFO 1 --- [           main] o.f.core.internal.command.DbValidate     : Successfully validated 9 migrations (execution time 00:00.020s)
2026-07-20T05:06:38.164Z  INFO 1 --- [           main] org.flywaydb.core.Flyway                 : All configured schemas are empty; a baseline marker will not be added to Flyway's schema history table. A baseline or migration script with a lower version than the baseline version may execute if available. Check the Schemas parameter if this is not intended. See https://help.red-gate.com/help/flyway-cli12/help_4.aspx?topic=baseline-on-migrate for more info
2026-07-20T05:06:38.165Z  INFO 1 --- [           main] o.f.c.i.s.JdbcTableSchemaHistory         : Creating Schema History table "PUBLIC"."flyway_schema_history" ...
2026-07-20T05:06:38.207Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Current version of schema "PUBLIC": << Empty Schema >>
2026-07-20T05:06:38.226Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "1 - init"
2026-07-20T05:06:38.257Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "2 - add api key revoked"
2026-07-20T05:06:38.268Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "3 - rename client to agent"
2026-07-20T05:06:38.278Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "4 - move prefix to domains"
2026-07-20T05:06:38.303Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "5 - add settings"
2026-07-20T05:06:38.308Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "6 - add agent remote ip"
2026-07-20T05:06:38.317Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "7 - add route forward client ip headers"
2026-07-20T05:06:38.326Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "8 - allow unmatched access log entries"
2026-07-20T05:06:38.330Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "9 - add route preserve host header"
2026-07-20T05:06:38.341Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Successfully applied 9 migrations to schema "PUBLIC", now at version v9 (execution time 00:00.069s)
2026-07-20T05:06:38.485Z  INFO 1 --- [           main] org.hibernate.orm.jpa                    : HHH008540: Processing PersistenceUnitInfo [name: default]
2026-07-20T05:06:38.559Z  INFO 1 --- [           main] org.hibernate.orm.core                   : HHH000001: Hibernate ORM core version 7.4.1.Final
2026-07-20T05:06:39.169Z  INFO 1 --- [           main] o.s.o.j.p.SpringPersistenceUnitInfo      : No LoadTimeWeaver setup: ignoring JPA class transformer
2026-07-20T05:06:39.249Z  INFO 1 --- [           main] org.hibernate.orm.connections.pooling    : HHH10001005: Database info:
	Database JDBC URL [jdbc:h2:file:./data/proxera]
	Database driver: H2 JDBC Driver
	Database dialect: H2Dialect
	Database version: 2.4.240
	Default catalog/schema: proxera/PUBLIC
	Autocommit mode: undefined/unknown
	Isolation level: READ_COMMITTED [default READ_COMMITTED]
	JDBC fetch size: 100
	Pool: DataSourceConnectionProvider
	Minimum pool size: undefined/unknown
	Maximum pool size: undefined/unknown
2026-07-20T05:06:40.335Z  INFO 1 --- [           main] org.hibernate.orm.core                   : HHH000489: No JTA platform available (set 'hibernate.transaction.jta.platform' to enable JTA platform integration)
2026-07-20T05:06:40.343Z  INFO 1 --- [           main] j.LocalContainerEntityManagerFactoryBean : Initialized JPA EntityManagerFactory for persistence unit 'default'
2026-07-20T05:06:40.406Z  INFO 1 --- [           main] o.s.d.j.r.query.QueryEnhancerFactories   : Hibernate is in classpath; If applicable, HQL parser will be used.
2026-07-20T05:06:40.665Z DEBUG 1 --- [           main] t.w.proxera.security.ApiKeyAuthFilter    : Filter 'apiKeyAuthFilter' configured for use
2026-07-20T05:06:41.698Z DEBUG 1 --- [           main] t.w.proxera.service.IngressService       : Not running in Kubernetes - ingress management unavailable
2026-07-20T05:06:42.009Z  INFO 1 --- [           main] r$InitializeUserDetailsManagerConfigurer : Global AuthenticationManager configured with UserDetailsService bean with name proxeraUserDetailsService
2026-07-20T05:06:42.258Z DEBUG 1 --- [           main] o.s.w.s.s.s.WebSocketHandlerMapping      : Patterns [/tunnel] in 'webSocketHandlerMapping'
2026-07-20T05:06:42.796Z  INFO 1 --- [           main] o.s.b.h.a.H2ConsoleAutoConfiguration     : H2 console available at '/h2-console'. Database available at 'jdbc:h2:file:./data/proxera'
2026-07-20T05:06:42.865Z  INFO 1 --- [           main] o.s.b.a.e.web.EndpointLinksResolver      : Exposing 4 endpoints beneath base path '/actuator'
2026-07-20T05:06:42.968Z  INFO 1 --- [           main] o.s.boot.tomcat.TomcatWebServer          : Tomcat started on port 8080 (http) with context path '/'
2026-07-20T05:06:42.993Z  INFO 1 --- [           main] t.wenisch.proxera.ProxeraApplication     : Started ProxeraApplication in 8.866 seconds (process running for 9.58)
2026-07-20T05:06:43.207Z  WARN 1 --- [           main] t.wenisch.proxera.service.UserService    : No users found — creating default admin/admin. CHANGE THE PASSWORD!
2026-07-20T05:06:43.433Z  WARN 1 --- [           main] o.s.core.events.SpringDocAppInitializer  : SpringDoc /v3/api-docs endpoint is enabled by default. To disable it in production, set the property 'springdoc.api-docs.enabled=false'
2026-07-20T05:07:03.481Z  INFO 1 --- [omcat-handler-0] o.a.c.c.C.[Tomcat].[localhost].[/]       : Initializing Spring DispatcherServlet 'dispatcherServlet'
2026-07-20T05:07:03.481Z  INFO 1 --- [omcat-handler-0] o.s.web.servlet.DispatcherServlet        : Initializing Servlet 'dispatcherServlet'
2026-07-20T05:07:03.483Z  INFO 1 --- [omcat-handler-0] o.s.web.servlet.DispatcherServlet        : Completed initialization in 2 ms
2026-07-20T05:07:03.545Z DEBUG 1 --- [omcat-handler-0] t.w.proxera.service.RoutingService       : Route cache built with 0 domain entries

Container state:

{"Status":"running","Running":true,"Paused":false,"Restarting":false,"OOMKilled":false,"Dead":false,"Pid":3434,"ExitCode":0,"Error":"","StartedAt":"2026-07-20T05:06:33.17048322Z","FinishedAt":"0001-01-01T00:00:00Z"}

github-actions · 2026-07-20T05:07:39Z

Trivy vulnerability report

Image: ghcr.io/wenisch-tech/proxera:0.12.21-pr.46.273


Report Summary

┌─────────────────────────────────────────────────────────────────┬───────┬─────────────────┐
│                             Target                              │ Type  │ Vulnerabilities │
├─────────────────────────────────────────────────────────────────┼───────┼─────────────────┤
│ ghcr.io/wenisch-tech/proxera:0.12.21-pr.46.273 (wolfi 20230201) │ wolfi │        0        │
├─────────────────────────────────────────────────────────────────┼───────┼─────────────────┤
│ app/app.jar                                                     │  jar  │        1        │
└─────────────────────────────────────────────────────────────────┴───────┴─────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.72/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


Java (jar)
==========
Total: 1 (MEDIUM: 1, HIGH: 0, CRITICAL: 0)

┌───────────────────────────────────────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────────────────────┬────────────────────────────────────────────────────────────┐
│                        Library                        │ Vulnerability  │ Severity │ Status │ Installed Version │         Fixed Version         │                           Title                            │
├───────────────────────────────────────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────────────────────┼────────────────────────────────────────────────────────────┤
│ com.fasterxml.jackson.core:jackson-databind (app.jar) │ CVE-2026-54515 │ MEDIUM   │ fixed  │ 2.21.4            │ 3.1.4, 2.18.9, 2.21.5, 2.22.1 │ jackson-databind: jackson-databind: Ignored properties can │
│                                                       │                │          │        │                   │                               │ be unexpectedly modified                                   │
│                                                       │                │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-54515                 │
└───────────────────────────────────────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────────────────────┴────────────────────────────────────────────────────────────┘

github-actions · 2026-07-20T05:16:02Z

Trivy vulnerability report (native-distroless)

Image: ghcr.io/wenisch-tech/proxera:native-distroless-0.12.21-pr.46.273


Report Summary

┌─────────────────────────────────────────────────────────────────────────────────┬────────┬─────────────────┐
│                                     Target                                      │  Type  │ Vulnerabilities │
├─────────────────────────────────────────────────────────────────────────────────┼────────┼─────────────────┤
│ ghcr.io/wenisch-tech/proxera:native-distroless-0.12.21-pr.46.273 (debian 12.15) │ debian │        4        │
├─────────────────────────────────────────────────────────────────────────────────┼────────┼─────────────────┤
│ app/proxera.jar                                                                 │  jar   │        1        │
└─────────────────────────────────────────────────────────────────────────────────┴────────┴─────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.72/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


ghcr.io/wenisch-tech/proxera:native-distroless-0.12.21-pr.46.273 (debian 12.15)
===============================================================================
Total: 4 (MEDIUM: 4, HIGH: 0, CRITICAL: 0)

┌─────────┬───────────────┬──────────┬──────────┬───────────────────┬───────────────┬──────────────────────────────────────────────────────────────┐
│ Library │ Vulnerability │ Severity │  Status  │ Installed Version │ Fixed Version │                            Title                             │
├─────────┼───────────────┼──────────┼──────────┼───────────────────┼───────────────┼──────────────────────────────────────────────────────────────┤
│ libc6   │ CVE-2026-5435 │ MEDIUM   │ affected │ 2.36-9+deb12u14   │               │ glibc: glibc: Out-of-bounds write via TSIG record processing │
│         │               │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-5435                    │
│         ├───────────────┤          │          │                   ├───────────────┼──────────────────────────────────────────────────────────────┤
│         │ CVE-2026-5450 │          │          │                   │               │ glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc`     │
│         │               │          │          │                   │               │ format specifier and...                                      │
│         │               │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-5450                    │
│         ├───────────────┤          │          │                   ├───────────────┼──────────────────────────────────────────────────────────────┤
│         │ CVE-2026-5928 │          │          │                   │               │ glibc: glibc: Information disclosure or denial of service    │
│         │               │          │          │                   │               │ via ungetwc function with...                                 │
│         │               │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-5928                    │
│         ├───────────────┤          │          │                   ├───────────────┼──────────────────────────────────────────────────────────────┤
│         │ CVE-2026-6238 │          │          │                   │               │ glibc: glibc: Application crash or uninitialized memory read │
│         │               │          │          │                   │               │ via crafted DNS response...                                  │
│         │               │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-6238                    │
└─────────┴───────────────┴──────────┴──────────┴───────────────────┴───────────────┴──────────────────────────────────────────────────────────────┘

Java (jar)
==========
Total: 1 (MEDIUM: 1, HIGH: 0, CRITICAL: 0)

┌───────────────────────────────────────────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────────────────────┬────────────────────────────────────────────────────────────┐
│                          Library                          │ Vulnerability  │ Severity │ Status │ Installed Version │         Fixed Version         │                           Title                            │
├───────────────────────────────────────────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────────────────────┼────────────────────────────────────────────────────────────┤
│ com.fasterxml.jackson.core:jackson-databind (proxera.jar) │ CVE-2026-54515 │ MEDIUM   │ fixed  │ 2.21.4            │ 3.1.4, 2.18.9, 2.21.5, 2.22.1 │ jackson-databind: jackson-databind: Ignored properties can │
│                                                           │                │          │        │                   │                               │ be unexpectedly modified                                   │
│                                                           │                │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-54515                 │
└───────────────────────────────────────────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────────────────────┴────────────────────────────────────────────────────────────┘

github-actions · 2026-07-20T05:16:03Z

Native Container Endpoint Check

Image: ghcr.io/wenisch-tech/proxera:native-distroless-0.12.21-pr.46.273

Endpoint	URL	Status	Latency
✅ Proxy Health	http://localhost:18081/actuator/health	200	18ms
✅ Admin Health	http://localhost:18081/actuator/health	200	8ms
✅ Admin Login	http://localhost:18081/login	200	38ms
✅ Admin Dashboard	http://localhost:18081/admin/	302	9ms

Container logs (last 50 lines):

2026-07-20T05:14:33.466Z  WARN 1 --- [           main] o.f.c.i.s.classpath.ClassPathScanner     : Unable to scan location: /db/migration (unsupported protocol: resource)
2026-07-20T05:14:33.467Z  WARN 1 --- [           main] o.f.c.i.s.classpath.ClassPathScanner     : Unable to scan location: /db/migration (unsupported protocol: resource)
2026-07-20T05:14:33.511Z  WARN 1 --- [           main] o.f.c.internal.database.base.Database    : Using H2 2.4.240 which is newer than the version Flyway has been verified with. The latest verified version of H2 is 2.3.232.
2026-07-20T05:14:33.514Z  INFO 1 --- [           main] o.f.c.i.s.JdbcTableSchemaHistory         : Schema history table "PUBLIC"."flyway_schema_history" does not exist yet
2026-07-20T05:14:33.514Z  INFO 1 --- [           main] o.f.core.internal.command.DbValidate     : Successfully validated 9 migrations (execution time 00:00.001s)
2026-07-20T05:14:33.514Z  INFO 1 --- [           main] org.flywaydb.core.Flyway                 : All configured schemas are empty; a baseline marker will not be added to Flyway's schema history table. A baseline or migration script with a lower version than the baseline version may execute if available. Check the Schemas parameter if this is not intended. See https://help.red-gate.com/help/flyway-cli12/help_4.aspx?topic=baseline-on-migrate for more info
2026-07-20T05:14:33.514Z  INFO 1 --- [           main] o.f.c.i.s.JdbcTableSchemaHistory         : Creating Schema History table "PUBLIC"."flyway_schema_history" ...
2026-07-20T05:14:33.515Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Current version of schema "PUBLIC": << Empty Schema >>
2026-07-20T05:14:33.516Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "1 - init"
2026-07-20T05:14:33.518Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "2 - add api key revoked"
2026-07-20T05:14:33.519Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "3 - rename client to agent"
2026-07-20T05:14:33.520Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "4 - move prefix to domains"
2026-07-20T05:14:33.522Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "5 - add settings"
2026-07-20T05:14:33.523Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "6 - add agent remote ip"
2026-07-20T05:14:33.524Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "7 - add route forward client ip headers"
2026-07-20T05:14:33.525Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "8 - allow unmatched access log entries"
2026-07-20T05:14:33.525Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "9 - add route preserve host header"
2026-07-20T05:14:33.526Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Successfully applied 9 migrations to schema "PUBLIC", now at version v9 (execution time 00:00.002s)
2026-07-20T05:14:33.535Z  INFO 1 --- [           main] org.hibernate.orm.jpa                    : HHH008540: Processing PersistenceUnitInfo [name: default]
2026-07-20T05:14:33.538Z  INFO 1 --- [           main] org.hibernate.orm.core                   : HHH000001: Hibernate ORM core version 7.4.1.Final
2026-07-20T05:14:33.553Z  INFO 1 --- [           main] org.hibernate.orm.connections.pooling    : HHH10001005: Database info:
	Database JDBC URL [jdbc:h2:file:./data/proxera]
	Database driver: H2 JDBC Driver
	Database dialect: H2Dialect
	Database version: 2.4.240
	Default catalog/schema: proxera/PUBLIC
	Autocommit mode: undefined/unknown
	Isolation level: READ_COMMITTED [default READ_COMMITTED]
	JDBC fetch size: 100
	Pool: DataSourceConnectionProvider
	Minimum pool size: undefined/unknown
	Maximum pool size: undefined/unknown
2026-07-20T05:14:33.578Z  INFO 1 --- [           main] org.hibernate.orm.core                   : HHH000489: No JTA platform available (set 'hibernate.transaction.jta.platform' to enable JTA platform integration)
2026-07-20T05:14:33.580Z  INFO 1 --- [           main] j.LocalContainerEntityManagerFactoryBean : Initialized JPA EntityManagerFactory for persistence unit 'default'
2026-07-20T05:14:33.593Z  INFO 1 --- [           main] o.s.d.j.r.query.QueryEnhancerFactories   : Hibernate is in classpath; If applicable, HQL parser will be used.
2026-07-20T05:14:33.645Z DEBUG 1 --- [           main] t.w.proxera.security.ApiKeyAuthFilter    : Filter 'apiKeyAuthFilter' configured for use
2026-07-20T05:14:33.670Z DEBUG 1 --- [           main] t.w.proxera.service.IngressService       : Not running in Kubernetes - ingress management unavailable
2026-07-20T05:14:33.698Z  INFO 1 --- [           main] r$InitializeUserDetailsManagerConfigurer : Global AuthenticationManager configured with UserDetailsService bean with name proxeraUserDetailsService
2026-07-20T05:14:33.723Z DEBUG 1 --- [           main] o.s.w.s.s.s.WebSocketHandlerMapping      : Patterns [/tunnel] in 'webSocketHandlerMapping'
2026-07-20T05:14:33.802Z  INFO 1 --- [           main] o.s.b.h.a.H2ConsoleAutoConfiguration     : H2 console available at '/h2-console'. Database available at 'jdbc:h2:file:./data/proxera'
2026-07-20T05:14:33.805Z  WARN 1 --- [           main] i.m.c.i.binder.jvm.JvmGcMetrics          : GC notifications will not be available because no GarbageCollectorMXBean of the JVM provides any. GCs=[young generation scavenger, complete scavenger]
2026-07-20T05:14:33.809Z  INFO 1 --- [           main] o.s.b.a.e.web.EndpointLinksResolver      : Exposing 4 endpoints beneath base path '/actuator'
2026-07-20T05:14:33.816Z  INFO 1 --- [           main] o.s.boot.tomcat.TomcatWebServer          : Tomcat started on port 8080 (http) with context path '/'
2026-07-20T05:14:33.817Z  INFO 1 --- [           main] t.wenisch.proxera.ProxeraApplication     : Started ProxeraApplication in 0.505 seconds (process running for 0.517)
2026-07-20T05:14:33.829Z  WARN 1 --- [           main] t.wenisch.proxera.service.UserService    : No users found — creating default admin/admin. CHANGE THE PASSWORD!
2026-07-20T05:14:33.911Z  WARN 1 --- [           main] o.s.core.events.SpringDocAppInitializer  : SpringDoc /v3/api-docs endpoint is enabled by default. To disable it in production, set the property 'springdoc.api-docs.enabled=false'
2026-07-20T05:15:03.319Z  INFO 1 --- [omcat-handler-0] o.a.c.c.C.[Tomcat].[localhost].[/]       : Initializing Spring DispatcherServlet 'dispatcherServlet'
2026-07-20T05:15:03.319Z  INFO 1 --- [omcat-handler-0] o.s.web.servlet.DispatcherServlet        : Initializing Servlet 'dispatcherServlet'
2026-07-20T05:15:03.319Z  INFO 1 --- [omcat-handler-0] o.s.web.servlet.DispatcherServlet        : Completed initialization in 0 ms
2026-07-20T05:15:03.323Z DEBUG 1 --- [omcat-handler-0] t.w.proxera.service.RoutingService       : Route cache built with 0 domain entries

Container state:

{"Status":"running","Running":true,"Paused":false,"Restarting":false,"OOMKilled":false,"Dead":false,"Pid":3883,"ExitCode":0,"Error":"","StartedAt":"2026-07-20T05:14:33.180090068Z","FinishedAt":"0001-01-01T00:00:00Z"}

github-actions · 2026-09-03T08:06:27Z

Container Endpoint Check

Image: ghcr.io/wenisch-tech/proxera:0.12.21-pr.46.311

Endpoint	URL	Status	Latency
✅ Proxy Health	http://localhost:18080/actuator/health	200	171ms
✅ Admin Health	http://localhost:18080/actuator/health	200	11ms
✅ Admin Login	http://localhost:18080/login	200	183ms
✅ Admin Dashboard	http://localhost:18080/admin/	302	16ms

Container logs (last 50 lines):

2026-09-03T08:05:59.452Z  INFO 1 --- [           main] com.zaxxer.hikari.HikariDataSource       : HikariPool-1 - Start completed.
2026-09-03T08:05:59.466Z  INFO 1 --- [           main] org.flywaydb.core.FlywayExecutor         : Database: jdbc:h2:file:./data/proxera (H2 2.4)
2026-09-03T08:05:59.526Z  WARN 1 --- [           main] o.f.c.internal.database.base.Database    : Using H2 2.4.240 which is newer than the version Flyway has been verified with. The latest verified version of H2 is 2.3.232.
2026-09-03T08:05:59.560Z  INFO 1 --- [           main] o.f.c.i.s.JdbcTableSchemaHistory         : Schema history table "PUBLIC"."flyway_schema_history" does not exist yet
2026-09-03T08:05:59.564Z  INFO 1 --- [           main] o.f.core.internal.command.DbValidate     : Successfully validated 9 migrations (execution time 00:00.019s)
2026-09-03T08:05:59.571Z  INFO 1 --- [           main] org.flywaydb.core.Flyway                 : All configured schemas are empty; a baseline marker will not be added to Flyway's schema history table. A baseline or migration script with a lower version than the baseline version may execute if available. Check the Schemas parameter if this is not intended. See https://help.red-gate.com/help/flyway-cli12/help_4.aspx?topic=baseline-on-migrate for more info
2026-09-03T08:05:59.572Z  INFO 1 --- [           main] o.f.c.i.s.JdbcTableSchemaHistory         : Creating Schema History table "PUBLIC"."flyway_schema_history" ...
2026-09-03T08:05:59.606Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Current version of schema "PUBLIC": << Empty Schema >>
2026-09-03T08:05:59.618Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "1 - init"
2026-09-03T08:05:59.642Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "2 - add api key revoked"
2026-09-03T08:05:59.649Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "3 - rename client to agent"
2026-09-03T08:05:59.657Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "4 - move prefix to domains"
2026-09-03T08:05:59.678Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "5 - add settings"
2026-09-03T08:05:59.682Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "6 - add agent remote ip"
2026-09-03T08:05:59.688Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "7 - add route forward client ip headers"
2026-09-03T08:05:59.695Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "8 - allow unmatched access log entries"
2026-09-03T08:05:59.698Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "9 - add route preserve host header"
2026-09-03T08:05:59.705Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Successfully applied 9 migrations to schema "PUBLIC", now at version v9 (execution time 00:00.052s)
2026-09-03T08:05:59.820Z  INFO 1 --- [           main] org.hibernate.orm.jpa                    : HHH008540: Processing PersistenceUnitInfo [name: default]
2026-09-03T08:05:59.881Z  INFO 1 --- [           main] org.hibernate.orm.core                   : HHH000001: Hibernate ORM core version 7.4.1.Final
2026-09-03T08:06:00.335Z  INFO 1 --- [           main] o.s.o.j.p.SpringPersistenceUnitInfo      : No LoadTimeWeaver setup: ignoring JPA class transformer
2026-09-03T08:06:00.386Z  INFO 1 --- [           main] org.hibernate.orm.connections.pooling    : HHH10001005: Database info:
	Database JDBC URL [jdbc:h2:file:./data/proxera]
	Database driver: H2 JDBC Driver
	Database dialect: H2Dialect
	Database version: 2.4.240
	Default catalog/schema: proxera/PUBLIC
	Autocommit mode: undefined/unknown
	Isolation level: READ_COMMITTED [default READ_COMMITTED]
	JDBC fetch size: 100
	Pool: DataSourceConnectionProvider
	Minimum pool size: undefined/unknown
	Maximum pool size: undefined/unknown
2026-09-03T08:06:01.250Z  INFO 1 --- [           main] org.hibernate.orm.core                   : HHH000489: No JTA platform available (set 'hibernate.transaction.jta.platform' to enable JTA platform integration)
2026-09-03T08:06:01.256Z  INFO 1 --- [           main] j.LocalContainerEntityManagerFactoryBean : Initialized JPA EntityManagerFactory for persistence unit 'default'
2026-09-03T08:06:01.310Z  INFO 1 --- [           main] o.s.d.j.r.query.QueryEnhancerFactories   : Hibernate is in classpath; If applicable, HQL parser will be used.
2026-09-03T08:06:01.510Z DEBUG 1 --- [           main] t.w.proxera.security.ApiKeyAuthFilter    : Filter 'apiKeyAuthFilter' configured for use
2026-09-03T08:06:02.281Z DEBUG 1 --- [           main] t.w.proxera.service.IngressService       : Not running in Kubernetes - ingress management unavailable
2026-09-03T08:06:02.517Z  INFO 1 --- [           main] r$InitializeUserDetailsManagerConfigurer : Global AuthenticationManager configured with UserDetailsService bean with name proxeraUserDetailsService
2026-09-03T08:06:02.716Z DEBUG 1 --- [           main] o.s.w.s.s.s.WebSocketHandlerMapping      : Patterns [/tunnel] in 'webSocketHandlerMapping'
2026-09-03T08:06:03.122Z  INFO 1 --- [           main] o.s.b.h.a.H2ConsoleAutoConfiguration     : H2 console available at '/h2-console'. Database available at 'jdbc:h2:file:./data/proxera'
2026-09-03T08:06:03.165Z  INFO 1 --- [           main] o.s.b.a.e.web.EndpointLinksResolver      : Exposing 4 endpoints beneath base path '/actuator'
2026-09-03T08:06:03.221Z  INFO 1 --- [           main] o.s.boot.tomcat.TomcatWebServer          : Tomcat started on port 8080 (http) with context path '/'
2026-09-03T08:06:03.235Z  INFO 1 --- [           main] t.wenisch.proxera.ProxeraApplication     : Started ProxeraApplication in 7.085 seconds (process running for 7.629)
2026-09-03T08:06:03.426Z  WARN 1 --- [           main] t.wenisch.proxera.service.UserService    : No users found — creating default admin/admin. CHANGE THE PASSWORD!
2026-09-03T08:06:03.563Z  WARN 1 --- [           main] o.s.core.events.SpringDocAppInitializer  : SpringDoc /v3/api-docs endpoint is enabled by default. To disable it in production, set the property 'springdoc.api-docs.enabled=false'
2026-09-03T08:06:25.648Z  INFO 1 --- [omcat-handler-0] o.a.c.c.C.[Tomcat].[localhost].[/]       : Initializing Spring DispatcherServlet 'dispatcherServlet'
2026-09-03T08:06:25.648Z  INFO 1 --- [omcat-handler-0] o.s.web.servlet.DispatcherServlet        : Initializing Servlet 'dispatcherServlet'
2026-09-03T08:06:25.649Z  INFO 1 --- [omcat-handler-0] o.s.web.servlet.DispatcherServlet        : Completed initialization in 1 ms
2026-09-03T08:06:25.700Z DEBUG 1 --- [omcat-handler-0] t.w.proxera.service.RoutingService       : Route cache built with 0 domain entries

Container state:

{"Status":"running","Running":true,"Paused":false,"Restarting":false,"OOMKilled":false,"Dead":false,"Pid":3227,"ExitCode":0,"Error":"","StartedAt":"2026-09-03T08:05:55.516901616Z","FinishedAt":"0001-01-01T00:00:00Z"}

github-actions · 2026-09-03T08:06:57Z

Trivy vulnerability report

Image: ghcr.io/wenisch-tech/proxera:0.12.21-pr.46.311


Report Summary

┌─────────────────────────────────────────────────────────────────┬───────┬─────────────────┐
│                             Target                              │ Type  │ Vulnerabilities │
├─────────────────────────────────────────────────────────────────┼───────┼─────────────────┤
│ ghcr.io/wenisch-tech/proxera:0.12.21-pr.46.311 (wolfi 20230201) │ wolfi │        0        │
├─────────────────────────────────────────────────────────────────┼───────┼─────────────────┤
│ app/app.jar                                                     │  jar  │       11        │
└─────────────────────────────────────────────────────────────────┴───────┴─────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.74/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


Java (jar)
==========
Total: 11 (MEDIUM: 7, HIGH: 1, CRITICAL: 3)

┌───────────────────────────────────────────────────────┬─────────────────────┬──────────┬────────┬───────────────────┬───────────────────────────────┬──────────────────────────────────────────────────────────────┐
│                        Library                        │    Vulnerability    │ Severity │ Status │ Installed Version │         Fixed Version         │                            Title                             │
├───────────────────────────────────────────────────────┼─────────────────────┼──────────┼────────┼───────────────────┼───────────────────────────────┼──────────────────────────────────────────────────────────────┤
│ com.fasterxml.jackson.core:jackson-databind (app.jar) │ CVE-2026-54515      │ MEDIUM   │ fixed  │ 2.21.4            │ 3.1.4, 2.18.9, 2.21.5, 2.22.1 │ jackson-databind: jackson-databind: Ignored properties can   │
│                                                       │                     │          │        │                   │                               │ be unexpectedly modified                                     │
│                                                       │                     │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-54515                   │
│                                                       ├─────────────────────┤          │        │                   ├───────────────────────────────┼──────────────────────────────────────────────────────────────┤
│                                                       │ CVE-2026-59889      │          │        │                   │ 2.21.5, 2.18.9, 2.22.1        │ com.fasterxml.jackson.core/jackson-databind:                 │
│                                                       │                     │          │        │                   │                               │ Jackson-databind: Privilege escalation via improper handling │
│                                                       │                     │          │        │                   │                               │ of @JsonUnwrapped properties                                 │
│                                                       │                     │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-59889                   │
│                                                       ├─────────────────────┤          │        │                   ├───────────────────────────────┼──────────────────────────────────────────────────────────────┤
│                                                       │ GHSA-mhm7-754m-9p8w │          │        │                   │ 2.18.9, 2.21.5                │ jackson-databind: `@JsonView` bypass for creator properties  │
│                                                       │                     │          │        │                   │                               │ with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`           │
│                                                       │                     │          │        │                   │                               │ https://github.com/advisories/GHSA-mhm7-754m-9p8w            │
├───────────────────────────────────────────────────────┼─────────────────────┤          │        ├───────────────────┼───────────────────────────────┼──────────────────────────────────────────────────────────────┤
│ io.netty:netty-codec-dns (app.jar)                    │ CVE-2026-73508      │          │        │ 4.2.15.Final      │ 4.2.16.Final, 4.1.136.Final   │ io.netty/netty-codec-dns: Netty: Denial of Service via       │
│                                                       │                     │          │        │                   │                               │ Memory Leak in DNS Record Decoder...                         │
│                                                       │                     │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-73508                   │
├───────────────────────────────────────────────────────┼─────────────────────┤          │        ├───────────────────┼───────────────────────────────┼──────────────────────────────────────────────────────────────┤
│ org.apache.logging.log4j:log4j-api (app.jar)          │ CVE-2026-49844      │          │        │ 2.25.4            │ 2.25.5, 2.26.1                │ org.apache.logging.log4j/log4j-api: Apache Log4j API:        │
│                                                       │                     │          │        │                   │                               │ Malformed JSON output due to improper encoding of...         │
│                                                       │                     │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-49844                   │
├───────────────────────────────────────────────────────┼─────────────────────┼──────────┤        ├───────────────────┼───────────────────────────────┼──────────────────────────────────────────────────────────────┤
│ org.apache.tomcat.embed:tomcat-embed-core (app.jar)   │ CVE-2026-65182      │ CRITICAL │        │ 11.0.22           │ 11.0.25, 10.1.58, 9.0.121     │ Apache Tomcat: Apache Tomcat: Security constraint bypass due │
│                                                       │                     │          │        │                   │                               │ to improper access control...                                │
│                                                       │                     │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-65182                   │
│                                                       ├─────────────────────┤          │        │                   │                               ├──────────────────────────────────────────────────────────────┤
│                                                       │ CVE-2026-65905      │          │        │                   │                               │ tomcat: Apache Tomcat: Authentication bypass via limited     │
│                                                       │                     │          │        │                   │                               │ replay attack in DIGEST authenticator...                     │
│                                                       │                     │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-65905                   │
│                                                       ├─────────────────────┤          │        │                   │                               ├──────────────────────────────────────────────────────────────┤
│                                                       │ CVE-2026-68525      │          │        │                   │                               │ org.apache.tomcat/tomcat: Apache Tomcat: Unauthorized        │
│                                                       │                     │          │        │                   │                               │ resource access via FORM authentication bypass               │
│                                                       │                     │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-68525                   │
├───────────────────────────────────────────────────────┼─────────────────────┼──────────┤        ├───────────────────┼───────────────────────────────┼──────────────────────────────────────────────────────────────┤
│ org.jsoup:jsoup (app.jar)                             │ CVE-2026-71497      │ MEDIUM   │        │ 1.22.2            │ 1.23.1                        │ org.jsoup/jsoup: jsoup: Cross-site scripting via malformed   │
│                                                       │                     │          │        │                   │                               │ HTML tag names                                               │
│                                                       │                     │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-71497                   │
├───────────────────────────────────────────────────────┼─────────────────────┼──────────┤        ├───────────────────┼───────────────────────────────┼──────────────────────────────────────────────────────────────┤
│ org.postgresql:postgresql (app.jar)                   │ CVE-2026-54291      │ HIGH     │        │ 42.7.11           │ 42.7.12                       │ org.postgresql/postgresql: com.ongres.scram/scram-client:    │
│                                                       │                     │          │        │                   │                               │ pgjdbc: Man-in-the-middle protection bypass via              │
│                                                       │                     │          │        │                   │                               │ SCRAM-SHA-256-PLUS downgrade                                 │
│                                                       │                     │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-54291                   │
├───────────────────────────────────────────────────────┼─────────────────────┼──────────┤        ├───────────────────┼───────────────────────────────┼──────────────────────────────────────────────────────────────┤
│ tools.jackson.core:jackson-databind (app.jar)         │ CVE-2026-59889      │ MEDIUM   │        │ 3.1.4             │ 3.1.5, 3.2.1                  │ com.fasterxml.jackson.core/jackson-databind:                 │
│                                                       │                     │          │        │                   │                               │ Jackson-databind: Privilege escalation via improper handling │
│                                                       │                     │          │        │                   │                               │ of @JsonUnwrapped properties                                 │
│                                                       │                     │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-59889                   │
└───────────────────────────────────────────────────────┴─────────────────────┴──────────┴────────┴───────────────────┴───────────────────────────────┴──────────────────────────────────────────────────────────────┘

github-actions · 2026-09-03T08:15:30Z

Trivy vulnerability report (native-distroless)

Image: ghcr.io/wenisch-tech/proxera:native-distroless-0.12.21-pr.46.311


Report Summary

┌─────────────────────────────────────────────────────────────────────────────────┬────────┬─────────────────┐
│                                     Target                                      │  Type  │ Vulnerabilities │
├─────────────────────────────────────────────────────────────────────────────────┼────────┼─────────────────┤
│ ghcr.io/wenisch-tech/proxera:native-distroless-0.12.21-pr.46.311 (debian 12.15) │ debian │       13        │
├─────────────────────────────────────────────────────────────────────────────────┼────────┼─────────────────┤
│ app/proxera.jar                                                                 │  jar   │       11        │
└─────────────────────────────────────────────────────────────────────────────────┴────────┴─────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.74/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


ghcr.io/wenisch-tech/proxera:native-distroless-0.12.21-pr.46.311 (debian 12.15)
===============================================================================
Total: 13 (MEDIUM: 13, HIGH: 0, CRITICAL: 0)

┌─────────┬────────────────┬──────────┬──────────┬───────────────────┬───────────────┬──────────────────────────────────────────────────────────────┐
│ Library │ Vulnerability  │ Severity │  Status  │ Installed Version │ Fixed Version │                            Title                             │
├─────────┼────────────────┼──────────┼──────────┼───────────────────┼───────────────┼──────────────────────────────────────────────────────────────┤
│ libc6   │ CVE-2026-18374 │ MEDIUM   │ affected │ 2.36-9+deb12u14   │               │ glibc: glibc: Heap buffer overflow via attacker-controlled   │
│         │                │          │          │                   │               │ fopen mode string                                            │
│         │                │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-18374                   │
│         ├────────────────┤          │          │                   ├───────────────┼──────────────────────────────────────────────────────────────┤
│         │ CVE-2026-19499 │          │          │                   │               │ glibc: Buffer Overflow in strfmon right-justification        │
│         │                │          │          │                   │               │ padding                                                      │
│         │                │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-19499                   │
│         ├────────────────┤          │          │                   ├───────────────┼──────────────────────────────────────────────────────────────┤
│         │ CVE-2026-19542 │          │          │                   │               │ glibc: Fix out-of-bounds array write in tdelete              │
│         │                │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-19542                   │
│         ├────────────────┤          │          │                   ├───────────────┼──────────────────────────────────────────────────────────────┤
│         │ CVE-2026-5435  │          │          │                   │               │ glibc: glibc: Out-of-bounds write via TSIG record processing │
│         │                │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-5435                    │
│         ├────────────────┤          │          │                   ├───────────────┼──────────────────────────────────────────────────────────────┤
│         │ CVE-2026-5450  │          │          │                   │               │ glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc`     │
│         │                │          │          │                   │               │ format specifier and...                                      │
│         │                │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-5450                    │
│         ├────────────────┤          │          │                   ├───────────────┼──────────────────────────────────────────────────────────────┤
│         │ CVE-2026-5928  │          │          │                   │               │ glibc: glibc: Information disclosure or denial of service    │
│         │                │          │          │                   │               │ via ungetwc function with...                                 │
│         │                │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-5928                    │
│         ├────────────────┤          │          │                   ├───────────────┼──────────────────────────────────────────────────────────────┤
│         │ CVE-2026-6238  │          │          │                   │               │ glibc: glibc: Application crash or uninitialized memory read │
│         │                │          │          │                   │               │ via crafted DNS response...                                  │
│         │                │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-6238                    │
│         ├────────────────┤          │          │                   ├───────────────┼──────────────────────────────────────────────────────────────┤
│         │ CVE-2026-6368  │          │          │                   │               │ glibc: glibc: Process abort due to invalid memory in wordexp │
│         │                │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-6368                    │
│         ├────────────────┤          │          │                   ├───────────────┼──────────────────────────────────────────────────────────────┤
│         │ CVE-2026-6791  │          │          │                   │               │ glibc: Glibc: Denial of Service via stack exhaustion during  │
│         │                │          │          │                   │               │ tilde expansion                                              │
│         │                │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-6791                    │
│         ├────────────────┤          │          │                   ├───────────────┼──────────────────────────────────────────────────────────────┤
│         │ CVE-2026-77117 │          │          │                   │               │ glibc: Non-progress DoS in SHIFT_JISX0213 -&gt               │
│         │                │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-77117                   │
│         ├────────────────┤          │          │                   ├───────────────┼──────────────────────────────────────────────────────────────┤
│         │ CVE-2026-80489 │          │          │                   │               │ glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion  │
│         │                │          │          │                   │               │ state                                                        │
│         │                │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-80489                   │
├─────────┼────────────────┤          │          ├───────────────────┼───────────────┼──────────────────────────────────────────────────────────────┤
│ libssl3 │ CVE-2026-63072 │          │          │ 3.0.20-1~deb12u2  │               │ openssl: heap buffer overflow in CMS key unwrapping          │
│         │                │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-63072                   │
│         ├────────────────┤          │          │                   ├───────────────┼──────────────────────────────────────────────────────────────┤
│         │ CVE-2026-63076 │          │          │                   │               │ openssl: invalid pointer dereference in CMP server via       │
│         │                │          │          │                   │               │ crafted protectionAlg                                        │
│         │                │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2026-63076                   │
└─────────┴────────────────┴──────────┴──────────┴───────────────────┴───────────────┴──────────────────────────────────────────────────────────────┘

Java (jar)
==========
Total: 11 (MEDIUM: 7, HIGH: 1, CRITICAL: 3)

┌───────────────────────────────────────────────────────────┬─────────────────────┬──────────┬────────┬───────────────────┬───────────────────────────────┬──────────────────────────────────────────────────────────────┐
│                          Library                          │    Vulnerability    │ Severity │ Status │ Installed Version │         Fixed Version         │                            Title                             │
├───────────────────────────────────────────────────────────┼─────────────────────┼──────────┼────────┼───────────────────┼───────────────────────────────┼──────────────────────────────────────────────────────────────┤
│ com.fasterxml.jackson.core:jackson-databind (proxera.jar) │ CVE-2026-54515      │ MEDIUM   │ fixed  │ 2.21.4            │ 3.1.4, 2.18.9, 2.21.5, 2.22.1 │ jackson-databind: jackson-databind: Ignored properties can   │
│                                                           │                     │          │        │                   │                               │ be unexpectedly modified                                     │
│                                                           │                     │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-54515                   │
│                                                           ├─────────────────────┤          │        │                   ├───────────────────────────────┼──────────────────────────────────────────────────────────────┤
│                                                           │ CVE-2026-59889      │          │        │                   │ 2.21.5, 2.18.9, 2.22.1        │ com.fasterxml.jackson.core/jackson-databind:                 │
│                                                           │                     │          │        │                   │                               │ Jackson-databind: Privilege escalation via improper handling │
│                                                           │                     │          │        │                   │                               │ of @JsonUnwrapped properties                                 │
│                                                           │                     │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-59889                   │
│                                                           ├─────────────────────┤          │        │                   ├───────────────────────────────┼──────────────────────────────────────────────────────────────┤
│                                                           │ GHSA-mhm7-754m-9p8w │          │        │                   │ 2.18.9, 2.21.5                │ jackson-databind: `@JsonView` bypass for creator properties  │
│                                                           │                     │          │        │                   │                               │ with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`           │
│                                                           │                     │          │        │                   │                               │ https://github.com/advisories/GHSA-mhm7-754m-9p8w            │
├───────────────────────────────────────────────────────────┼─────────────────────┤          │        ├───────────────────┼───────────────────────────────┼──────────────────────────────────────────────────────────────┤
│ io.netty:netty-codec-dns (proxera.jar)                    │ CVE-2026-73508      │          │        │ 4.2.15.Final      │ 4.2.16.Final, 4.1.136.Final   │ io.netty/netty-codec-dns: Netty: Denial of Service via       │
│                                                           │                     │          │        │                   │                               │ Memory Leak in DNS Record Decoder...                         │
│                                                           │                     │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-73508                   │
├───────────────────────────────────────────────────────────┼─────────────────────┤          │        ├───────────────────┼───────────────────────────────┼──────────────────────────────────────────────────────────────┤
│ org.apache.logging.log4j:log4j-api (proxera.jar)          │ CVE-2026-49844      │          │        │ 2.25.4            │ 2.25.5, 2.26.1                │ org.apache.logging.log4j/log4j-api: Apache Log4j API:        │
│                                                           │                     │          │        │                   │                               │ Malformed JSON output due to improper encoding of...         │
│                                                           │                     │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-49844                   │
├───────────────────────────────────────────────────────────┼─────────────────────┼──────────┤        ├───────────────────┼───────────────────────────────┼──────────────────────────────────────────────────────────────┤
│ org.apache.tomcat.embed:tomcat-embed-core (proxera.jar)   │ CVE-2026-65182      │ CRITICAL │        │ 11.0.22           │ 11.0.25, 10.1.58, 9.0.121     │ Apache Tomcat: Apache Tomcat: Security constraint bypass due │
│                                                           │                     │          │        │                   │                               │ to improper access control...                                │
│                                                           │                     │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-65182                   │
│                                                           ├─────────────────────┤          │        │                   │                               ├──────────────────────────────────────────────────────────────┤
│                                                           │ CVE-2026-65905      │          │        │                   │                               │ tomcat: Apache Tomcat: Authentication bypass via limited     │
│                                                           │                     │          │        │                   │                               │ replay attack in DIGEST authenticator...                     │
│                                                           │                     │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-65905                   │
│                                                           ├─────────────────────┤          │        │                   │                               ├──────────────────────────────────────────────────────────────┤
│                                                           │ CVE-2026-68525      │          │        │                   │                               │ org.apache.tomcat/tomcat: Apache Tomcat: Unauthorized        │
│                                                           │                     │          │        │                   │                               │ resource access via FORM authentication bypass               │
│                                                           │                     │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-68525                   │
├───────────────────────────────────────────────────────────┼─────────────────────┼──────────┤        ├───────────────────┼───────────────────────────────┼──────────────────────────────────────────────────────────────┤
│ org.jsoup:jsoup (proxera.jar)                             │ CVE-2026-71497      │ MEDIUM   │        │ 1.22.2            │ 1.23.1                        │ org.jsoup/jsoup: jsoup: Cross-site scripting via malformed   │
│                                                           │                     │          │        │                   │                               │ HTML tag names                                               │
│                                                           │                     │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-71497                   │
├───────────────────────────────────────────────────────────┼─────────────────────┼──────────┤        ├───────────────────┼───────────────────────────────┼──────────────────────────────────────────────────────────────┤
│ org.postgresql:postgresql (proxera.jar)                   │ CVE-2026-54291      │ HIGH     │        │ 42.7.11           │ 42.7.12                       │ org.postgresql/postgresql: com.ongres.scram/scram-client:    │
│                                                           │                     │          │        │                   │                               │ pgjdbc: Man-in-the-middle protection bypass via              │
│                                                           │                     │          │        │                   │                               │ SCRAM-SHA-256-PLUS downgrade                                 │
│                                                           │                     │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-54291                   │
├───────────────────────────────────────────────────────────┼─────────────────────┼──────────┤        ├───────────────────┼───────────────────────────────┼──────────────────────────────────────────────────────────────┤
│ tools.jackson.core:jackson-databind (proxera.jar)         │ CVE-2026-59889      │ MEDIUM   │        │ 3.1.4             │ 3.1.5, 3.2.1                  │ com.fasterxml.jackson.core/jackson-databind:                 │
│                                                           │                     │          │        │                   │                               │ Jackson-databind: Privilege escalation via improper handling │
│                                                           │                     │          │        │                   │                               │ of @JsonUnwrapped properties                                 │
│                                                           │                     │          │        │                   │                               │ https://avd.aquasec.com/nvd/cve-2026-59889                   │
└───────────────────────────────────────────────────────────┴─────────────────────┴──────────┴────────┴───────────────────┴───────────────────────────────┴──────────────────────────────────────────────────────────────┘

github-actions · 2026-09-03T08:15:31Z

Native Container Endpoint Check

Image: ghcr.io/wenisch-tech/proxera:native-distroless-0.12.21-pr.46.311

Endpoint	URL	Status	Latency
✅ Proxy Health	http://localhost:18081/actuator/health	200	16ms
✅ Admin Health	http://localhost:18081/actuator/health	200	8ms
✅ Admin Login	http://localhost:18081/login	200	37ms
✅ Admin Dashboard	http://localhost:18081/admin/	302	8ms

Container logs (last 50 lines):

2026-09-03T08:14:02.498Z  WARN 1 --- [           main] o.f.c.i.s.classpath.ClassPathScanner     : Unable to scan location: /db/migration (unsupported protocol: resource)
2026-09-03T08:14:02.498Z  WARN 1 --- [           main] o.f.c.i.s.classpath.ClassPathScanner     : Unable to scan location: /db/migration (unsupported protocol: resource)
2026-09-03T08:14:02.531Z  WARN 1 --- [           main] o.f.c.internal.database.base.Database    : Using H2 2.4.240 which is newer than the version Flyway has been verified with. The latest verified version of H2 is 2.3.232.
2026-09-03T08:14:02.533Z  INFO 1 --- [           main] o.f.c.i.s.JdbcTableSchemaHistory         : Schema history table "PUBLIC"."flyway_schema_history" does not exist yet
2026-09-03T08:14:02.533Z  INFO 1 --- [           main] o.f.core.internal.command.DbValidate     : Successfully validated 9 migrations (execution time 00:00.001s)
2026-09-03T08:14:02.533Z  INFO 1 --- [           main] org.flywaydb.core.Flyway                 : All configured schemas are empty; a baseline marker will not be added to Flyway's schema history table. A baseline or migration script with a lower version than the baseline version may execute if available. Check the Schemas parameter if this is not intended. See https://help.red-gate.com/help/flyway-cli12/help_4.aspx?topic=baseline-on-migrate for more info
2026-09-03T08:14:02.534Z  INFO 1 --- [           main] o.f.c.i.s.JdbcTableSchemaHistory         : Creating Schema History table "PUBLIC"."flyway_schema_history" ...
2026-09-03T08:14:02.535Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Current version of schema "PUBLIC": << Empty Schema >>
2026-09-03T08:14:02.536Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "1 - init"
2026-09-03T08:14:02.537Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "2 - add api key revoked"
2026-09-03T08:14:02.538Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "3 - rename client to agent"
2026-09-03T08:14:02.539Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "4 - move prefix to domains"
2026-09-03T08:14:02.542Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "5 - add settings"
2026-09-03T08:14:02.542Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "6 - add agent remote ip"
2026-09-03T08:14:02.543Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "7 - add route forward client ip headers"
2026-09-03T08:14:02.544Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "8 - allow unmatched access log entries"
2026-09-03T08:14:02.545Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Migrating schema "PUBLIC" to version "9 - add route preserve host header"
2026-09-03T08:14:02.545Z  INFO 1 --- [           main] o.f.core.internal.command.DbMigrate      : Successfully applied 9 migrations to schema "PUBLIC", now at version v9 (execution time 00:00.002s)
2026-09-03T08:14:02.554Z  INFO 1 --- [           main] org.hibernate.orm.jpa                    : HHH008540: Processing PersistenceUnitInfo [name: default]
2026-09-03T08:14:02.556Z  INFO 1 --- [           main] org.hibernate.orm.core                   : HHH000001: Hibernate ORM core version 7.4.1.Final
2026-09-03T08:14:02.571Z  INFO 1 --- [           main] org.hibernate.orm.connections.pooling    : HHH10001005: Database info:
	Database JDBC URL [jdbc:h2:file:./data/proxera]
	Database driver: H2 JDBC Driver
	Database dialect: H2Dialect
	Database version: 2.4.240
	Default catalog/schema: proxera/PUBLIC
	Autocommit mode: undefined/unknown
	Isolation level: READ_COMMITTED [default READ_COMMITTED]
	JDBC fetch size: 100
	Pool: DataSourceConnectionProvider
	Minimum pool size: undefined/unknown
	Maximum pool size: undefined/unknown
2026-09-03T08:14:02.595Z  INFO 1 --- [           main] org.hibernate.orm.core                   : HHH000489: No JTA platform available (set 'hibernate.transaction.jta.platform' to enable JTA platform integration)
2026-09-03T08:14:02.597Z  INFO 1 --- [           main] j.LocalContainerEntityManagerFactoryBean : Initialized JPA EntityManagerFactory for persistence unit 'default'
2026-09-03T08:14:02.604Z  INFO 1 --- [           main] o.s.d.j.r.query.QueryEnhancerFactories   : Hibernate is in classpath; If applicable, HQL parser will be used.
2026-09-03T08:14:02.628Z DEBUG 1 --- [           main] t.w.proxera.security.ApiKeyAuthFilter    : Filter 'apiKeyAuthFilter' configured for use
2026-09-03T08:14:02.653Z DEBUG 1 --- [           main] t.w.proxera.service.IngressService       : Not running in Kubernetes - ingress management unavailable
2026-09-03T08:14:02.681Z  INFO 1 --- [           main] r$InitializeUserDetailsManagerConfigurer : Global AuthenticationManager configured with UserDetailsService bean with name proxeraUserDetailsService
2026-09-03T08:14:02.706Z DEBUG 1 --- [           main] o.s.w.s.s.s.WebSocketHandlerMapping      : Patterns [/tunnel] in 'webSocketHandlerMapping'
2026-09-03T08:14:02.812Z  INFO 1 --- [           main] o.s.b.h.a.H2ConsoleAutoConfiguration     : H2 console available at '/h2-console'. Database available at 'jdbc:h2:file:./data/proxera'
2026-09-03T08:14:02.815Z  WARN 1 --- [           main] i.m.c.i.binder.jvm.JvmGcMetrics          : GC notifications will not be available because no GarbageCollectorMXBean of the JVM provides any. GCs=[young generation scavenger, complete scavenger]
2026-09-03T08:14:02.819Z  INFO 1 --- [           main] o.s.b.a.e.web.EndpointLinksResolver      : Exposing 4 endpoints beneath base path '/actuator'
2026-09-03T08:14:02.826Z  INFO 1 --- [           main] o.s.boot.tomcat.TomcatWebServer          : Tomcat started on port 8080 (http) with context path '/'
2026-09-03T08:14:02.827Z  INFO 1 --- [           main] t.wenisch.proxera.ProxeraApplication     : Started ProxeraApplication in 0.451 seconds (process running for 0.472)
2026-09-03T08:14:02.837Z  WARN 1 --- [           main] t.wenisch.proxera.service.UserService    : No users found — creating default admin/admin. CHANGE THE PASSWORD!
2026-09-03T08:14:02.918Z  WARN 1 --- [           main] o.s.core.events.SpringDocAppInitializer  : SpringDoc /v3/api-docs endpoint is enabled by default. To disable it in production, set the property 'springdoc.api-docs.enabled=false'
2026-09-03T08:14:32.376Z  INFO 1 --- [omcat-handler-0] o.a.c.c.C.[Tomcat].[localhost].[/]       : Initializing Spring DispatcherServlet 'dispatcherServlet'
2026-09-03T08:14:32.376Z  INFO 1 --- [omcat-handler-0] o.s.web.servlet.DispatcherServlet        : Initializing Servlet 'dispatcherServlet'
2026-09-03T08:14:32.377Z  INFO 1 --- [omcat-handler-0] o.s.web.servlet.DispatcherServlet        : Completed initialization in 1 ms
2026-09-03T08:14:32.380Z DEBUG 1 --- [omcat-handler-0] t.w.proxera.service.RoutingService       : Route cache built with 0 domain entries

Container state:

{"Status":"running","Running":true,"Paused":false,"Restarting":false,"OOMKilled":false,"Dead":false,"Pid":3861,"ExitCode":0,"Error":"","StartedAt":"2026-09-03T08:14:02.189903751Z","FinishedAt":"0001-01-01T00:00:00Z"}

renovate-wenisch-tech Bot added the dependencies Pull requests that update a dependency file label Jul 20, 2026

renovate-wenisch-tech Bot force-pushed the renovate/actions-setup-python-7.x branch from 914cd86 to 5e731cc Compare July 20, 2026 05:04

chore(deps): update actions/setup-python action to v7

03c7cec

renovate-wenisch-tech Bot force-pushed the renovate/actions-setup-python-7.x branch from 5e731cc to 03c7cec Compare September 3, 2026 08:03

Navigation Menu

chore(deps): update actions/setup-python action to v7 - #46

chore(deps): update actions/setup-python action to v7#46
renovate-wenisch-tech[bot] wants to merge 1 commit into
mainfrom
renovate/actions-setup-python-7.x

renovate-wenisch-tech Bot commented Jul 20, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 20, 2026

Uh oh!

github-actions Bot commented Jul 20, 2026

Uh oh!

github-actions Bot commented Jul 20, 2026

Uh oh!

github-actions Bot commented Jul 20, 2026

Uh oh!

github-actions Bot commented Jul 20, 2026

Uh oh!

github-actions Bot commented Jul 20, 2026

Uh oh!

github-actions Bot commented Jul 20, 2026

Uh oh!

github-actions Bot commented Jul 20, 2026

Uh oh!

github-actions Bot commented Sep 3, 2026

Uh oh!

github-actions Bot commented Sep 3, 2026

Uh oh!

github-actions Bot commented Sep 3, 2026

Uh oh!

github-actions Bot commented Sep 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate-wenisch-tech Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v7.0.0

What's Changed

Enhancements

Bug Fix

Dependency Upgrade

New Contributors

v7

Configuration

Uh oh!

github-actions Bot commented Jul 20, 2026

Container Endpoint Check

Uh oh!

github-actions Bot commented Jul 20, 2026

Trivy vulnerability report

Uh oh!

github-actions Bot commented Jul 20, 2026

Trivy vulnerability report (native-distroless)

Uh oh!

github-actions Bot commented Jul 20, 2026

Native Container Endpoint Check

Uh oh!

github-actions Bot commented Jul 20, 2026

Container Endpoint Check

Uh oh!

github-actions Bot commented Jul 20, 2026

Trivy vulnerability report

Uh oh!

github-actions Bot commented Jul 20, 2026

Trivy vulnerability report (native-distroless)

Uh oh!

github-actions Bot commented Jul 20, 2026

Native Container Endpoint Check

Uh oh!

github-actions Bot commented Sep 3, 2026

Container Endpoint Check

Uh oh!

github-actions Bot commented Sep 3, 2026

Trivy vulnerability report

Uh oh!

github-actions Bot commented Sep 3, 2026

Trivy vulnerability report (native-distroless)

Uh oh!

github-actions Bot commented Sep 3, 2026

Native Container Endpoint Check

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate-wenisch-tech Bot commented Jul 20, 2026 •

edited

Loading

`v7.0.0`

`v7`