| busybox |
CVE-2022-28391 |
HIGH |
1.33.1-r6 |
1.33.1-r7 |
https://access.redhat.com/security/cve/CVE-2022-28391
https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch
https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch
https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661
https://nvd.nist.gov/vuln/detail/CVE-2022-28391
https://www.cve.org/CVERecord?id=CVE-2022-28391
|
| curl |
CVE-2022-32207 |
CRITICAL |
7.79.1-r0 |
7.79.1-r2 |
http://seclists.org/fulldisclosure/2022/Oct/28
http://seclists.org/fulldisclosure/2022/Oct/41
https://access.redhat.com/errata/RHSA-2022:6157
https://access.redhat.com/security/cve/CVE-2022-32207
https://bugzilla.redhat.com/2099300
https://bugzilla.redhat.com/2099305
https://bugzilla.redhat.com/2099306
https://bugzilla.redhat.com/show_bug.cgi?id=2099300
https://bugzilla.redhat.com/show_bug.cgi?id=2099305
https://bugzilla.redhat.com/show_bug.cgi?id=2099306
https://cert-portal.siemens.com/productcert/html/ssa-146325.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-419740.html
https://cert-portal.siemens.com/productcert/html/ssa-558014.html
https://cert-portal.siemens.com/productcert/html/ssa-942865.html
https://creativecommons.org/licenses/by/4.0/
https://curl.se/docs/CVE-2022-32207.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
https://errata.almalinux.org/9/ALSA-2022-6157.html
https://errata.rockylinux.org/RLSA-2022:6157
https://hackerone.com/reports/1573634
https://linux.oracle.com/cve/CVE-2022-32207.html
https://linux.oracle.com/errata/ELSA-2022-6157.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
https://nvd.nist.gov/vuln/detail/CVE-2022-32207
https://security.gentoo.org/glsa/202212-01
https://security.netapp.com/advisory/ntap-20220915-0003/
https://support.apple.com/kb/HT213488
https://ubuntu.com/security/notices/USN-5495-1
https://www.cve.org/CVERecord?id=CVE-2022-32207
https://www.debian.org/security/2022/dsa-5197
|
| curl |
CVE-2023-23914 |
CRITICAL |
7.79.1-r0 |
7.79.1-r5 |
https://access.redhat.com/security/cve/CVE-2023-23914
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://curl.se/docs/CVE-2023-23914.html
https://hackerone.com/reports/1813864
https://nvd.nist.gov/vuln/detail/CVE-2023-23914
https://security.gentoo.org/glsa/202310-12
https://security.netapp.com/advisory/ntap-20230309-0006/
https://ubuntu.com/security/notices/USN-5891-1
https://www.cve.org/CVERecord?id=CVE-2023-23914
|
| curl |
CVE-2022-22576 |
HIGH |
7.79.1-r0 |
7.79.1-r1 |
https://access.redhat.com/errata/RHSA-2022:5313
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-22576.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27774.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27776.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27782.json
https://access.redhat.com/security/cve/CVE-2022-22576
https://bugzilla.redhat.com/2077541
https://bugzilla.redhat.com/2077547
https://bugzilla.redhat.com/2078408
https://bugzilla.redhat.com/2082215
https://cert-portal.siemens.com/productcert/html/ssa-146325.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://curl.se/docs/CVE-2022-22576.html
https://errata.almalinux.org/8/ALSA-2022-5313.html
https://hackerone.com/reports/1526328
https://linux.oracle.com/cve/CVE-2022-22576.html
https://linux.oracle.com/errata/ELSA-2022-5313.html
https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
https://nvd.nist.gov/vuln/detail/CVE-2022-22576
https://security.gentoo.org/glsa/202212-01
https://security.netapp.com/advisory/ntap-20220609-0008/
https://ubuntu.com/security/notices/USN-5397-1
https://www.cve.org/CVERecord?id=CVE-2022-22576
https://www.debian.org/security/2022/dsa-5197
|
| curl |
CVE-2022-27775 |
HIGH |
7.79.1-r0 |
7.79.1-r1 |
https://access.redhat.com/errata/RHSA-2022:8299
https://access.redhat.com/security/cve/CVE-2022-27775
https://bugzilla.redhat.com/2078388
https://bugzilla.redhat.com/show_bug.cgi?id=2078388
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://creativecommons.org/licenses/by/4.0/
https://curl.se/docs/CVE-2022-27775.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
https://errata.almalinux.org/9/ALSA-2022-8299.html
https://errata.rockylinux.org/RLSA-2022:8299
https://hackerone.com/reports/1546268
https://linux.oracle.com/cve/CVE-2022-27775.html
https://linux.oracle.com/errata/ELSA-2022-8299.html
https://nvd.nist.gov/vuln/detail/CVE-2022-27775
https://security.gentoo.org/glsa/202212-01
https://security.netapp.com/advisory/ntap-20220609-0008/
https://ubuntu.com/security/notices/USN-5397-1
https://www.cve.org/CVERecord?id=CVE-2022-27775
https://www.debian.org/security/2022/dsa-5197
|
| curl |
CVE-2022-27781 |
HIGH |
7.79.1-r0 |
7.79.1-r2 |
https://access.redhat.com/security/cve/CVE-2022-27781
https://cert-portal.siemens.com/productcert/html/ssa-146325.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://curl.se/docs/CVE-2022-27781.html
https://github.com/curl/curl/commit/f6c335d63f
https://hackerone.com/reports/1555441
https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
https://nvd.nist.gov/vuln/detail/CVE-2022-27781
https://security.gentoo.org/glsa/202212-01
https://security.netapp.com/advisory/ntap-20220609-0009/
https://ubuntu.com/security/notices/USN-5412-1
https://ubuntu.com/security/notices/USN-5499-1
https://www.cve.org/CVERecord?id=CVE-2022-27781
https://www.debian.org/security/2022/dsa-5197
|
| curl |
CVE-2022-27782 |
HIGH |
7.79.1-r0 |
7.79.1-r2 |
http://www.openwall.com/lists/oss-security/2023/03/20/6
https://access.redhat.com/errata/RHSA-2022:5313
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-22576.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27774.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27776.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27782.json
https://access.redhat.com/security/cve/CVE-2022-27782
https://bugzilla.redhat.com/2077541
https://bugzilla.redhat.com/2077547
https://bugzilla.redhat.com/2078408
https://bugzilla.redhat.com/2082215
https://cert-portal.siemens.com/productcert/html/ssa-146325.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://curl.se/docs/CVE-2022-27782.html
https://errata.almalinux.org/8/ALSA-2022-5313.html
https://hackerone.com/reports/1555796
https://linux.oracle.com/cve/CVE-2022-27782.html
https://linux.oracle.com/errata/ELSA-2022-5313.html
https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
https://nvd.nist.gov/vuln/detail/CVE-2022-27782
https://security.gentoo.org/glsa/202212-01
https://security.netapp.com/advisory/ntap-20220609-0009/
https://ubuntu.com/security/notices/USN-5412-1
https://www.cve.org/CVERecord?id=CVE-2022-27782
https://www.debian.org/security/2022/dsa-5197
|
| curl |
CVE-2022-43551 |
HIGH |
7.79.1-r0 |
7.79.1-r4 |
https://access.redhat.com/security/cve/CVE-2022-43551
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-892048.html
https://curl.se/docs/CVE-2022-43551.html
https://hackerone.com/reports/1755083
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TVWZW5CNSJ7UYAF2BGSYAWAEXDJYUBHA/
https://nvd.nist.gov/vuln/detail/CVE-2022-43551
https://security.gentoo.org/glsa/202310-12
https://security.netapp.com/advisory/ntap-20230427-0007/
https://ubuntu.com/security/notices/USN-5788-1
https://www.cve.org/CVERecord?id=CVE-2022-43551
|
| curl |
CVE-2023-27533 |
HIGH |
7.79.1-r0 |
8.0.1-r0 |
https://access.redhat.com/errata/RHSA-2023:6679
https://access.redhat.com/security/cve/CVE-2023-27533
https://bugzilla.redhat.com/2179062
https://bugzilla.redhat.com/2179069
https://bugzilla.redhat.com/2179092
https://bugzilla.redhat.com/2179103
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://curl.se/docs/CVE-2023-27533.html
https://errata.almalinux.org/9/ALSA-2023-6679.html
https://hackerone.com/reports/1891474
https://linux.oracle.com/cve/CVE-2023-27533.html
https://linux.oracle.com/errata/ELSA-2023-6679.html
https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
https://nvd.nist.gov/vuln/detail/CVE-2023-27533
https://security.gentoo.org/glsa/202310-12
https://security.netapp.com/advisory/ntap-20230420-0011/
https://ubuntu.com/security/notices/USN-5964-1
https://ubuntu.com/security/notices/USN-5964-2
https://www.cve.org/CVERecord?id=CVE-2023-27533
|
| curl |
CVE-2023-27534 |
HIGH |
7.79.1-r0 |
8.0.1-r0 |
https://access.redhat.com/errata/RHSA-2023:6679
https://access.redhat.com/security/cve/CVE-2023-27534
https://bugzilla.redhat.com/2179062
https://bugzilla.redhat.com/2179069
https://bugzilla.redhat.com/2179092
https://bugzilla.redhat.com/2179103
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-806742.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://curl.se/docs/CVE-2023-27534.html
https://errata.almalinux.org/9/ALSA-2023-6679.html
https://hackerone.com/reports/1892351
https://linux.oracle.com/cve/CVE-2023-27534.html
https://linux.oracle.com/errata/ELSA-2023-6679.html
https://lists.debian.org/debian-lts-announce/2024/03/msg00016.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
https://nvd.nist.gov/vuln/detail/CVE-2023-27534
https://security.gentoo.org/glsa/202310-12
https://security.netapp.com/advisory/ntap-20230420-0012/
https://ubuntu.com/security/notices/USN-5964-1
https://www.cve.org/CVERecord?id=CVE-2023-27534
|
| curl |
CVE-2022-27774 |
MEDIUM |
7.79.1-r0 |
7.79.1-r1 |
https://access.redhat.com/errata/RHSA-2022:5313
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-22576.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27774.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27776.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27782.json
https://access.redhat.com/security/cve/CVE-2022-27774
https://bugzilla.redhat.com/2077541
https://bugzilla.redhat.com/2077547
https://bugzilla.redhat.com/2078408
https://bugzilla.redhat.com/2082215
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://curl.se/docs/CVE-2022-27774.html
https://errata.almalinux.org/8/ALSA-2022-5313.html
https://hackerone.com/reports/1543773
https://linux.oracle.com/cve/CVE-2022-27774.html
https://linux.oracle.com/errata/ELSA-2022-5313.html
https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
https://nvd.nist.gov/vuln/detail/CVE-2022-27774
https://security.gentoo.org/glsa/202212-01
https://security.netapp.com/advisory/ntap-20220609-0008/
https://ubuntu.com/security/notices/USN-5397-1
https://www.cve.org/CVERecord?id=CVE-2022-27774
https://www.debian.org/security/2022/dsa-5197
|
| curl |
CVE-2022-27776 |
MEDIUM |
7.79.1-r0 |
7.79.1-r1 |
https://access.redhat.com/errata/RHSA-2022:5313
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-22576.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27774.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27776.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27782.json
https://access.redhat.com/security/cve/CVE-2022-27776
https://bugzilla.redhat.com/2077541
https://bugzilla.redhat.com/2077547
https://bugzilla.redhat.com/2078408
https://bugzilla.redhat.com/2082215
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://curl.se/docs/CVE-2022-27776.html
https://errata.almalinux.org/8/ALSA-2022-5313.html
https://hackerone.com/reports/1547048
https://linux.oracle.com/cve/CVE-2022-27776.html
https://linux.oracle.com/errata/ELSA-2022-5313.html
https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B/
https://nvd.nist.gov/vuln/detail/CVE-2022-27776
https://security.gentoo.org/glsa/202212-01
https://security.netapp.com/advisory/ntap-20220609-0008/
https://ubuntu.com/security/notices/USN-5397-1
https://www.cve.org/CVERecord?id=CVE-2022-27776
https://www.debian.org/security/2022/dsa-5197
|
| curl |
CVE-2022-32205 |
MEDIUM |
7.79.1-r0 |
7.79.1-r2 |
http://seclists.org/fulldisclosure/2022/Oct/28
http://seclists.org/fulldisclosure/2022/Oct/41
https://access.redhat.com/security/cve/CVE-2022-32205
https://cert-portal.siemens.com/productcert/html/ssa-333517.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-419740.html
https://cert-portal.siemens.com/productcert/html/ssa-558014.html
https://cert-portal.siemens.com/productcert/html/ssa-942865.html
https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf
https://curl.se/docs/CVE-2022-32205.html
https://hackerone.com/reports/1569946
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
https://nvd.nist.gov/vuln/detail/CVE-2022-32205
https://security.gentoo.org/glsa/202212-01
https://security.netapp.com/advisory/ntap-20220915-0003/
https://support.apple.com/kb/HT213488
https://ubuntu.com/security/notices/USN-5495-1
https://www.cve.org/CVERecord?id=CVE-2022-32205
https://www.debian.org/security/2022/dsa-5197
|
| curl |
CVE-2022-32206 |
MEDIUM |
7.79.1-r0 |
7.79.1-r2 |
http://seclists.org/fulldisclosure/2022/Oct/28
http://seclists.org/fulldisclosure/2022/Oct/41
http://www.openwall.com/lists/oss-security/2023/02/15/3
https://access.redhat.com/errata/RHSA-2022:6157
https://access.redhat.com/security/cve/CVE-2022-32206
https://bugzilla.redhat.com/2099300
https://bugzilla.redhat.com/2099305
https://bugzilla.redhat.com/2099306
https://bugzilla.redhat.com/show_bug.cgi?id=2099300
https://bugzilla.redhat.com/show_bug.cgi?id=2099305
https://bugzilla.redhat.com/show_bug.cgi?id=2099306
https://cert-portal.siemens.com/productcert/html/ssa-333517.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-419740.html
https://cert-portal.siemens.com/productcert/html/ssa-558014.html
https://cert-portal.siemens.com/productcert/html/ssa-942865.html
https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf
https://creativecommons.org/licenses/by/4.0/
https://curl.se/docs/CVE-2022-32206.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
https://errata.almalinux.org/9/ALSA-2022-6157.html
https://errata.rockylinux.org/RLSA-2022:6157
https://hackerone.com/reports/1570651
https://linux.oracle.com/cve/CVE-2022-32206.html
https://linux.oracle.com/errata/ELSA-2022-6159.html
https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
https://nvd.nist.gov/vuln/detail/CVE-2022-32206
https://security.gentoo.org/glsa/202212-01
https://security.netapp.com/advisory/ntap-20220915-0003/
https://support.apple.com/kb/HT213488
https://ubuntu.com/security/notices/USN-5495-1
https://www.cve.org/CVERecord?id=CVE-2022-32206
https://www.debian.org/security/2022/dsa-5197
|
| curl |
CVE-2022-32208 |
MEDIUM |
7.79.1-r0 |
7.79.1-r2 |
http://seclists.org/fulldisclosure/2022/Oct/28
http://seclists.org/fulldisclosure/2022/Oct/41
https://access.redhat.com/errata/RHSA-2022:6157
https://access.redhat.com/security/cve/CVE-2022-32208
https://bugzilla.redhat.com/2099300
https://bugzilla.redhat.com/2099305
https://bugzilla.redhat.com/2099306
https://bugzilla.redhat.com/show_bug.cgi?id=2099300
https://bugzilla.redhat.com/show_bug.cgi?id=2099305
https://bugzilla.redhat.com/show_bug.cgi?id=2099306
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-419740.html
https://cert-portal.siemens.com/productcert/html/ssa-558014.html
https://cert-portal.siemens.com/productcert/html/ssa-942865.html
https://creativecommons.org/licenses/by/4.0/
https://curl.se/docs/CVE-2022-32208.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
https://errata.almalinux.org/9/ALSA-2022-6157.html
https://errata.rockylinux.org/RLSA-2022:6157
https://hackerone.com/reports/1590071
https://linux.oracle.com/cve/CVE-2022-32208.html
https://linux.oracle.com/errata/ELSA-2022-6159.html
https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
https://nvd.nist.gov/vuln/detail/CVE-2022-32208
https://security.gentoo.org/glsa/202212-01
https://security.netapp.com/advisory/ntap-20220915-0003/
https://support.apple.com/kb/HT213488
https://ubuntu.com/security/notices/USN-5495-1
https://ubuntu.com/security/notices/USN-5499-1
https://www.cve.org/CVERecord?id=CVE-2022-32208
https://www.debian.org/security/2022/dsa-5197
|
| curl |
CVE-2022-43552 |
MEDIUM |
7.79.1-r0 |
7.79.1-r4 |
http://seclists.org/fulldisclosure/2023/Mar/17
https://access.redhat.com/errata/RHSA-2023:2478
https://access.redhat.com/security/cve/CVE-2022-43552
https://bugzilla.redhat.com/2120718
https://bugzilla.redhat.com/2152652
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-892048.html
https://curl.se/docs/CVE-2022-43552.html
https://errata.almalinux.org/9/ALSA-2023-2478.html
https://hackerone.com/reports/1764858
https://linux.oracle.com/cve/CVE-2022-43552.html
https://linux.oracle.com/errata/ELSA-2023-7743.html
https://nvd.nist.gov/vuln/detail/CVE-2022-43552
https://security.gentoo.org/glsa/202310-12
https://security.netapp.com/advisory/ntap-20230214-0002/
https://support.apple.com/kb/HT213670
https://ubuntu.com/security/notices/USN-5788-1
https://ubuntu.com/security/notices/USN-5894-1
https://www.cve.org/CVERecord?id=CVE-2022-43552
|
| curl |
CVE-2023-23915 |
MEDIUM |
7.79.1-r0 |
7.79.1-r5 |
https://access.redhat.com/security/cve/CVE-2023-23915
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://curl.se/docs/CVE-2023-23915.html
https://hackerone.com/reports/1826048
https://nvd.nist.gov/vuln/detail/CVE-2023-23915
https://security.gentoo.org/glsa/202310-12
https://security.netapp.com/advisory/ntap-20230309-0006/
https://ubuntu.com/security/notices/USN-5891-1
https://www.cve.org/CVERecord?id=CVE-2023-23915
|
| curl |
CVE-2023-23916 |
MEDIUM |
7.79.1-r0 |
7.79.1-r5 |
https://access.redhat.com/errata/RHSA-2023:1701
https://access.redhat.com/security/cve/CVE-2023-23916
https://bugzilla.redhat.com/2167815
https://bugzilla.redhat.com/show_bug.cgi?id=2167815
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://curl.se/docs/CVE-2023-23916.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23916
https://errata.almalinux.org/9/ALSA-2023-1701.html
https://errata.rockylinux.org/RLSA-2023:1140
https://hackerone.com/reports/1826048
https://linux.oracle.com/cve/CVE-2023-23916.html
https://linux.oracle.com/errata/ELSA-2023-1701.html
https://lists.debian.org/debian-lts-announce/2023/02/msg00035.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BQKE6TXYDHOTFHLTBZ5X73GTKI7II5KO/
https://nvd.nist.gov/vuln/detail/CVE-2023-23916
https://security.gentoo.org/glsa/202310-12
https://security.netapp.com/advisory/ntap-20230309-0006/
https://ubuntu.com/security/notices/USN-5891-1
https://www.cve.org/CVERecord?id=CVE-2023-23916
https://www.debian.org/security/2023/dsa-5365
|
| curl |
CVE-2023-27535 |
MEDIUM |
7.79.1-r0 |
8.0.1-r0 |
https://access.redhat.com/errata/RHSA-2023:2650
https://access.redhat.com/security/cve/CVE-2023-27535
https://bugzilla.redhat.com/2179073
https://bugzilla.redhat.com/show_bug.cgi?id=2179073
https://bugzilla.redhat.com/show_bug.cgi?id=2188029
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-806742.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://curl.se/docs/CVE-2023-27535.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27535
https://errata.almalinux.org/9/ALSA-2023-2650.html
https://errata.rockylinux.org/RLSA-2023:3106
https://hackerone.com/reports/1892780
https://linux.oracle.com/cve/CVE-2023-27535.html
https://linux.oracle.com/errata/ELSA-2023-3106.html
https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
https://nvd.nist.gov/vuln/detail/CVE-2023-27535
https://security.gentoo.org/glsa/202310-12
https://security.netapp.com/advisory/ntap-20230420-0010/
https://ubuntu.com/security/notices/USN-5964-1
https://ubuntu.com/security/notices/USN-5964-2
https://www.cve.org/CVERecord?id=CVE-2023-27535
|
| curl |
CVE-2023-27536 |
MEDIUM |
7.79.1-r0 |
8.0.1-r0 |
https://access.redhat.com/errata/RHSA-2023:6679
https://access.redhat.com/security/cve/CVE-2023-27536
https://bugzilla.redhat.com/2179062
https://bugzilla.redhat.com/2179069
https://bugzilla.redhat.com/2179092
https://bugzilla.redhat.com/2179103
https://bugzilla.redhat.com/show_bug.cgi?id=2179092
https://bugzilla.redhat.com/show_bug.cgi?id=2196786
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-806742.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://curl.se/docs/CVE-2023-27536.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27536
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28321
https://errata.almalinux.org/9/ALSA-2023-6679.html
https://errata.rockylinux.org/RLSA-2023:4523
https://hackerone.com/reports/1895135
https://linux.oracle.com/cve/CVE-2023-27536.html
https://linux.oracle.com/errata/ELSA-2023-6679.html
https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
https://nvd.nist.gov/vuln/detail/CVE-2023-27536
https://security.gentoo.org/glsa/202310-12
https://security.netapp.com/advisory/ntap-20230420-0010/
https://ubuntu.com/security/notices/USN-5964-1
https://ubuntu.com/security/notices/USN-5964-2
https://www.cve.org/CVERecord?id=CVE-2023-27536
|
| curl |
CVE-2023-27537 |
MEDIUM |
7.79.1-r0 |
8.0.1-r0 |
https://access.redhat.com/security/cve/CVE-2023-27537
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://curl.se/docs/CVE-2023-27537.html
https://hackerone.com/reports/1897203
https://nvd.nist.gov/vuln/detail/CVE-2023-27537
https://security.gentoo.org/glsa/202310-12
https://security.netapp.com/advisory/ntap-20230420-0010/
https://www.cve.org/CVERecord?id=CVE-2023-27537
|
| curl |
CVE-2023-27538 |
MEDIUM |
7.79.1-r0 |
8.0.1-r0 |
https://access.redhat.com/errata/RHSA-2023:6679
https://access.redhat.com/security/cve/CVE-2023-27538
https://bugzilla.redhat.com/2179062
https://bugzilla.redhat.com/2179069
https://bugzilla.redhat.com/2179092
https://bugzilla.redhat.com/2179103
https://cert-portal.siemens.com/productcert/html/ssa-077170.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://curl.se/docs/CVE-2023-27538.html
https://errata.almalinux.org/9/ALSA-2023-6679.html
https://hackerone.com/reports/1898475
https://linux.oracle.com/cve/CVE-2023-27538.html
https://linux.oracle.com/errata/ELSA-2023-6679.html
https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
https://nvd.nist.gov/vuln/detail/CVE-2023-27538
https://security.gentoo.org/glsa/202310-12
https://security.netapp.com/advisory/ntap-20230420-0010/
https://ubuntu.com/security/notices/USN-5964-1
https://www.cve.org/CVERecord?id=CVE-2023-27538
|
| curl |
CVE-2022-35252 |
LOW |
7.79.1-r0 |
7.79.1-r3 |
http://seclists.org/fulldisclosure/2023/Jan/20
http://seclists.org/fulldisclosure/2023/Jan/21
https://access.redhat.com/errata/RHSA-2023:2478
https://access.redhat.com/security/cve/CVE-2022-35252
https://bugzilla.redhat.com/2120718
https://bugzilla.redhat.com/2152652
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-419740.html
https://cert-portal.siemens.com/productcert/html/ssa-558014.html
https://cert-portal.siemens.com/productcert/html/ssa-892048.html
https://cert-portal.siemens.com/productcert/html/ssa-942865.html
https://curl.se/docs/CVE-2022-35252.html
https://errata.almalinux.org/9/ALSA-2023-2478.html
https://hackerone.com/reports/1613943
https://linux.oracle.com/cve/CVE-2022-35252.html
https://linux.oracle.com/errata/ELSA-2023-2963.html
https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
https://nvd.nist.gov/vuln/detail/CVE-2022-35252
https://security.gentoo.org/glsa/202212-01
https://security.netapp.com/advisory/ntap-20220930-0005/
https://support.apple.com/kb/HT213603
https://support.apple.com/kb/HT213604
https://ubuntu.com/security/notices/USN-5587-1
https://www.cve.org/CVERecord?id=CVE-2022-35252
https://www.openwall.com/lists/oss-security/2022/08/31/2
|
| expat |
CVE-2022-25235 |
CRITICAL |
2.4.4-r0 |
2.4.5-r0 |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25235
http://www.openwall.com/lists/oss-security/2022/02/19/1
https://access.redhat.com/errata/RHSA-2022:1643
https://access.redhat.com/errata/RHSA-2022:7811
https://access.redhat.com/security/cve/CVE-2022-25235
https://blog.hartwork.org/posts/expat-2-4-5-released/
https://bugzilla.redhat.com/2048356
https://bugzilla.redhat.com/2056350
https://bugzilla.redhat.com/2056354
https://bugzilla.redhat.com/2056363
https://bugzilla.redhat.com/2056366
https://bugzilla.redhat.com/2056370
https://bugzilla.redhat.com/show_bug.cgi?id=2056366
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-484086.html
https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25235
https://errata.almalinux.org/8/ALSA-2022-7811.html
https://errata.rockylinux.org/RLSA-2022:1643
https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-m5gv-vh63-f8qf
https://github.com/libexpat/libexpat/pull/562
https://github.com/libexpat/libexpat/pull/562/commits/367ae600b48d74261bbc339b17e9318424049791%20%28fix%29
https://github.com/libexpat/libexpat/pull/562/commits/97cfdc3fa7dca759880d81e371901f4620279106%20%28tests%29
https://linux.oracle.com/cve/CVE-2022-25235.html
https://linux.oracle.com/errata/ELSA-2022-9359.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/
https://nvd.nist.gov/vuln/detail/CVE-2022-25235
https://security.gentoo.org/glsa/202209-24
https://security.netapp.com/advisory/ntap-20220303-0008/
https://ubuntu.com/security/notices/USN-5288-1
https://ubuntu.com/security/notices/USN-5455-1
https://ubuntu.com/security/notices/USN-8235-1
https://ubuntu.com/security/notices/USN-8240-1
https://ubuntu.com/security/notices/USN-8313-1
https://ubuntu.com/security/notices/USN-8314-1
https://ubuntu.com/security/notices/USN-8316-1
https://www.cve.org/CVERecord?id=CVE-2022-25235
https://www.debian.org/security/2022/dsa-5085
https://www.oracle.com/security-alerts/cpuapr2022.html
|
| expat |
CVE-2022-25236 |
CRITICAL |
2.4.4-r0 |
2.4.5-r0 |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25236
http://packetstormsecurity.com/files/167238/Zoom-XMPP-Stanza-Smuggling-Remote-Code-Execution.html
http://www.openwall.com/lists/oss-security/2022/02/19/1
https://access.redhat.com/errata/RHSA-2022:0951
https://access.redhat.com/errata/RHSA-2022:7811
https://access.redhat.com/security/cve/CVE-2022-25236
https://blog.hartwork.org/posts/expat-2-4-5-released/
https://bugzilla.redhat.com/2048356
https://bugzilla.redhat.com/2056350
https://bugzilla.redhat.com/2056354
https://bugzilla.redhat.com/2056363
https://bugzilla.redhat.com/2056366
https://bugzilla.redhat.com/2056370
https://bugzilla.redhat.com/show_bug.cgi?id=2044451
https://bugzilla.redhat.com/show_bug.cgi?id=2044455
https://bugzilla.redhat.com/show_bug.cgi?id=2044457
https://bugzilla.redhat.com/show_bug.cgi?id=2044464
https://bugzilla.redhat.com/show_bug.cgi?id=2044467
https://bugzilla.redhat.com/show_bug.cgi?id=2044479
https://bugzilla.redhat.com/show_bug.cgi?id=2044484
https://bugzilla.redhat.com/show_bug.cgi?id=2044488
https://bugzilla.redhat.com/show_bug.cgi?id=2044613
https://bugzilla.redhat.com/show_bug.cgi?id=2056363
https://bugzilla.redhat.com/show_bug.cgi?id=2056366
https://bugzilla.redhat.com/show_bug.cgi?id=2056370
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-484086.html
https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45960
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46143
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22822
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22823
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22824
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22825
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22826
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22827
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23852
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25235
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25236
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25315
https://errata.almalinux.org/8/ALSA-2022-7811.html
https://errata.rockylinux.org/RLSA-2022:0951
https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-v95x-cqc2-wxq4
https://github.com/libexpat/libexpat/pull/561
https://github.com/libexpat/libexpat/pull/561/commits/2de077423fb22750ebea599677d523b53cb93b1d%20%28test%29
https://github.com/libexpat/libexpat/pull/561/commits/a2fe525e660badd64b6c557c2b1ec26ddc07f6e4%20%28fix%29
https://github.com/libexpat/libexpat/pull/577
https://linux.oracle.com/cve/CVE-2022-25236.html
https://linux.oracle.com/errata/ELSA-2022-9359.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/
https://nvd.nist.gov/vuln/detail/CVE-2022-25236
https://security.gentoo.org/glsa/202209-24
https://security.netapp.com/advisory/ntap-20220303-0008/
https://ubuntu.com/security/notices/USN-5288-1
https://ubuntu.com/security/notices/USN-5455-1
https://ubuntu.com/security/notices/USN-8235-1
https://ubuntu.com/security/notices/USN-8240-1
https://ubuntu.com/security/notices/USN-8241-1
https://ubuntu.com/security/notices/USN-8313-1
https://ubuntu.com/security/notices/USN-8314-1
https://ubuntu.com/security/notices/USN-8316-1
https://www.cve.org/CVERecord?id=CVE-2022-25236
https://www.debian.org/security/2022/dsa-5085
https://www.oracle.com/security-alerts/cpuapr2022.html
|
| expat |
CVE-2022-25315 |
CRITICAL |
2.4.4-r0 |
2.4.5-r0 |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25315
http://www.openwall.com/lists/oss-security/2022/02/19/1
https://access.redhat.com/errata/RHSA-2022:0951
https://access.redhat.com/errata/RHSA-2022:7811
https://access.redhat.com/security/cve/CVE-2022-25315
https://blog.hartwork.org/posts/expat-2-4-5-released/
https://bugzilla.redhat.com/2048356
https://bugzilla.redhat.com/2056350
https://bugzilla.redhat.com/2056354
https://bugzilla.redhat.com/2056363
https://bugzilla.redhat.com/2056366
https://bugzilla.redhat.com/2056370
https://bugzilla.redhat.com/show_bug.cgi?id=2044451
https://bugzilla.redhat.com/show_bug.cgi?id=2044455
https://bugzilla.redhat.com/show_bug.cgi?id=2044457
https://bugzilla.redhat.com/show_bug.cgi?id=2044464
https://bugzilla.redhat.com/show_bug.cgi?id=2044467
https://bugzilla.redhat.com/show_bug.cgi?id=2044479
https://bugzilla.redhat.com/show_bug.cgi?id=2044484
https://bugzilla.redhat.com/show_bug.cgi?id=2044488
https://bugzilla.redhat.com/show_bug.cgi?id=2044613
https://bugzilla.redhat.com/show_bug.cgi?id=2056363
https://bugzilla.redhat.com/show_bug.cgi?id=2056366
https://bugzilla.redhat.com/show_bug.cgi?id=2056370
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-484086.html
https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45960
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46143
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22822
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22823
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22824
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22825
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22826
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22827
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23852
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25235
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25236
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25315
https://errata.almalinux.org/8/ALSA-2022-7811.html
https://errata.rockylinux.org/RLSA-2022:0951
https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-grm4-6gc8-2424
https://github.com/libexpat/libexpat/pull/559
https://linux.oracle.com/cve/CVE-2022-25315.html
https://linux.oracle.com/errata/ELSA-2022-9359.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/
https://nvd.nist.gov/vuln/detail/CVE-2022-25315
https://security.gentoo.org/glsa/202209-24
https://security.netapp.com/advisory/ntap-20220303-0008/
https://ubuntu.com/security/notices/USN-5320-1
https://www.cve.org/CVERecord?id=CVE-2022-25315
https://www.debian.org/security/2022/dsa-5085
https://www.oracle.com/security-alerts/cpuapr2022.html
|
| expat |
CVE-2022-25314 |
HIGH |
2.4.4-r0 |
2.4.5-r0 |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25314
http://www.openwall.com/lists/oss-security/2022/02/19/1
https://access.redhat.com/errata/RHSA-2022:5244
https://access.redhat.com/errata/RHSA-2022:5314
https://access.redhat.com/security/cve/CVE-2022-25314
https://blog.hartwork.org/posts/expat-2-4-5-released/
https://bugzilla.redhat.com/2056350
https://bugzilla.redhat.com/2056354
https://bugzilla.redhat.com/show_bug.cgi?id=2056350
https://bugzilla.redhat.com/show_bug.cgi?id=2056354
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-484086.html
https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25313
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25314
https://errata.almalinux.org/9/ALSA-2022-5244.html
https://errata.rockylinux.org/RLSA-2022:5314
https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-q6jm-mm6c-r7m4
https://github.com/libexpat/libexpat/pull/560
https://linux.oracle.com/cve/CVE-2022-25314.html
https://linux.oracle.com/errata/ELSA-2022-5314.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/
https://nvd.nist.gov/vuln/detail/CVE-2022-25314
https://security.gentoo.org/glsa/202209-24
https://security.netapp.com/advisory/ntap-20220303-0008/
https://ubuntu.com/security/notices/USN-5320-1
https://www.cve.org/CVERecord?id=CVE-2022-25314
https://www.debian.org/security/2022/dsa-5085
https://www.oracle.com/security-alerts/cpuapr2022.html
|
| expat |
CVE-2022-40674 |
HIGH |
2.4.4-r0 |
2.4.9-r0 |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40674
https://access.redhat.com/errata/RHSA-2022:6838
https://access.redhat.com/errata/RHSA-2022:7020
https://access.redhat.com/security/cve/CVE-2022-40674
https://blog.hartwork.org/posts/expat-2-4-9-released/
https://bugzilla.redhat.com/2130769
https://bugzilla.redhat.com/show_bug.cgi?id=2130769
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-558014.html
https://cert-portal.siemens.com/productcert/html/ssa-892048.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40674
https://errata.almalinux.org/9/ALSA-2022-7020.html
https://errata.rockylinux.org/RLSA-2022:6838
https://github.com/advisories/GHSA-2vq2-xc55-3j5m
https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-xvff-wcqg-jj26
https://github.com/libexpat/libexpat/pull/629
https://github.com/libexpat/libexpat/pull/640
https://linux.oracle.com/cve/CVE-2022-40674.html
https://linux.oracle.com/errata/ELSA-2022-9967.html
https://lists.debian.org/debian-lts-announce/2022/09/msg00029.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSVZN3IJ6OCPSJL7AEX3ZHSHAHFOGESK/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J2IGJNHFV53PYST7VQV3T4NHVYAMXA36/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LQB6FJAM5YQ35SF5B2MN25Y2FX56EOEZ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2ZKEPGFCZ7R6DRVH3K6RBJPT42ZBEG/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XCGBVQQ47URGJAZWHCISHDWF6QBTV2LE/
https://nvd.nist.gov/vuln/detail/CVE-2022-40674
https://security.gentoo.org/glsa/202209-24
https://security.gentoo.org/glsa/202211-06
https://security.netapp.com/advisory/ntap-20221028-0008/
https://ubuntu.com/security/notices/USN-5638-1
https://ubuntu.com/security/notices/USN-5638-2
https://ubuntu.com/security/notices/USN-5638-4
https://ubuntu.com/security/notices/USN-5726-1
https://www.cve.org/CVERecord?id=CVE-2022-40674
https://www.debian.org/security/2022/dsa-5236
|
| expat |
CVE-2022-43680 |
HIGH |
2.4.4-r0 |
2.5.0-r0 |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43680
http://www.openwall.com/lists/oss-security/2023/12/28/5
http://www.openwall.com/lists/oss-security/2024/01/03/5
https://access.redhat.com/errata/RHSA-2023:0337
https://access.redhat.com/security/cve/CVE-2022-43680
https://bugzilla.redhat.com/2140059
https://bugzilla.redhat.com/show_bug.cgi?id=2140059
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-892048.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43680
https://errata.almalinux.org/9/ALSA-2023-0337.html
https://errata.rockylinux.org/RLSA-2023:0337
https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-fwxw-x96j-mxgm
https://github.com/libexpat/libexpat/issues/649
https://github.com/libexpat/libexpat/pull/616
https://github.com/libexpat/libexpat/pull/650
https://linux.oracle.com/cve/CVE-2022-43680.html
https://linux.oracle.com/errata/ELSA-2023-0337.html
https://lists.debian.org/debian-lts-announce/2022/10/msg00033.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AJ5VY2VYXE4WTRGQ6LMGLF6FV3SY37YE/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BY4OPSIB33ETNUXZY2UPZ4NGQ3OKDY4D/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DPQVIF6TOJNY2T3ZZETFKR4G34FFREBQ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FFCOMBSOJKLIKCGCJWHLJXO4EVYBG7AR/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IUJ2BULJTZ2BMSKQHB6US674P55UCWWS/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XG5XOOB7CD55CEE6OJYKSACSIMQ4RWQ6/
https://nvd.nist.gov/vuln/detail/CVE-2022-43680
https://security.gentoo.org/glsa/202210-38
https://security.netapp.com/advisory/ntap-20221118-0007/
https://ubuntu.com/security/notices/USN-5638-2
https://ubuntu.com/security/notices/USN-5638-3
https://ubuntu.com/security/notices/USN-5638-4
https://www.cve.org/CVERecord?id=CVE-2022-43680
https://www.debian.org/security/2022/dsa-5266
|
| expat |
CVE-2022-25313 |
MEDIUM |
2.4.4-r0 |
2.4.5-r0 |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25313
http://www.openwall.com/lists/oss-security/2022/02/19/1
https://access.redhat.com/errata/RHSA-2022:5244
https://access.redhat.com/errata/RHSA-2022:5314
https://access.redhat.com/security/cve/CVE-2022-25313
https://blog.hartwork.org/posts/expat-2-4-5-released/
https://bugzilla.redhat.com/2056350
https://bugzilla.redhat.com/2056354
https://bugzilla.redhat.com/show_bug.cgi?id=2056350
https://bugzilla.redhat.com/show_bug.cgi?id=2056354
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-484086.html
https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25313
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25314
https://errata.almalinux.org/9/ALSA-2022-5244.html
https://errata.rockylinux.org/RLSA-2022:5314
https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-x6p7-99mx-mwxq
https://github.com/libexpat/libexpat/pull/558
https://linux.oracle.com/cve/CVE-2022-25313.html
https://linux.oracle.com/errata/ELSA-2022-5314.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/
https://nvd.nist.gov/vuln/detail/CVE-2022-25313
https://security.gentoo.org/glsa/202209-24
https://security.netapp.com/advisory/ntap-20220303-0008/
https://ubuntu.com/security/notices/USN-5320-1
https://www.cve.org/CVERecord?id=CVE-2022-25313
https://www.debian.org/security/2022/dsa-5085
https://www.oracle.com/security-alerts/cpuapr2022.html
|
| freetype |
CVE-2022-27404 |
CRITICAL |
2.10.4-r1 |
2.10.4-r2 |
https://access.redhat.com/errata/RHSA-2022:8340
https://access.redhat.com/security/cve/CVE-2022-27404
https://bugzilla.redhat.com/2077985
https://bugzilla.redhat.com/2077989
https://bugzilla.redhat.com/2077991
https://bugzilla.redhat.com/show_bug.cgi?id=2077985
https://bugzilla.redhat.com/show_bug.cgi?id=2077989
https://bugzilla.redhat.com/show_bug.cgi?id=2077991
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27404
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27405
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27406
https://errata.almalinux.org/9/ALSA-2022-8340.html
https://errata.rockylinux.org/RLSA-2022:8340
https://gitlab.freedesktop.org/freetype/freetype/-/issues/1138
https://linux.oracle.com/cve/CVE-2022-27404.html
https://linux.oracle.com/errata/ELSA-2022-8340.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU/
https://nvd.nist.gov/vuln/detail/CVE-2022-27404
https://security.gentoo.org/glsa/202402-06
https://ubuntu.com/security/notices/USN-5528-1
https://www.cve.org/CVERecord?id=CVE-2022-27404
|
| freetype |
CVE-2022-27405 |
HIGH |
2.10.4-r1 |
2.10.4-r3 |
http://freetype.com
https://access.redhat.com/errata/RHSA-2022:8340
https://access.redhat.com/security/cve/CVE-2022-27405
https://bugzilla.redhat.com/2077985
https://bugzilla.redhat.com/2077989
https://bugzilla.redhat.com/2077991
https://bugzilla.redhat.com/show_bug.cgi?id=2077985
https://bugzilla.redhat.com/show_bug.cgi?id=2077989
https://bugzilla.redhat.com/show_bug.cgi?id=2077991
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27404
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27405
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27406
https://errata.almalinux.org/9/ALSA-2022-8340.html
https://errata.rockylinux.org/RLSA-2022:8340
https://gitlab.freedesktop.org/freetype/freetype/-/issues/1139
https://linux.oracle.com/cve/CVE-2022-27405.html
https://linux.oracle.com/errata/ELSA-2022-8340.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU/
https://nvd.nist.gov/vuln/detail/CVE-2022-27405
https://security.gentoo.org/glsa/202402-06
https://ubuntu.com/security/notices/USN-5528-1
https://www.cve.org/CVERecord?id=CVE-2022-27405
|
| freetype |
CVE-2022-27406 |
HIGH |
2.10.4-r1 |
2.10.4-r3 |
http://freetype.com
https://access.redhat.com/errata/RHSA-2022:8340
https://access.redhat.com/security/cve/CVE-2022-27406
https://bugzilla.redhat.com/2077985
https://bugzilla.redhat.com/2077989
https://bugzilla.redhat.com/2077991
https://bugzilla.redhat.com/show_bug.cgi?id=2077985
https://bugzilla.redhat.com/show_bug.cgi?id=2077989
https://bugzilla.redhat.com/show_bug.cgi?id=2077991
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27404
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27405
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27406
https://errata.almalinux.org/9/ALSA-2022-8340.html
https://errata.rockylinux.org/RLSA-2022:8340
https://gitlab.freedesktop.org/freetype/freetype/-/issues/1140
https://linux.oracle.com/cve/CVE-2022-27406.html
https://linux.oracle.com/errata/ELSA-2022-8340.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU/
https://nvd.nist.gov/vuln/detail/CVE-2022-27406
https://security.gentoo.org/glsa/202402-06
https://ubuntu.com/security/notices/USN-5453-1
https://ubuntu.com/security/notices/USN-5528-1
https://ubuntu.com/security/notices/USN-7352-2
https://www.cve.org/CVERecord?id=CVE-2022-27406
|
| libcrypto1.1 |
CVE-2022-0778 |
HIGH |
1.1.1l-r0 |
1.1.1n-r0 |
http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html
http://seclists.org/fulldisclosure/2022/May/33
http://seclists.org/fulldisclosure/2022/May/35
http://seclists.org/fulldisclosure/2022/May/38
https://access.redhat.com/errata/RHSA-2022:4899
https://access.redhat.com/errata/RHSA-2022:5326
https://access.redhat.com/security/cve/CVE-2022-0778
https://bugzilla.redhat.com/2062202
https://bugzilla.redhat.com/show_bug.cgi?id=2062202
https://cert-portal.siemens.com/productcert/html/ssa-019200.html
https://cert-portal.siemens.com/productcert/html/ssa-028723.html
https://cert-portal.siemens.com/productcert/html/ssa-108696.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-712929.html
https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778
https://errata.almalinux.org/8/ALSA-2022-5326.html
https://errata.rockylinux.org/RLSA-2022:4899
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246
https://github.com/advisories/GHSA-x3mh-jvjw-3xwx
https://linux.oracle.com/cve/CVE-2022-0778.html
https://linux.oracle.com/errata/ELSA-2022-9272.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/
https://nvd.nist.gov/vuln/detail/CVE-2022-0778
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002
https://rustsec.org/advisories/RUSTSEC-2022-0014.html
https://security.gentoo.org/glsa/202210-02
https://security.netapp.com/advisory/ntap-20220321-0002
https://security.netapp.com/advisory/ntap-20220321-0002/
https://security.netapp.com/advisory/ntap-20220429-0005
https://security.netapp.com/advisory/ntap-20220429-0005/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://support.apple.com/kb/HT213255
https://support.apple.com/kb/HT213256
https://support.apple.com/kb/HT213257
https://ubuntu.com/security/notices/USN-5328-1
https://ubuntu.com/security/notices/USN-5328-2
https://ubuntu.com/security/notices/USN-6457-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2022-0778
https://www.debian.org/security/2022/dsa-5103
https://www.openssl.org/news/secadv/20220315.txt
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.tenable.com/security/tns-2022-06
https://www.tenable.com/security/tns-2022-07
https://www.tenable.com/security/tns-2022-08
https://www.tenable.com/security/tns-2022-09
|
| libcrypto1.1 |
CVE-2022-4450 |
HIGH |
1.1.1l-r0 |
1.1.1t-r0 |
https://access.redhat.com/errata/RHSA-2023:0946
https://access.redhat.com/errata/RHSA-2023:2165
https://access.redhat.com/security/cve/CVE-2022-4450
https://bugzilla.redhat.com/1960321
https://bugzilla.redhat.com/2164440
https://bugzilla.redhat.com/2164487
https://bugzilla.redhat.com/2164492
https://bugzilla.redhat.com/2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2144000
https://bugzilla.redhat.com/show_bug.cgi?id=2144003
https://bugzilla.redhat.com/show_bug.cgi?id=2144006
https://bugzilla.redhat.com/show_bug.cgi?id=2144008
https://bugzilla.redhat.com/show_bug.cgi?id=2144010
https://bugzilla.redhat.com/show_bug.cgi?id=2144012
https://bugzilla.redhat.com/show_bug.cgi?id=2144015
https://bugzilla.redhat.com/show_bug.cgi?id=2144017
https://bugzilla.redhat.com/show_bug.cgi?id=2144019
https://bugzilla.redhat.com/show_bug.cgi?id=2145170
https://bugzilla.redhat.com/show_bug.cgi?id=2158412
https://bugzilla.redhat.com/show_bug.cgi?id=2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2164487
https://bugzilla.redhat.com/show_bug.cgi?id=2164488
https://bugzilla.redhat.com/show_bug.cgi?id=2164492
https://bugzilla.redhat.com/show_bug.cgi?id=2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2164497
https://bugzilla.redhat.com/show_bug.cgi?id=2164499
https://bugzilla.redhat.com/show_bug.cgi?id=2164500
https://cert-portal.siemens.com/productcert/html/ssa-203374.html
https://cert-portal.siemens.com/productcert/html/ssa-337522.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-556635.html
https://cert-portal.siemens.com/productcert/html/ssa-561322.html
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-699386.html
https://cert-portal.siemens.com/productcert/html/ssa-769027.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-879734.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401
https://errata.almalinux.org/9/ALSA-2023-2165.html
https://errata.rockylinux.org/RLSA-2023:0946
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b
https://github.com/advisories/GHSA-v5w6-wcm8-jm4q
https://linux.oracle.com/cve/CVE-2022-4450.html
https://linux.oracle.com/errata/ELSA-2023-32791.html
https://nvd.nist.gov/vuln/detail/CVE-2022-4450
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003
https://rustsec.org/advisories/RUSTSEC-2023-0010.html
https://security.gentoo.org/glsa/202402-08
https://ubuntu.com/security/notices/USN-5844-1
https://ubuntu.com/security/notices/USN-6564-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2022-4450
https://www.openssl.org/news/secadv/20230207.txt
|
| libcrypto1.1 |
CVE-2023-0215 |
HIGH |
1.1.1l-r0 |
1.1.1t-r0 |
https://access.redhat.com/errata/RHSA-2023:0946
https://access.redhat.com/errata/RHSA-2023:2165
https://access.redhat.com/security/cve/CVE-2023-0215
https://bugzilla.redhat.com/1960321
https://bugzilla.redhat.com/2164440
https://bugzilla.redhat.com/2164487
https://bugzilla.redhat.com/2164492
https://bugzilla.redhat.com/2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2144000
https://bugzilla.redhat.com/show_bug.cgi?id=2144003
https://bugzilla.redhat.com/show_bug.cgi?id=2144006
https://bugzilla.redhat.com/show_bug.cgi?id=2144008
https://bugzilla.redhat.com/show_bug.cgi?id=2144010
https://bugzilla.redhat.com/show_bug.cgi?id=2144012
https://bugzilla.redhat.com/show_bug.cgi?id=2144015
https://bugzilla.redhat.com/show_bug.cgi?id=2144017
https://bugzilla.redhat.com/show_bug.cgi?id=2144019
https://bugzilla.redhat.com/show_bug.cgi?id=2145170
https://bugzilla.redhat.com/show_bug.cgi?id=2158412
https://bugzilla.redhat.com/show_bug.cgi?id=2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2164487
https://bugzilla.redhat.com/show_bug.cgi?id=2164488
https://bugzilla.redhat.com/show_bug.cgi?id=2164492
https://bugzilla.redhat.com/show_bug.cgi?id=2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2164497
https://bugzilla.redhat.com/show_bug.cgi?id=2164499
https://bugzilla.redhat.com/show_bug.cgi?id=2164500
https://cert-portal.siemens.com/productcert/html/ssa-203374.html
https://cert-portal.siemens.com/productcert/html/ssa-337522.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-556635.html
https://cert-portal.siemens.com/productcert/html/ssa-561322.html
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-769027.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-879734.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401
https://errata.almalinux.org/9/ALSA-2023-2165.html
https://errata.rockylinux.org/RLSA-2023:0946
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344
https://github.com/advisories/GHSA-r7jw-wp68-3xch
https://linux.oracle.com/cve/CVE-2023-0215.html
https://linux.oracle.com/errata/ELSA-2023-32791.html
https://nvd.nist.gov/vuln/detail/CVE-2023-0215
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003
https://rustsec.org/advisories/RUSTSEC-2023-0009.html
https://security.gentoo.org/glsa/202402-08
https://security.netapp.com/advisory/ntap-20230427-0007
https://security.netapp.com/advisory/ntap-20230427-0007/
https://security.netapp.com/advisory/ntap-20230427-0009
https://security.netapp.com/advisory/ntap-20230427-0009/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://ubuntu.com/security/notices/USN-5844-1
https://ubuntu.com/security/notices/USN-5845-1
https://ubuntu.com/security/notices/USN-5845-2
https://ubuntu.com/security/notices/USN-6564-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-0215
https://www.openssl.org/news/secadv/20230207.txt
|
| libcrypto1.1 |
CVE-2023-0286 |
HIGH |
1.1.1l-r0 |
1.1.1t-r0 |
https://access.redhat.com/errata/RHSA-2023:0946
https://access.redhat.com/errata/RHSA-2025:7937
https://access.redhat.com/security/cve/CVE-2023-0286
https://access.redhat.com/security/cve/cve-2023-0286
https://bugzilla.redhat.com/2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2144000
https://bugzilla.redhat.com/show_bug.cgi?id=2144003
https://bugzilla.redhat.com/show_bug.cgi?id=2144006
https://bugzilla.redhat.com/show_bug.cgi?id=2144008
https://bugzilla.redhat.com/show_bug.cgi?id=2144010
https://bugzilla.redhat.com/show_bug.cgi?id=2144012
https://bugzilla.redhat.com/show_bug.cgi?id=2144015
https://bugzilla.redhat.com/show_bug.cgi?id=2144017
https://bugzilla.redhat.com/show_bug.cgi?id=2144019
https://bugzilla.redhat.com/show_bug.cgi?id=2145170
https://bugzilla.redhat.com/show_bug.cgi?id=2158412
https://bugzilla.redhat.com/show_bug.cgi?id=2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2164487
https://bugzilla.redhat.com/show_bug.cgi?id=2164488
https://bugzilla.redhat.com/show_bug.cgi?id=2164492
https://bugzilla.redhat.com/show_bug.cgi?id=2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2164497
https://bugzilla.redhat.com/show_bug.cgi?id=2164499
https://bugzilla.redhat.com/show_bug.cgi?id=2164500
https://cert-portal.siemens.com/productcert/html/ssa-028723.html
https://cert-portal.siemens.com/productcert/html/ssa-203374.html
https://cert-portal.siemens.com/productcert/html/ssa-264815.html
https://cert-portal.siemens.com/productcert/html/ssa-337522.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-455250.html
https://cert-portal.siemens.com/productcert/html/ssa-556635.html
https://cert-portal.siemens.com/productcert/html/ssa-561322.html
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-769027.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-879734.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401
https://errata.almalinux.org/9/ALSA-2025-7937.html
https://errata.rockylinux.org/RLSA-2023:0946
https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt
https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d
https://github.com/advisories/GHSA-x4qr-2fvf-3mr5
https://github.com/pyca/cryptography
https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5
https://linux.oracle.com/cve/CVE-2023-0286.html
https://linux.oracle.com/errata/ELSA-2025-7937.html
https://nvd.nist.gov/vuln/detail/CVE-2023-0286
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003
https://rustsec.org/advisories/RUSTSEC-2023-0006.html
https://security.gentoo.org/glsa/202402-08
https://ubuntu.com/security/notices/USN-5844-1
https://ubuntu.com/security/notices/USN-5845-1
https://ubuntu.com/security/notices/USN-5845-2
https://ubuntu.com/security/notices/USN-6564-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-0286
https://www.openssl.org/news/secadv/20230207.txt
|
| libcrypto1.1 |
CVE-2023-0464 |
HIGH |
1.1.1l-r0 |
1.1.1t-r1 |
https://access.redhat.com/errata/RHSA-2023:3722
https://access.redhat.com/security/cve/CVE-2023-0464
https://bugzilla.redhat.com/2181082
https://bugzilla.redhat.com/2182561
https://bugzilla.redhat.com/2182565
https://bugzilla.redhat.com/2188461
https://bugzilla.redhat.com/2207947
https://cert-portal.siemens.com/productcert/html/ssa-028723.html
https://cert-portal.siemens.com/productcert/html/ssa-077170.html
https://cert-portal.siemens.com/productcert/html/ssa-337522.html
https://cert-portal.siemens.com/productcert/html/ssa-341067.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-556635.html
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-769027.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-879734.html
https://errata.almalinux.org/9/ALSA-2023-3722.html
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1
https://github.com/advisories/GHSA-w2w6-xp88-5cvw
https://linux.oracle.com/cve/CVE-2023-0464.html
https://linux.oracle.com/errata/ELSA-2023-3722.html
https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html
https://nvd.nist.gov/vuln/detail/CVE-2023-0464
https://security.gentoo.org/glsa/202402-08
https://security.netapp.com/advisory/ntap-20230406-0006
https://security.netapp.com/advisory/ntap-20230406-0006/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://ubuntu.com/security/notices/USN-6039-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.couchbase.com/alerts
https://www.couchbase.com/alerts/
https://www.cve.org/CVERecord?id=CVE-2023-0464
https://www.debian.org/security/2023/dsa-5417
https://www.openssl.org/news/secadv/20230322.txt
|
| libcrypto1.1 |
CVE-2022-2097 |
MEDIUM |
1.1.1l-r0 |
1.1.1q-r0 |
https://access.redhat.com/errata/RHSA-2022:6224
https://access.redhat.com/security/cve/CVE-2022-2097
https://bugzilla.redhat.com/2081494
https://bugzilla.redhat.com/2087911
https://bugzilla.redhat.com/2087913
https://bugzilla.redhat.com/2097310
https://bugzilla.redhat.com/2104905
https://bugzilla.redhat.com/show_bug.cgi?id=2081494
https://bugzilla.redhat.com/show_bug.cgi?id=2097310
https://bugzilla.redhat.com/show_bug.cgi?id=2100554
https://bugzilla.redhat.com/show_bug.cgi?id=2104905
https://cert-portal.siemens.com/productcert/html/ssa-332410.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-879734.html
https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097
https://errata.almalinux.org/9/ALSA-2022-6224.html
https://errata.rockylinux.org/RLSA-2022:5818
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93
https://github.com/advisories/GHSA-3wx7-46ch-7rq2
https://github.com/alexcrichton/openssl-src-rs
https://linux.oracle.com/cve/CVE-2022-2097.html
https://linux.oracle.com/errata/ELSA-2022-9955.html
https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/
https://nvd.nist.gov/vuln/detail/CVE-2022-2097
https://rustsec.org/advisories/RUSTSEC-2022-0032.html
https://security.gentoo.org/glsa/202210-02
https://security.netapp.com/advisory/ntap-20220715-0011
https://security.netapp.com/advisory/ntap-20220715-0011/
https://security.netapp.com/advisory/ntap-20230420-0008
https://security.netapp.com/advisory/ntap-20230420-0008/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://ubuntu.com/security/notices/USN-5502-1
https://ubuntu.com/security/notices/USN-6457-1
https://www.cve.org/CVERecord?id=CVE-2022-2097
https://www.debian.org/security/2023/dsa-5343
https://www.openssl.org/news/secadv/20220705.txt
|
| libcrypto1.1 |
CVE-2022-4304 |
MEDIUM |
1.1.1l-r0 |
1.1.1t-r0 |
https://access.redhat.com/errata/RHSA-2023:0946
https://access.redhat.com/errata/RHSA-2023:2165
https://access.redhat.com/security/cve/CVE-2022-4304
https://bugzilla.redhat.com/1960321
https://bugzilla.redhat.com/2164440
https://bugzilla.redhat.com/2164487
https://bugzilla.redhat.com/2164492
https://bugzilla.redhat.com/2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2144000
https://bugzilla.redhat.com/show_bug.cgi?id=2144003
https://bugzilla.redhat.com/show_bug.cgi?id=2144006
https://bugzilla.redhat.com/show_bug.cgi?id=2144008
https://bugzilla.redhat.com/show_bug.cgi?id=2144010
https://bugzilla.redhat.com/show_bug.cgi?id=2144012
https://bugzilla.redhat.com/show_bug.cgi?id=2144015
https://bugzilla.redhat.com/show_bug.cgi?id=2144017
https://bugzilla.redhat.com/show_bug.cgi?id=2144019
https://bugzilla.redhat.com/show_bug.cgi?id=2145170
https://bugzilla.redhat.com/show_bug.cgi?id=2158412
https://bugzilla.redhat.com/show_bug.cgi?id=2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2164487
https://bugzilla.redhat.com/show_bug.cgi?id=2164488
https://bugzilla.redhat.com/show_bug.cgi?id=2164492
https://bugzilla.redhat.com/show_bug.cgi?id=2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2164497
https://bugzilla.redhat.com/show_bug.cgi?id=2164499
https://bugzilla.redhat.com/show_bug.cgi?id=2164500
https://cert-portal.siemens.com/productcert/html/ssa-203374.html
https://cert-portal.siemens.com/productcert/html/ssa-264814.html
https://cert-portal.siemens.com/productcert/html/ssa-337522.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-556635.html
https://cert-portal.siemens.com/productcert/html/ssa-561322.html
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-699386.html
https://cert-portal.siemens.com/productcert/html/ssa-769027.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-879734.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401
https://errata.almalinux.org/9/ALSA-2023-2165.html
https://errata.rockylinux.org/RLSA-2023:0946
https://github.com/advisories/GHSA-p52g-cm5j-mjv4
https://linux.oracle.com/cve/CVE-2022-4304.html
https://linux.oracle.com/errata/ELSA-2023-32791.html
https://nvd.nist.gov/vuln/detail/CVE-2022-4304
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003
https://rustsec.org/advisories/RUSTSEC-2023-0007.html
https://security.gentoo.org/glsa/202402-08
https://ubuntu.com/security/notices/USN-5844-1
https://ubuntu.com/security/notices/USN-6564-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2022-4304
https://www.openssl.org/news/secadv/20230207.txt
|
| libcrypto1.1 |
CVE-2023-0465 |
MEDIUM |
1.1.1l-r0 |
1.1.1t-r2 |
https://access.redhat.com/errata/RHSA-2023:3722
https://access.redhat.com/security/cve/CVE-2023-0465
https://bugzilla.redhat.com/2181082
https://bugzilla.redhat.com/2182561
https://bugzilla.redhat.com/2182565
https://bugzilla.redhat.com/2188461
https://bugzilla.redhat.com/2207947
https://cert-portal.siemens.com/productcert/html/ssa-337522.html
https://cert-portal.siemens.com/productcert/html/ssa-341067.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-556635.html
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-769027.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-879734.html
https://errata.almalinux.org/9/ALSA-2023-3722.html
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c
https://github.com/advisories/GHSA-77f3-6546-6rj7
https://linux.oracle.com/cve/CVE-2023-0465.html
https://linux.oracle.com/errata/ELSA-2023-3722.html
https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html
https://nvd.nist.gov/vuln/detail/CVE-2023-0465
https://security.gentoo.org/glsa/202402-08
https://security.netapp.com/advisory/ntap-20230414-0001
https://security.netapp.com/advisory/ntap-20230414-0001/
https://ubuntu.com/security/notices/USN-6039-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-0465
https://www.debian.org/security/2023/dsa-5417
https://www.openssl.org/news/secadv/20230328.txt
|
| libcurl |
CVE-2022-32207 |
CRITICAL |
7.79.1-r0 |
7.79.1-r2 |
http://seclists.org/fulldisclosure/2022/Oct/28
http://seclists.org/fulldisclosure/2022/Oct/41
https://access.redhat.com/errata/RHSA-2022:6157
https://access.redhat.com/security/cve/CVE-2022-32207
https://bugzilla.redhat.com/2099300
https://bugzilla.redhat.com/2099305
https://bugzilla.redhat.com/2099306
https://bugzilla.redhat.com/show_bug.cgi?id=2099300
https://bugzilla.redhat.com/show_bug.cgi?id=2099305
https://bugzilla.redhat.com/show_bug.cgi?id=2099306
https://cert-portal.siemens.com/productcert/html/ssa-146325.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-419740.html
https://cert-portal.siemens.com/productcert/html/ssa-558014.html
https://cert-portal.siemens.com/productcert/html/ssa-942865.html
https://creativecommons.org/licenses/by/4.0/
https://curl.se/docs/CVE-2022-32207.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
https://errata.almalinux.org/9/ALSA-2022-6157.html
https://errata.rockylinux.org/RLSA-2022:6157
https://hackerone.com/reports/1573634
https://linux.oracle.com/cve/CVE-2022-32207.html
https://linux.oracle.com/errata/ELSA-2022-6157.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
https://nvd.nist.gov/vuln/detail/CVE-2022-32207
https://security.gentoo.org/glsa/202212-01
https://security.netapp.com/advisory/ntap-20220915-0003/
https://support.apple.com/kb/HT213488
https://ubuntu.com/security/notices/USN-5495-1
https://www.cve.org/CVERecord?id=CVE-2022-32207
https://www.debian.org/security/2022/dsa-5197
|
| libcurl |
CVE-2023-23914 |
CRITICAL |
7.79.1-r0 |
7.79.1-r5 |
https://access.redhat.com/security/cve/CVE-2023-23914
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://curl.se/docs/CVE-2023-23914.html
https://hackerone.com/reports/1813864
https://nvd.nist.gov/vuln/detail/CVE-2023-23914
https://security.gentoo.org/glsa/202310-12
https://security.netapp.com/advisory/ntap-20230309-0006/
https://ubuntu.com/security/notices/USN-5891-1
https://www.cve.org/CVERecord?id=CVE-2023-23914
|
| libcurl |
CVE-2022-22576 |
HIGH |
7.79.1-r0 |
7.79.1-r1 |
https://access.redhat.com/errata/RHSA-2022:5313
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-22576.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27774.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27776.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27782.json
https://access.redhat.com/security/cve/CVE-2022-22576
https://bugzilla.redhat.com/2077541
https://bugzilla.redhat.com/2077547
https://bugzilla.redhat.com/2078408
https://bugzilla.redhat.com/2082215
https://cert-portal.siemens.com/productcert/html/ssa-146325.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://curl.se/docs/CVE-2022-22576.html
https://errata.almalinux.org/8/ALSA-2022-5313.html
https://hackerone.com/reports/1526328
https://linux.oracle.com/cve/CVE-2022-22576.html
https://linux.oracle.com/errata/ELSA-2022-5313.html
https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
https://nvd.nist.gov/vuln/detail/CVE-2022-22576
https://security.gentoo.org/glsa/202212-01
https://security.netapp.com/advisory/ntap-20220609-0008/
https://ubuntu.com/security/notices/USN-5397-1
https://www.cve.org/CVERecord?id=CVE-2022-22576
https://www.debian.org/security/2022/dsa-5197
|
| libcurl |
CVE-2022-27775 |
HIGH |
7.79.1-r0 |
7.79.1-r1 |
https://access.redhat.com/errata/RHSA-2022:8299
https://access.redhat.com/security/cve/CVE-2022-27775
https://bugzilla.redhat.com/2078388
https://bugzilla.redhat.com/show_bug.cgi?id=2078388
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://creativecommons.org/licenses/by/4.0/
https://curl.se/docs/CVE-2022-27775.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27775
https://errata.almalinux.org/9/ALSA-2022-8299.html
https://errata.rockylinux.org/RLSA-2022:8299
https://hackerone.com/reports/1546268
https://linux.oracle.com/cve/CVE-2022-27775.html
https://linux.oracle.com/errata/ELSA-2022-8299.html
https://nvd.nist.gov/vuln/detail/CVE-2022-27775
https://security.gentoo.org/glsa/202212-01
https://security.netapp.com/advisory/ntap-20220609-0008/
https://ubuntu.com/security/notices/USN-5397-1
https://www.cve.org/CVERecord?id=CVE-2022-27775
https://www.debian.org/security/2022/dsa-5197
|
| libcurl |
CVE-2022-27781 |
HIGH |
7.79.1-r0 |
7.79.1-r2 |
https://access.redhat.com/security/cve/CVE-2022-27781
https://cert-portal.siemens.com/productcert/html/ssa-146325.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://curl.se/docs/CVE-2022-27781.html
https://github.com/curl/curl/commit/f6c335d63f
https://hackerone.com/reports/1555441
https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
https://nvd.nist.gov/vuln/detail/CVE-2022-27781
https://security.gentoo.org/glsa/202212-01
https://security.netapp.com/advisory/ntap-20220609-0009/
https://ubuntu.com/security/notices/USN-5412-1
https://ubuntu.com/security/notices/USN-5499-1
https://www.cve.org/CVERecord?id=CVE-2022-27781
https://www.debian.org/security/2022/dsa-5197
|
| libcurl |
CVE-2022-27782 |
HIGH |
7.79.1-r0 |
7.79.1-r2 |
http://www.openwall.com/lists/oss-security/2023/03/20/6
https://access.redhat.com/errata/RHSA-2022:5313
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-22576.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27774.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27776.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27782.json
https://access.redhat.com/security/cve/CVE-2022-27782
https://bugzilla.redhat.com/2077541
https://bugzilla.redhat.com/2077547
https://bugzilla.redhat.com/2078408
https://bugzilla.redhat.com/2082215
https://cert-portal.siemens.com/productcert/html/ssa-146325.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://curl.se/docs/CVE-2022-27782.html
https://errata.almalinux.org/8/ALSA-2022-5313.html
https://hackerone.com/reports/1555796
https://linux.oracle.com/cve/CVE-2022-27782.html
https://linux.oracle.com/errata/ELSA-2022-5313.html
https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
https://nvd.nist.gov/vuln/detail/CVE-2022-27782
https://security.gentoo.org/glsa/202212-01
https://security.netapp.com/advisory/ntap-20220609-0009/
https://ubuntu.com/security/notices/USN-5412-1
https://www.cve.org/CVERecord?id=CVE-2022-27782
https://www.debian.org/security/2022/dsa-5197
|
| libcurl |
CVE-2022-43551 |
HIGH |
7.79.1-r0 |
7.79.1-r4 |
https://access.redhat.com/security/cve/CVE-2022-43551
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-892048.html
https://curl.se/docs/CVE-2022-43551.html
https://hackerone.com/reports/1755083
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TVWZW5CNSJ7UYAF2BGSYAWAEXDJYUBHA/
https://nvd.nist.gov/vuln/detail/CVE-2022-43551
https://security.gentoo.org/glsa/202310-12
https://security.netapp.com/advisory/ntap-20230427-0007/
https://ubuntu.com/security/notices/USN-5788-1
https://www.cve.org/CVERecord?id=CVE-2022-43551
|
| libcurl |
CVE-2023-27533 |
HIGH |
7.79.1-r0 |
8.0.1-r0 |
https://access.redhat.com/errata/RHSA-2023:6679
https://access.redhat.com/security/cve/CVE-2023-27533
https://bugzilla.redhat.com/2179062
https://bugzilla.redhat.com/2179069
https://bugzilla.redhat.com/2179092
https://bugzilla.redhat.com/2179103
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://curl.se/docs/CVE-2023-27533.html
https://errata.almalinux.org/9/ALSA-2023-6679.html
https://hackerone.com/reports/1891474
https://linux.oracle.com/cve/CVE-2023-27533.html
https://linux.oracle.com/errata/ELSA-2023-6679.html
https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
https://nvd.nist.gov/vuln/detail/CVE-2023-27533
https://security.gentoo.org/glsa/202310-12
https://security.netapp.com/advisory/ntap-20230420-0011/
https://ubuntu.com/security/notices/USN-5964-1
https://ubuntu.com/security/notices/USN-5964-2
https://www.cve.org/CVERecord?id=CVE-2023-27533
|
| libcurl |
CVE-2023-27534 |
HIGH |
7.79.1-r0 |
8.0.1-r0 |
https://access.redhat.com/errata/RHSA-2023:6679
https://access.redhat.com/security/cve/CVE-2023-27534
https://bugzilla.redhat.com/2179062
https://bugzilla.redhat.com/2179069
https://bugzilla.redhat.com/2179092
https://bugzilla.redhat.com/2179103
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-806742.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://curl.se/docs/CVE-2023-27534.html
https://errata.almalinux.org/9/ALSA-2023-6679.html
https://hackerone.com/reports/1892351
https://linux.oracle.com/cve/CVE-2023-27534.html
https://linux.oracle.com/errata/ELSA-2023-6679.html
https://lists.debian.org/debian-lts-announce/2024/03/msg00016.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
https://nvd.nist.gov/vuln/detail/CVE-2023-27534
https://security.gentoo.org/glsa/202310-12
https://security.netapp.com/advisory/ntap-20230420-0012/
https://ubuntu.com/security/notices/USN-5964-1
https://www.cve.org/CVERecord?id=CVE-2023-27534
|
| libcurl |
CVE-2022-27774 |
MEDIUM |
7.79.1-r0 |
7.79.1-r1 |
https://access.redhat.com/errata/RHSA-2022:5313
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-22576.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27774.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27776.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27782.json
https://access.redhat.com/security/cve/CVE-2022-27774
https://bugzilla.redhat.com/2077541
https://bugzilla.redhat.com/2077547
https://bugzilla.redhat.com/2078408
https://bugzilla.redhat.com/2082215
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://curl.se/docs/CVE-2022-27774.html
https://errata.almalinux.org/8/ALSA-2022-5313.html
https://hackerone.com/reports/1543773
https://linux.oracle.com/cve/CVE-2022-27774.html
https://linux.oracle.com/errata/ELSA-2022-5313.html
https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
https://nvd.nist.gov/vuln/detail/CVE-2022-27774
https://security.gentoo.org/glsa/202212-01
https://security.netapp.com/advisory/ntap-20220609-0008/
https://ubuntu.com/security/notices/USN-5397-1
https://www.cve.org/CVERecord?id=CVE-2022-27774
https://www.debian.org/security/2022/dsa-5197
|
| libcurl |
CVE-2022-27776 |
MEDIUM |
7.79.1-r0 |
7.79.1-r1 |
https://access.redhat.com/errata/RHSA-2022:5313
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-22576.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27774.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27776.json
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27782.json
https://access.redhat.com/security/cve/CVE-2022-27776
https://bugzilla.redhat.com/2077541
https://bugzilla.redhat.com/2077547
https://bugzilla.redhat.com/2078408
https://bugzilla.redhat.com/2082215
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://curl.se/docs/CVE-2022-27776.html
https://errata.almalinux.org/8/ALSA-2022-5313.html
https://hackerone.com/reports/1547048
https://linux.oracle.com/cve/CVE-2022-27776.html
https://linux.oracle.com/errata/ELSA-2022-5313.html
https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B/
https://nvd.nist.gov/vuln/detail/CVE-2022-27776
https://security.gentoo.org/glsa/202212-01
https://security.netapp.com/advisory/ntap-20220609-0008/
https://ubuntu.com/security/notices/USN-5397-1
https://www.cve.org/CVERecord?id=CVE-2022-27776
https://www.debian.org/security/2022/dsa-5197
|
| libcurl |
CVE-2022-32205 |
MEDIUM |
7.79.1-r0 |
7.79.1-r2 |
http://seclists.org/fulldisclosure/2022/Oct/28
http://seclists.org/fulldisclosure/2022/Oct/41
https://access.redhat.com/security/cve/CVE-2022-32205
https://cert-portal.siemens.com/productcert/html/ssa-333517.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-419740.html
https://cert-portal.siemens.com/productcert/html/ssa-558014.html
https://cert-portal.siemens.com/productcert/html/ssa-942865.html
https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf
https://curl.se/docs/CVE-2022-32205.html
https://hackerone.com/reports/1569946
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
https://nvd.nist.gov/vuln/detail/CVE-2022-32205
https://security.gentoo.org/glsa/202212-01
https://security.netapp.com/advisory/ntap-20220915-0003/
https://support.apple.com/kb/HT213488
https://ubuntu.com/security/notices/USN-5495-1
https://www.cve.org/CVERecord?id=CVE-2022-32205
https://www.debian.org/security/2022/dsa-5197
|
| libcurl |
CVE-2022-32206 |
MEDIUM |
7.79.1-r0 |
7.79.1-r2 |
http://seclists.org/fulldisclosure/2022/Oct/28
http://seclists.org/fulldisclosure/2022/Oct/41
http://www.openwall.com/lists/oss-security/2023/02/15/3
https://access.redhat.com/errata/RHSA-2022:6157
https://access.redhat.com/security/cve/CVE-2022-32206
https://bugzilla.redhat.com/2099300
https://bugzilla.redhat.com/2099305
https://bugzilla.redhat.com/2099306
https://bugzilla.redhat.com/show_bug.cgi?id=2099300
https://bugzilla.redhat.com/show_bug.cgi?id=2099305
https://bugzilla.redhat.com/show_bug.cgi?id=2099306
https://cert-portal.siemens.com/productcert/html/ssa-333517.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-419740.html
https://cert-portal.siemens.com/productcert/html/ssa-558014.html
https://cert-portal.siemens.com/productcert/html/ssa-942865.html
https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf
https://creativecommons.org/licenses/by/4.0/
https://curl.se/docs/CVE-2022-32206.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
https://errata.almalinux.org/9/ALSA-2022-6157.html
https://errata.rockylinux.org/RLSA-2022:6157
https://hackerone.com/reports/1570651
https://linux.oracle.com/cve/CVE-2022-32206.html
https://linux.oracle.com/errata/ELSA-2022-6159.html
https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
https://nvd.nist.gov/vuln/detail/CVE-2022-32206
https://security.gentoo.org/glsa/202212-01
https://security.netapp.com/advisory/ntap-20220915-0003/
https://support.apple.com/kb/HT213488
https://ubuntu.com/security/notices/USN-5495-1
https://www.cve.org/CVERecord?id=CVE-2022-32206
https://www.debian.org/security/2022/dsa-5197
|
| libcurl |
CVE-2022-32208 |
MEDIUM |
7.79.1-r0 |
7.79.1-r2 |
http://seclists.org/fulldisclosure/2022/Oct/28
http://seclists.org/fulldisclosure/2022/Oct/41
https://access.redhat.com/errata/RHSA-2022:6157
https://access.redhat.com/security/cve/CVE-2022-32208
https://bugzilla.redhat.com/2099300
https://bugzilla.redhat.com/2099305
https://bugzilla.redhat.com/2099306
https://bugzilla.redhat.com/show_bug.cgi?id=2099300
https://bugzilla.redhat.com/show_bug.cgi?id=2099305
https://bugzilla.redhat.com/show_bug.cgi?id=2099306
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-419740.html
https://cert-portal.siemens.com/productcert/html/ssa-558014.html
https://cert-portal.siemens.com/productcert/html/ssa-942865.html
https://creativecommons.org/licenses/by/4.0/
https://curl.se/docs/CVE-2022-32208.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208
https://errata.almalinux.org/9/ALSA-2022-6157.html
https://errata.rockylinux.org/RLSA-2022:6157
https://hackerone.com/reports/1590071
https://linux.oracle.com/cve/CVE-2022-32208.html
https://linux.oracle.com/errata/ELSA-2022-6159.html
https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
https://nvd.nist.gov/vuln/detail/CVE-2022-32208
https://security.gentoo.org/glsa/202212-01
https://security.netapp.com/advisory/ntap-20220915-0003/
https://support.apple.com/kb/HT213488
https://ubuntu.com/security/notices/USN-5495-1
https://ubuntu.com/security/notices/USN-5499-1
https://www.cve.org/CVERecord?id=CVE-2022-32208
https://www.debian.org/security/2022/dsa-5197
|
| libcurl |
CVE-2022-43552 |
MEDIUM |
7.79.1-r0 |
7.79.1-r4 |
http://seclists.org/fulldisclosure/2023/Mar/17
https://access.redhat.com/errata/RHSA-2023:2478
https://access.redhat.com/security/cve/CVE-2022-43552
https://bugzilla.redhat.com/2120718
https://bugzilla.redhat.com/2152652
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-892048.html
https://curl.se/docs/CVE-2022-43552.html
https://errata.almalinux.org/9/ALSA-2023-2478.html
https://hackerone.com/reports/1764858
https://linux.oracle.com/cve/CVE-2022-43552.html
https://linux.oracle.com/errata/ELSA-2023-7743.html
https://nvd.nist.gov/vuln/detail/CVE-2022-43552
https://security.gentoo.org/glsa/202310-12
https://security.netapp.com/advisory/ntap-20230214-0002/
https://support.apple.com/kb/HT213670
https://ubuntu.com/security/notices/USN-5788-1
https://ubuntu.com/security/notices/USN-5894-1
https://www.cve.org/CVERecord?id=CVE-2022-43552
|
| libcurl |
CVE-2023-23915 |
MEDIUM |
7.79.1-r0 |
7.79.1-r5 |
https://access.redhat.com/security/cve/CVE-2023-23915
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://curl.se/docs/CVE-2023-23915.html
https://hackerone.com/reports/1826048
https://nvd.nist.gov/vuln/detail/CVE-2023-23915
https://security.gentoo.org/glsa/202310-12
https://security.netapp.com/advisory/ntap-20230309-0006/
https://ubuntu.com/security/notices/USN-5891-1
https://www.cve.org/CVERecord?id=CVE-2023-23915
|
| libcurl |
CVE-2023-23916 |
MEDIUM |
7.79.1-r0 |
7.79.1-r5 |
https://access.redhat.com/errata/RHSA-2023:1701
https://access.redhat.com/security/cve/CVE-2023-23916
https://bugzilla.redhat.com/2167815
https://bugzilla.redhat.com/show_bug.cgi?id=2167815
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://curl.se/docs/CVE-2023-23916.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23916
https://errata.almalinux.org/9/ALSA-2023-1701.html
https://errata.rockylinux.org/RLSA-2023:1140
https://hackerone.com/reports/1826048
https://linux.oracle.com/cve/CVE-2023-23916.html
https://linux.oracle.com/errata/ELSA-2023-1701.html
https://lists.debian.org/debian-lts-announce/2023/02/msg00035.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BQKE6TXYDHOTFHLTBZ5X73GTKI7II5KO/
https://nvd.nist.gov/vuln/detail/CVE-2023-23916
https://security.gentoo.org/glsa/202310-12
https://security.netapp.com/advisory/ntap-20230309-0006/
https://ubuntu.com/security/notices/USN-5891-1
https://www.cve.org/CVERecord?id=CVE-2023-23916
https://www.debian.org/security/2023/dsa-5365
|
| libcurl |
CVE-2023-27535 |
MEDIUM |
7.79.1-r0 |
8.0.1-r0 |
https://access.redhat.com/errata/RHSA-2023:2650
https://access.redhat.com/security/cve/CVE-2023-27535
https://bugzilla.redhat.com/2179073
https://bugzilla.redhat.com/show_bug.cgi?id=2179073
https://bugzilla.redhat.com/show_bug.cgi?id=2188029
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-806742.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://curl.se/docs/CVE-2023-27535.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27535
https://errata.almalinux.org/9/ALSA-2023-2650.html
https://errata.rockylinux.org/RLSA-2023:3106
https://hackerone.com/reports/1892780
https://linux.oracle.com/cve/CVE-2023-27535.html
https://linux.oracle.com/errata/ELSA-2023-3106.html
https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
https://nvd.nist.gov/vuln/detail/CVE-2023-27535
https://security.gentoo.org/glsa/202310-12
https://security.netapp.com/advisory/ntap-20230420-0010/
https://ubuntu.com/security/notices/USN-5964-1
https://ubuntu.com/security/notices/USN-5964-2
https://www.cve.org/CVERecord?id=CVE-2023-27535
|
| libcurl |
CVE-2023-27536 |
MEDIUM |
7.79.1-r0 |
8.0.1-r0 |
https://access.redhat.com/errata/RHSA-2023:6679
https://access.redhat.com/security/cve/CVE-2023-27536
https://bugzilla.redhat.com/2179062
https://bugzilla.redhat.com/2179069
https://bugzilla.redhat.com/2179092
https://bugzilla.redhat.com/2179103
https://bugzilla.redhat.com/show_bug.cgi?id=2179092
https://bugzilla.redhat.com/show_bug.cgi?id=2196786
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-806742.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://curl.se/docs/CVE-2023-27536.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27536
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28321
https://errata.almalinux.org/9/ALSA-2023-6679.html
https://errata.rockylinux.org/RLSA-2023:4523
https://hackerone.com/reports/1895135
https://linux.oracle.com/cve/CVE-2023-27536.html
https://linux.oracle.com/errata/ELSA-2023-6679.html
https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
https://nvd.nist.gov/vuln/detail/CVE-2023-27536
https://security.gentoo.org/glsa/202310-12
https://security.netapp.com/advisory/ntap-20230420-0010/
https://ubuntu.com/security/notices/USN-5964-1
https://ubuntu.com/security/notices/USN-5964-2
https://www.cve.org/CVERecord?id=CVE-2023-27536
|
| libcurl |
CVE-2023-27537 |
MEDIUM |
7.79.1-r0 |
8.0.1-r0 |
https://access.redhat.com/security/cve/CVE-2023-27537
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://curl.se/docs/CVE-2023-27537.html
https://hackerone.com/reports/1897203
https://nvd.nist.gov/vuln/detail/CVE-2023-27537
https://security.gentoo.org/glsa/202310-12
https://security.netapp.com/advisory/ntap-20230420-0010/
https://www.cve.org/CVERecord?id=CVE-2023-27537
|
| libcurl |
CVE-2023-27538 |
MEDIUM |
7.79.1-r0 |
8.0.1-r0 |
https://access.redhat.com/errata/RHSA-2023:6679
https://access.redhat.com/security/cve/CVE-2023-27538
https://bugzilla.redhat.com/2179062
https://bugzilla.redhat.com/2179069
https://bugzilla.redhat.com/2179092
https://bugzilla.redhat.com/2179103
https://cert-portal.siemens.com/productcert/html/ssa-077170.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://curl.se/docs/CVE-2023-27538.html
https://errata.almalinux.org/9/ALSA-2023-6679.html
https://hackerone.com/reports/1898475
https://linux.oracle.com/cve/CVE-2023-27538.html
https://linux.oracle.com/errata/ELSA-2023-6679.html
https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/
https://nvd.nist.gov/vuln/detail/CVE-2023-27538
https://security.gentoo.org/glsa/202310-12
https://security.netapp.com/advisory/ntap-20230420-0010/
https://ubuntu.com/security/notices/USN-5964-1
https://www.cve.org/CVERecord?id=CVE-2023-27538
|
| libcurl |
CVE-2022-35252 |
LOW |
7.79.1-r0 |
7.79.1-r3 |
http://seclists.org/fulldisclosure/2023/Jan/20
http://seclists.org/fulldisclosure/2023/Jan/21
https://access.redhat.com/errata/RHSA-2023:2478
https://access.redhat.com/security/cve/CVE-2022-35252
https://bugzilla.redhat.com/2120718
https://bugzilla.redhat.com/2152652
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-419740.html
https://cert-portal.siemens.com/productcert/html/ssa-558014.html
https://cert-portal.siemens.com/productcert/html/ssa-892048.html
https://cert-portal.siemens.com/productcert/html/ssa-942865.html
https://curl.se/docs/CVE-2022-35252.html
https://errata.almalinux.org/9/ALSA-2023-2478.html
https://hackerone.com/reports/1613943
https://linux.oracle.com/cve/CVE-2022-35252.html
https://linux.oracle.com/errata/ELSA-2023-2963.html
https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html
https://nvd.nist.gov/vuln/detail/CVE-2022-35252
https://security.gentoo.org/glsa/202212-01
https://security.netapp.com/advisory/ntap-20220930-0005/
https://support.apple.com/kb/HT213603
https://support.apple.com/kb/HT213604
https://ubuntu.com/security/notices/USN-5587-1
https://www.cve.org/CVERecord?id=CVE-2022-35252
https://www.openwall.com/lists/oss-security/2022/08/31/2
|
| libretls |
CVE-2022-0778 |
HIGH |
3.3.3p1-r2 |
3.3.3p1-r3 |
http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html
http://seclists.org/fulldisclosure/2022/May/33
http://seclists.org/fulldisclosure/2022/May/35
http://seclists.org/fulldisclosure/2022/May/38
https://access.redhat.com/errata/RHSA-2022:4899
https://access.redhat.com/errata/RHSA-2022:5326
https://access.redhat.com/security/cve/CVE-2022-0778
https://bugzilla.redhat.com/2062202
https://bugzilla.redhat.com/show_bug.cgi?id=2062202
https://cert-portal.siemens.com/productcert/html/ssa-019200.html
https://cert-portal.siemens.com/productcert/html/ssa-028723.html
https://cert-portal.siemens.com/productcert/html/ssa-108696.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-712929.html
https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778
https://errata.almalinux.org/8/ALSA-2022-5326.html
https://errata.rockylinux.org/RLSA-2022:4899
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246
https://github.com/advisories/GHSA-x3mh-jvjw-3xwx
https://linux.oracle.com/cve/CVE-2022-0778.html
https://linux.oracle.com/errata/ELSA-2022-9272.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/
https://nvd.nist.gov/vuln/detail/CVE-2022-0778
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002
https://rustsec.org/advisories/RUSTSEC-2022-0014.html
https://security.gentoo.org/glsa/202210-02
https://security.netapp.com/advisory/ntap-20220321-0002
https://security.netapp.com/advisory/ntap-20220321-0002/
https://security.netapp.com/advisory/ntap-20220429-0005
https://security.netapp.com/advisory/ntap-20220429-0005/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://support.apple.com/kb/HT213255
https://support.apple.com/kb/HT213256
https://support.apple.com/kb/HT213257
https://ubuntu.com/security/notices/USN-5328-1
https://ubuntu.com/security/notices/USN-5328-2
https://ubuntu.com/security/notices/USN-6457-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2022-0778
https://www.debian.org/security/2022/dsa-5103
https://www.openssl.org/news/secadv/20220315.txt
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.tenable.com/security/tns-2022-06
https://www.tenable.com/security/tns-2022-07
https://www.tenable.com/security/tns-2022-08
https://www.tenable.com/security/tns-2022-09
|
| libssl1.1 |
CVE-2022-0778 |
HIGH |
1.1.1l-r0 |
1.1.1n-r0 |
http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html
http://seclists.org/fulldisclosure/2022/May/33
http://seclists.org/fulldisclosure/2022/May/35
http://seclists.org/fulldisclosure/2022/May/38
https://access.redhat.com/errata/RHSA-2022:4899
https://access.redhat.com/errata/RHSA-2022:5326
https://access.redhat.com/security/cve/CVE-2022-0778
https://bugzilla.redhat.com/2062202
https://bugzilla.redhat.com/show_bug.cgi?id=2062202
https://cert-portal.siemens.com/productcert/html/ssa-019200.html
https://cert-portal.siemens.com/productcert/html/ssa-028723.html
https://cert-portal.siemens.com/productcert/html/ssa-108696.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-712929.html
https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778
https://errata.almalinux.org/8/ALSA-2022-5326.html
https://errata.rockylinux.org/RLSA-2022:4899
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246
https://github.com/advisories/GHSA-x3mh-jvjw-3xwx
https://linux.oracle.com/cve/CVE-2022-0778.html
https://linux.oracle.com/errata/ELSA-2022-9272.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/
https://nvd.nist.gov/vuln/detail/CVE-2022-0778
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002
https://rustsec.org/advisories/RUSTSEC-2022-0014.html
https://security.gentoo.org/glsa/202210-02
https://security.netapp.com/advisory/ntap-20220321-0002
https://security.netapp.com/advisory/ntap-20220321-0002/
https://security.netapp.com/advisory/ntap-20220429-0005
https://security.netapp.com/advisory/ntap-20220429-0005/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://support.apple.com/kb/HT213255
https://support.apple.com/kb/HT213256
https://support.apple.com/kb/HT213257
https://ubuntu.com/security/notices/USN-5328-1
https://ubuntu.com/security/notices/USN-5328-2
https://ubuntu.com/security/notices/USN-6457-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2022-0778
https://www.debian.org/security/2022/dsa-5103
https://www.openssl.org/news/secadv/20220315.txt
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.tenable.com/security/tns-2022-06
https://www.tenable.com/security/tns-2022-07
https://www.tenable.com/security/tns-2022-08
https://www.tenable.com/security/tns-2022-09
|
| libssl1.1 |
CVE-2022-4450 |
HIGH |
1.1.1l-r0 |
1.1.1t-r0 |
https://access.redhat.com/errata/RHSA-2023:0946
https://access.redhat.com/errata/RHSA-2023:2165
https://access.redhat.com/security/cve/CVE-2022-4450
https://bugzilla.redhat.com/1960321
https://bugzilla.redhat.com/2164440
https://bugzilla.redhat.com/2164487
https://bugzilla.redhat.com/2164492
https://bugzilla.redhat.com/2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2144000
https://bugzilla.redhat.com/show_bug.cgi?id=2144003
https://bugzilla.redhat.com/show_bug.cgi?id=2144006
https://bugzilla.redhat.com/show_bug.cgi?id=2144008
https://bugzilla.redhat.com/show_bug.cgi?id=2144010
https://bugzilla.redhat.com/show_bug.cgi?id=2144012
https://bugzilla.redhat.com/show_bug.cgi?id=2144015
https://bugzilla.redhat.com/show_bug.cgi?id=2144017
https://bugzilla.redhat.com/show_bug.cgi?id=2144019
https://bugzilla.redhat.com/show_bug.cgi?id=2145170
https://bugzilla.redhat.com/show_bug.cgi?id=2158412
https://bugzilla.redhat.com/show_bug.cgi?id=2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2164487
https://bugzilla.redhat.com/show_bug.cgi?id=2164488
https://bugzilla.redhat.com/show_bug.cgi?id=2164492
https://bugzilla.redhat.com/show_bug.cgi?id=2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2164497
https://bugzilla.redhat.com/show_bug.cgi?id=2164499
https://bugzilla.redhat.com/show_bug.cgi?id=2164500
https://cert-portal.siemens.com/productcert/html/ssa-203374.html
https://cert-portal.siemens.com/productcert/html/ssa-337522.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-556635.html
https://cert-portal.siemens.com/productcert/html/ssa-561322.html
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-699386.html
https://cert-portal.siemens.com/productcert/html/ssa-769027.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-879734.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401
https://errata.almalinux.org/9/ALSA-2023-2165.html
https://errata.rockylinux.org/RLSA-2023:0946
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b
https://github.com/advisories/GHSA-v5w6-wcm8-jm4q
https://linux.oracle.com/cve/CVE-2022-4450.html
https://linux.oracle.com/errata/ELSA-2023-32791.html
https://nvd.nist.gov/vuln/detail/CVE-2022-4450
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003
https://rustsec.org/advisories/RUSTSEC-2023-0010.html
https://security.gentoo.org/glsa/202402-08
https://ubuntu.com/security/notices/USN-5844-1
https://ubuntu.com/security/notices/USN-6564-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2022-4450
https://www.openssl.org/news/secadv/20230207.txt
|
| libssl1.1 |
CVE-2023-0215 |
HIGH |
1.1.1l-r0 |
1.1.1t-r0 |
https://access.redhat.com/errata/RHSA-2023:0946
https://access.redhat.com/errata/RHSA-2023:2165
https://access.redhat.com/security/cve/CVE-2023-0215
https://bugzilla.redhat.com/1960321
https://bugzilla.redhat.com/2164440
https://bugzilla.redhat.com/2164487
https://bugzilla.redhat.com/2164492
https://bugzilla.redhat.com/2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2144000
https://bugzilla.redhat.com/show_bug.cgi?id=2144003
https://bugzilla.redhat.com/show_bug.cgi?id=2144006
https://bugzilla.redhat.com/show_bug.cgi?id=2144008
https://bugzilla.redhat.com/show_bug.cgi?id=2144010
https://bugzilla.redhat.com/show_bug.cgi?id=2144012
https://bugzilla.redhat.com/show_bug.cgi?id=2144015
https://bugzilla.redhat.com/show_bug.cgi?id=2144017
https://bugzilla.redhat.com/show_bug.cgi?id=2144019
https://bugzilla.redhat.com/show_bug.cgi?id=2145170
https://bugzilla.redhat.com/show_bug.cgi?id=2158412
https://bugzilla.redhat.com/show_bug.cgi?id=2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2164487
https://bugzilla.redhat.com/show_bug.cgi?id=2164488
https://bugzilla.redhat.com/show_bug.cgi?id=2164492
https://bugzilla.redhat.com/show_bug.cgi?id=2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2164497
https://bugzilla.redhat.com/show_bug.cgi?id=2164499
https://bugzilla.redhat.com/show_bug.cgi?id=2164500
https://cert-portal.siemens.com/productcert/html/ssa-203374.html
https://cert-portal.siemens.com/productcert/html/ssa-337522.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-556635.html
https://cert-portal.siemens.com/productcert/html/ssa-561322.html
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-769027.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-879734.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401
https://errata.almalinux.org/9/ALSA-2023-2165.html
https://errata.rockylinux.org/RLSA-2023:0946
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344
https://github.com/advisories/GHSA-r7jw-wp68-3xch
https://linux.oracle.com/cve/CVE-2023-0215.html
https://linux.oracle.com/errata/ELSA-2023-32791.html
https://nvd.nist.gov/vuln/detail/CVE-2023-0215
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003
https://rustsec.org/advisories/RUSTSEC-2023-0009.html
https://security.gentoo.org/glsa/202402-08
https://security.netapp.com/advisory/ntap-20230427-0007
https://security.netapp.com/advisory/ntap-20230427-0007/
https://security.netapp.com/advisory/ntap-20230427-0009
https://security.netapp.com/advisory/ntap-20230427-0009/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://ubuntu.com/security/notices/USN-5844-1
https://ubuntu.com/security/notices/USN-5845-1
https://ubuntu.com/security/notices/USN-5845-2
https://ubuntu.com/security/notices/USN-6564-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-0215
https://www.openssl.org/news/secadv/20230207.txt
|
| libssl1.1 |
CVE-2023-0286 |
HIGH |
1.1.1l-r0 |
1.1.1t-r0 |
https://access.redhat.com/errata/RHSA-2023:0946
https://access.redhat.com/errata/RHSA-2025:7937
https://access.redhat.com/security/cve/CVE-2023-0286
https://access.redhat.com/security/cve/cve-2023-0286
https://bugzilla.redhat.com/2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2144000
https://bugzilla.redhat.com/show_bug.cgi?id=2144003
https://bugzilla.redhat.com/show_bug.cgi?id=2144006
https://bugzilla.redhat.com/show_bug.cgi?id=2144008
https://bugzilla.redhat.com/show_bug.cgi?id=2144010
https://bugzilla.redhat.com/show_bug.cgi?id=2144012
https://bugzilla.redhat.com/show_bug.cgi?id=2144015
https://bugzilla.redhat.com/show_bug.cgi?id=2144017
https://bugzilla.redhat.com/show_bug.cgi?id=2144019
https://bugzilla.redhat.com/show_bug.cgi?id=2145170
https://bugzilla.redhat.com/show_bug.cgi?id=2158412
https://bugzilla.redhat.com/show_bug.cgi?id=2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2164487
https://bugzilla.redhat.com/show_bug.cgi?id=2164488
https://bugzilla.redhat.com/show_bug.cgi?id=2164492
https://bugzilla.redhat.com/show_bug.cgi?id=2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2164497
https://bugzilla.redhat.com/show_bug.cgi?id=2164499
https://bugzilla.redhat.com/show_bug.cgi?id=2164500
https://cert-portal.siemens.com/productcert/html/ssa-028723.html
https://cert-portal.siemens.com/productcert/html/ssa-203374.html
https://cert-portal.siemens.com/productcert/html/ssa-264815.html
https://cert-portal.siemens.com/productcert/html/ssa-337522.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-455250.html
https://cert-portal.siemens.com/productcert/html/ssa-556635.html
https://cert-portal.siemens.com/productcert/html/ssa-561322.html
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-769027.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-879734.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401
https://errata.almalinux.org/9/ALSA-2025-7937.html
https://errata.rockylinux.org/RLSA-2023:0946
https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt
https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d
https://github.com/advisories/GHSA-x4qr-2fvf-3mr5
https://github.com/pyca/cryptography
https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5
https://linux.oracle.com/cve/CVE-2023-0286.html
https://linux.oracle.com/errata/ELSA-2025-7937.html
https://nvd.nist.gov/vuln/detail/CVE-2023-0286
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003
https://rustsec.org/advisories/RUSTSEC-2023-0006.html
https://security.gentoo.org/glsa/202402-08
https://ubuntu.com/security/notices/USN-5844-1
https://ubuntu.com/security/notices/USN-5845-1
https://ubuntu.com/security/notices/USN-5845-2
https://ubuntu.com/security/notices/USN-6564-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-0286
https://www.openssl.org/news/secadv/20230207.txt
|
| libssl1.1 |
CVE-2023-0464 |
HIGH |
1.1.1l-r0 |
1.1.1t-r1 |
https://access.redhat.com/errata/RHSA-2023:3722
https://access.redhat.com/security/cve/CVE-2023-0464
https://bugzilla.redhat.com/2181082
https://bugzilla.redhat.com/2182561
https://bugzilla.redhat.com/2182565
https://bugzilla.redhat.com/2188461
https://bugzilla.redhat.com/2207947
https://cert-portal.siemens.com/productcert/html/ssa-028723.html
https://cert-portal.siemens.com/productcert/html/ssa-077170.html
https://cert-portal.siemens.com/productcert/html/ssa-337522.html
https://cert-portal.siemens.com/productcert/html/ssa-341067.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-556635.html
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-769027.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-879734.html
https://errata.almalinux.org/9/ALSA-2023-3722.html
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1
https://github.com/advisories/GHSA-w2w6-xp88-5cvw
https://linux.oracle.com/cve/CVE-2023-0464.html
https://linux.oracle.com/errata/ELSA-2023-3722.html
https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html
https://nvd.nist.gov/vuln/detail/CVE-2023-0464
https://security.gentoo.org/glsa/202402-08
https://security.netapp.com/advisory/ntap-20230406-0006
https://security.netapp.com/advisory/ntap-20230406-0006/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://ubuntu.com/security/notices/USN-6039-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.couchbase.com/alerts
https://www.couchbase.com/alerts/
https://www.cve.org/CVERecord?id=CVE-2023-0464
https://www.debian.org/security/2023/dsa-5417
https://www.openssl.org/news/secadv/20230322.txt
|
| libssl1.1 |
CVE-2022-2097 |
MEDIUM |
1.1.1l-r0 |
1.1.1q-r0 |
https://access.redhat.com/errata/RHSA-2022:6224
https://access.redhat.com/security/cve/CVE-2022-2097
https://bugzilla.redhat.com/2081494
https://bugzilla.redhat.com/2087911
https://bugzilla.redhat.com/2087913
https://bugzilla.redhat.com/2097310
https://bugzilla.redhat.com/2104905
https://bugzilla.redhat.com/show_bug.cgi?id=2081494
https://bugzilla.redhat.com/show_bug.cgi?id=2097310
https://bugzilla.redhat.com/show_bug.cgi?id=2100554
https://bugzilla.redhat.com/show_bug.cgi?id=2104905
https://cert-portal.siemens.com/productcert/html/ssa-332410.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-879734.html
https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097
https://errata.almalinux.org/9/ALSA-2022-6224.html
https://errata.rockylinux.org/RLSA-2022:5818
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93
https://github.com/advisories/GHSA-3wx7-46ch-7rq2
https://github.com/alexcrichton/openssl-src-rs
https://linux.oracle.com/cve/CVE-2022-2097.html
https://linux.oracle.com/errata/ELSA-2022-9955.html
https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/
https://nvd.nist.gov/vuln/detail/CVE-2022-2097
https://rustsec.org/advisories/RUSTSEC-2022-0032.html
https://security.gentoo.org/glsa/202210-02
https://security.netapp.com/advisory/ntap-20220715-0011
https://security.netapp.com/advisory/ntap-20220715-0011/
https://security.netapp.com/advisory/ntap-20230420-0008
https://security.netapp.com/advisory/ntap-20230420-0008/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://ubuntu.com/security/notices/USN-5502-1
https://ubuntu.com/security/notices/USN-6457-1
https://www.cve.org/CVERecord?id=CVE-2022-2097
https://www.debian.org/security/2023/dsa-5343
https://www.openssl.org/news/secadv/20220705.txt
|
| libssl1.1 |
CVE-2022-4304 |
MEDIUM |
1.1.1l-r0 |
1.1.1t-r0 |
https://access.redhat.com/errata/RHSA-2023:0946
https://access.redhat.com/errata/RHSA-2023:2165
https://access.redhat.com/security/cve/CVE-2022-4304
https://bugzilla.redhat.com/1960321
https://bugzilla.redhat.com/2164440
https://bugzilla.redhat.com/2164487
https://bugzilla.redhat.com/2164492
https://bugzilla.redhat.com/2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2144000
https://bugzilla.redhat.com/show_bug.cgi?id=2144003
https://bugzilla.redhat.com/show_bug.cgi?id=2144006
https://bugzilla.redhat.com/show_bug.cgi?id=2144008
https://bugzilla.redhat.com/show_bug.cgi?id=2144010
https://bugzilla.redhat.com/show_bug.cgi?id=2144012
https://bugzilla.redhat.com/show_bug.cgi?id=2144015
https://bugzilla.redhat.com/show_bug.cgi?id=2144017
https://bugzilla.redhat.com/show_bug.cgi?id=2144019
https://bugzilla.redhat.com/show_bug.cgi?id=2145170
https://bugzilla.redhat.com/show_bug.cgi?id=2158412
https://bugzilla.redhat.com/show_bug.cgi?id=2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2164487
https://bugzilla.redhat.com/show_bug.cgi?id=2164488
https://bugzilla.redhat.com/show_bug.cgi?id=2164492
https://bugzilla.redhat.com/show_bug.cgi?id=2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2164497
https://bugzilla.redhat.com/show_bug.cgi?id=2164499
https://bugzilla.redhat.com/show_bug.cgi?id=2164500
https://cert-portal.siemens.com/productcert/html/ssa-203374.html
https://cert-portal.siemens.com/productcert/html/ssa-264814.html
https://cert-portal.siemens.com/productcert/html/ssa-337522.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-556635.html
https://cert-portal.siemens.com/productcert/html/ssa-561322.html
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-699386.html
https://cert-portal.siemens.com/productcert/html/ssa-769027.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-879734.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401
https://errata.almalinux.org/9/ALSA-2023-2165.html
https://errata.rockylinux.org/RLSA-2023:0946
https://github.com/advisories/GHSA-p52g-cm5j-mjv4
https://linux.oracle.com/cve/CVE-2022-4304.html
https://linux.oracle.com/errata/ELSA-2023-32791.html
https://nvd.nist.gov/vuln/detail/CVE-2022-4304
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003
https://rustsec.org/advisories/RUSTSEC-2023-0007.html
https://security.gentoo.org/glsa/202402-08
https://ubuntu.com/security/notices/USN-5844-1
https://ubuntu.com/security/notices/USN-6564-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2022-4304
https://www.openssl.org/news/secadv/20230207.txt
|
| libssl1.1 |
CVE-2023-0465 |
MEDIUM |
1.1.1l-r0 |
1.1.1t-r2 |
https://access.redhat.com/errata/RHSA-2023:3722
https://access.redhat.com/security/cve/CVE-2023-0465
https://bugzilla.redhat.com/2181082
https://bugzilla.redhat.com/2182561
https://bugzilla.redhat.com/2182565
https://bugzilla.redhat.com/2188461
https://bugzilla.redhat.com/2207947
https://cert-portal.siemens.com/productcert/html/ssa-337522.html
https://cert-portal.siemens.com/productcert/html/ssa-341067.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-556635.html
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-769027.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-879734.html
https://errata.almalinux.org/9/ALSA-2023-3722.html
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c
https://github.com/advisories/GHSA-77f3-6546-6rj7
https://linux.oracle.com/cve/CVE-2023-0465.html
https://linux.oracle.com/errata/ELSA-2023-3722.html
https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html
https://nvd.nist.gov/vuln/detail/CVE-2023-0465
https://security.gentoo.org/glsa/202402-08
https://security.netapp.com/advisory/ntap-20230414-0001
https://security.netapp.com/advisory/ntap-20230414-0001/
https://ubuntu.com/security/notices/USN-6039-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-0465
https://www.debian.org/security/2023/dsa-5417
https://www.openssl.org/news/secadv/20230328.txt
|
| libxml2 |
CVE-2022-2309 |
HIGH |
2.9.12-r1 |
2.9.14-r1 |
https://access.redhat.com/errata/RHSA-2022:8226
https://access.redhat.com/security/cve/CVE-2022-2309
https://bugzilla.redhat.com/2107571
https://bugzilla.redhat.com/show_bug.cgi?id=2107571
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2309
https://errata.almalinux.org/9/ALSA-2022-8226.html
https://errata.rockylinux.org/RLSA-2022:8226
https://github.com/advisories/GHSA-wrxv-2j5q-m38w
https://github.com/lxml/lxml
https://github.com/lxml/lxml/blob/master/CHANGES.txt
https://github.com/lxml/lxml/commit/86368e9cf70a0ad23cccd5ee32de847149af0c6f
https://github.com/lxml/lxml/commit/86368e9cf70a0ad23cccd5ee32de847149af0c6f%20%28lxml-4.9.1%29
https://github.com/pypa/advisory-database/tree/main/vulns/lxml/PYSEC-2022-230.yaml
https://gitlab.gnome.org/GNOME/libxml2/-/issues/378
https://huntr.dev/bounties/8264e74f-edda-4c40-9956-49de635105ba
https://huntr.dev/bounties/8264e74f-edda-4c40-9956-49de635105ba/
https://linux.oracle.com/cve/CVE-2022-2309.html
https://linux.oracle.com/errata/ELSA-2022-8226.html
https://lists.debian.org/debian-lts-announce/2024/09/msg00021.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HGYC6L7ENH5VEGN3YWFBYMGKX6WNS7HZ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HGYC6L7ENH5VEGN3YWFBYMGKX6WNS7HZ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/URHHSIBTPTALXMECRLAC2EVDNAFSR5NO
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/URHHSIBTPTALXMECRLAC2EVDNAFSR5NO/
https://nvd.nist.gov/vuln/detail/CVE-2022-2309
https://security.gentoo.org/glsa/202208-06
https://security.netapp.com/advisory/ntap-20220915-0006
https://security.netapp.com/advisory/ntap-20220915-0006/
https://ubuntu.com/security/notices/USN-5760-1
https://ubuntu.com/security/notices/USN-6028-2
https://www.cve.org/CVERecord?id=CVE-2022-2309
|
| libxml2 |
CVE-2022-23308 |
HIGH |
2.9.12-r1 |
2.9.13-r0 |
http://seclists.org/fulldisclosure/2022/May/33
http://seclists.org/fulldisclosure/2022/May/34
http://seclists.org/fulldisclosure/2022/May/35
http://seclists.org/fulldisclosure/2022/May/36
http://seclists.org/fulldisclosure/2022/May/37
http://seclists.org/fulldisclosure/2022/May/38
https://access.redhat.com/errata/RHSA-2022:0899
https://access.redhat.com/security/cve/CVE-2022-23308
https://bugzilla.redhat.com/show_bug.cgi?id=2056913
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-419740.html
https://cert-portal.siemens.com/productcert/html/ssa-942865.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23308
https://errata.rockylinux.org/RLSA-2022:0899
https://github.com/GNOME/libxml2/commit/652dd12a858989b14eed4e84e453059cd3ba340e
https://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.9.13/NEWS
https://linux.oracle.com/cve/CVE-2022-23308.html
https://linux.oracle.com/errata/ELSA-2022-0899.html
https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LA3MWWAYZADWJ5F6JOUBX65UZAMQB7RF/
https://nvd.nist.gov/vuln/detail/CVE-2022-23308
https://security.gentoo.org/glsa/202210-03
https://security.netapp.com/advisory/ntap-20220331-0008/
https://support.apple.com/kb/HT213253
https://support.apple.com/kb/HT213254
https://support.apple.com/kb/HT213255
https://support.apple.com/kb/HT213256
https://support.apple.com/kb/HT213257
https://support.apple.com/kb/HT213258
https://ubuntu.com/security/notices/USN-5324-1
https://ubuntu.com/security/notices/USN-5422-1
https://www.cve.org/CVERecord?id=CVE-2022-23308
https://www.oracle.com/security-alerts/cpujul2022.html
|
| libxml2 |
CVE-2022-40303 |
HIGH |
2.9.12-r1 |
2.9.14-r2 |
http://seclists.org/fulldisclosure/2022/Dec/21
http://seclists.org/fulldisclosure/2022/Dec/24
http://seclists.org/fulldisclosure/2022/Dec/25
http://seclists.org/fulldisclosure/2022/Dec/26
http://seclists.org/fulldisclosure/2022/Dec/27
https://access.redhat.com/errata/RHSA-2023:0338
https://access.redhat.com/security/cve/CVE-2022-40303
https://bugzilla.redhat.com/2136266
https://bugzilla.redhat.com/2136288
https://bugzilla.redhat.com/show_bug.cgi?id=2136266
https://bugzilla.redhat.com/show_bug.cgi?id=2136288
https://cert-portal.siemens.com/productcert/html/ssa-337522.html
https://cert-portal.siemens.com/productcert/html/ssa-341067.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-556635.html
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-769027.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40303
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40304
https://errata.almalinux.org/9/ALSA-2023-0338.html
https://errata.rockylinux.org/RLSA-2023:0338
https://gitlab.gnome.org/GNOME/libxml2/-/commit/c846986356fc149915a74972bf198abc266bc2c0
https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.3
https://linux.oracle.com/cve/CVE-2022-40303.html
https://linux.oracle.com/errata/ELSA-2023-0338.html
https://nvd.nist.gov/vuln/detail/CVE-2022-40303
https://security.netapp.com/advisory/ntap-20221209-0003/
https://support.apple.com/kb/HT213531
https://support.apple.com/kb/HT213533
https://support.apple.com/kb/HT213534
https://support.apple.com/kb/HT213535
https://support.apple.com/kb/HT213536
https://ubuntu.com/security/notices/USN-5760-1
https://ubuntu.com/security/notices/USN-5760-2
https://www.cve.org/CVERecord?id=CVE-2022-40303
|
| libxml2 |
CVE-2022-40304 |
HIGH |
2.9.12-r1 |
2.9.14-r2 |
http://seclists.org/fulldisclosure/2022/Dec/21
http://seclists.org/fulldisclosure/2022/Dec/24
http://seclists.org/fulldisclosure/2022/Dec/25
http://seclists.org/fulldisclosure/2022/Dec/26
http://seclists.org/fulldisclosure/2022/Dec/27
https://access.redhat.com/errata/RHSA-2023:0338
https://access.redhat.com/security/cve/CVE-2022-40304
https://bugzilla.redhat.com/2136266
https://bugzilla.redhat.com/2136288
https://bugzilla.redhat.com/show_bug.cgi?id=2136266
https://bugzilla.redhat.com/show_bug.cgi?id=2136288
https://cert-portal.siemens.com/productcert/html/ssa-337522.html
https://cert-portal.siemens.com/productcert/html/ssa-341067.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-556635.html
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-769027.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40303
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40304
https://errata.almalinux.org/9/ALSA-2023-0338.html
https://errata.rockylinux.org/RLSA-2023:0338
https://gitlab.gnome.org/GNOME/libxml2/-/commit/1b41ec4e9433b05bb0376be4725804c54ef1d80b
https://gitlab.gnome.org/GNOME/libxml2/-/tags
https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.3
https://linux.oracle.com/cve/CVE-2022-40304.html
https://linux.oracle.com/errata/ELSA-2023-0338.html
https://nvd.nist.gov/vuln/detail/CVE-2022-40304
https://security.netapp.com/advisory/ntap-20221209-0003/
https://support.apple.com/kb/HT213531
https://support.apple.com/kb/HT213533
https://support.apple.com/kb/HT213534
https://support.apple.com/kb/HT213535
https://support.apple.com/kb/HT213536
https://ubuntu.com/security/notices/USN-5760-1
https://ubuntu.com/security/notices/USN-5760-2
https://www.cve.org/CVERecord?id=CVE-2022-40304
|
| libxml2 |
CVE-2022-29824 |
MEDIUM |
2.9.12-r1 |
2.9.14-r0 |
http://packetstormsecurity.com/files/167345/libxml2-xmlBufAdd-Heap-Buffer-Overflow.html
http://packetstormsecurity.com/files/169825/libxml2-xmlParseNameComplex-Integer-Overflow.html
https://access.redhat.com/errata/RHSA-2022:5250
https://access.redhat.com/security/cve/CVE-2022-29824
https://bugzilla.redhat.com/show_bug.cgi?id=2082158
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29824
https://errata.rockylinux.org/RLSA-2022:5250
https://gitlab.gnome.org/GNOME/libxml2/-/commit/2554a2408e09f13652049e5ffb0d26196b02ebab
https://gitlab.gnome.org/GNOME/libxml2/-/commit/2554a2408e09f13652049e5ffb0d26196b02ebab%20%28v2.9.14%29
https://gitlab.gnome.org/GNOME/libxml2/-/commit/6c283d83eccd940bcde15634ac8c7f100e3caefd
https://gitlab.gnome.org/GNOME/libxml2/-/commit/6c283d83eccd940bcde15634ac8c7f100e3caefd%20%28master%29
https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.9.14
https://gitlab.gnome.org/GNOME/libxslt/-/tags
https://linux.oracle.com/cve/CVE-2022-29824.html
https://linux.oracle.com/errata/ELSA-2022-5317.html
https://lists.debian.org/debian-lts-announce/2022/05/msg00023.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FZOBT5Y6Y2QLDDX2HZGMV7MJMWGXORKK/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3NVZVWFRBXBI3AKZZWUWY6INQQPQVSF/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P5363EDV5VHZ5C77ODA43RYDCPMA7ARM/
https://nvd.nist.gov/vuln/detail/CVE-2022-29824
https://security.gentoo.org/glsa/202210-03
https://security.netapp.com/advisory/ntap-20220715-0006/
https://ubuntu.com/security/notices/USN-5422-1
https://www.cve.org/CVERecord?id=CVE-2022-29824
https://www.debian.org/security/2022/dsa-5142
https://www.oracle.com/security-alerts/cpujul2022.html
|
| libxslt |
CVE-2021-30560 |
HIGH |
1.1.34-r1 |
1.1.35-r0 |
https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html
https://crbug.com/1219209
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2021-30560.yml
https://github.com/sparklemotion/nokogiri
https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.2
https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-fq42-c5rg-92c2
https://lists.debian.org/debian-devel/2022/07/msg00287.html
https://lists.debian.org/debian-lts-announce/2022/09/msg00010.html
https://nvd.nist.gov/vuln/detail/CVE-2021-30560
https://security.gentoo.org/glsa/202310-23
https://ubuntu.com/security/notices/USN-5575-1
https://ubuntu.com/security/notices/USN-5575-2
https://www.cve.org/CVERecord?id=CVE-2021-30560
https://www.debian.org/security/2022/dsa-5216
|
| ncurses-libs |
CVE-2022-29458 |
HIGH |
6.2_p20210612-r0 |
6.2_p20210612-r1 |
http://seclists.org/fulldisclosure/2022/Oct/28
http://seclists.org/fulldisclosure/2022/Oct/41
https://access.redhat.com/errata/RHSA-2025:12876
https://access.redhat.com/security/cve/CVE-2022-29458
https://bugzilla.redhat.com/show_bug.cgi?id=2076483
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29458
https://errata.rockylinux.org/RLSA-2025:12876
https://invisible-island.net/ncurses/NEWS.html#t20220416
https://linux.oracle.com/cve/CVE-2022-29458.html
https://linux.oracle.com/errata/ELSA-2025-12876.html
https://lists.debian.org/debian-lts-announce/2022/10/msg00037.html
https://lists.gnu.org/archive/html/bug-ncurses/2022-04/msg00014.html
https://lists.gnu.org/archive/html/bug-ncurses/2022-04/msg00016.html
https://nvd.nist.gov/vuln/detail/CVE-2022-29458
https://support.apple.com/kb/HT213488
https://ubuntu.com/security/notices/USN-5477-1
https://ubuntu.com/security/notices/USN-6099-1
https://www.cve.org/CVERecord?id=CVE-2022-29458
|
| ncurses-terminfo-base |
CVE-2022-29458 |
HIGH |
6.2_p20210612-r0 |
6.2_p20210612-r1 |
http://seclists.org/fulldisclosure/2022/Oct/28
http://seclists.org/fulldisclosure/2022/Oct/41
https://access.redhat.com/errata/RHSA-2025:12876
https://access.redhat.com/security/cve/CVE-2022-29458
https://bugzilla.redhat.com/show_bug.cgi?id=2076483
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29458
https://errata.rockylinux.org/RLSA-2025:12876
https://invisible-island.net/ncurses/NEWS.html#t20220416
https://linux.oracle.com/cve/CVE-2022-29458.html
https://linux.oracle.com/errata/ELSA-2025-12876.html
https://lists.debian.org/debian-lts-announce/2022/10/msg00037.html
https://lists.gnu.org/archive/html/bug-ncurses/2022-04/msg00014.html
https://lists.gnu.org/archive/html/bug-ncurses/2022-04/msg00016.html
https://nvd.nist.gov/vuln/detail/CVE-2022-29458
https://support.apple.com/kb/HT213488
https://ubuntu.com/security/notices/USN-5477-1
https://ubuntu.com/security/notices/USN-6099-1
https://www.cve.org/CVERecord?id=CVE-2022-29458
|
| openssl |
CVE-2022-0778 |
HIGH |
1.1.1l-r0 |
1.1.1n-r0 |
http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html
http://seclists.org/fulldisclosure/2022/May/33
http://seclists.org/fulldisclosure/2022/May/35
http://seclists.org/fulldisclosure/2022/May/38
https://access.redhat.com/errata/RHSA-2022:4899
https://access.redhat.com/errata/RHSA-2022:5326
https://access.redhat.com/security/cve/CVE-2022-0778
https://bugzilla.redhat.com/2062202
https://bugzilla.redhat.com/show_bug.cgi?id=2062202
https://cert-portal.siemens.com/productcert/html/ssa-019200.html
https://cert-portal.siemens.com/productcert/html/ssa-028723.html
https://cert-portal.siemens.com/productcert/html/ssa-108696.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-712929.html
https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778
https://errata.almalinux.org/8/ALSA-2022-5326.html
https://errata.rockylinux.org/RLSA-2022:4899
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246
https://github.com/advisories/GHSA-x3mh-jvjw-3xwx
https://linux.oracle.com/cve/CVE-2022-0778.html
https://linux.oracle.com/errata/ELSA-2022-9272.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html
https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/
https://nvd.nist.gov/vuln/detail/CVE-2022-0778
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002
https://rustsec.org/advisories/RUSTSEC-2022-0014.html
https://security.gentoo.org/glsa/202210-02
https://security.netapp.com/advisory/ntap-20220321-0002
https://security.netapp.com/advisory/ntap-20220321-0002/
https://security.netapp.com/advisory/ntap-20220429-0005
https://security.netapp.com/advisory/ntap-20220429-0005/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://support.apple.com/kb/HT213255
https://support.apple.com/kb/HT213256
https://support.apple.com/kb/HT213257
https://ubuntu.com/security/notices/USN-5328-1
https://ubuntu.com/security/notices/USN-5328-2
https://ubuntu.com/security/notices/USN-6457-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2022-0778
https://www.debian.org/security/2022/dsa-5103
https://www.openssl.org/news/secadv/20220315.txt
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.tenable.com/security/tns-2022-06
https://www.tenable.com/security/tns-2022-07
https://www.tenable.com/security/tns-2022-08
https://www.tenable.com/security/tns-2022-09
|
| openssl |
CVE-2022-4450 |
HIGH |
1.1.1l-r0 |
1.1.1t-r0 |
https://access.redhat.com/errata/RHSA-2023:0946
https://access.redhat.com/errata/RHSA-2023:2165
https://access.redhat.com/security/cve/CVE-2022-4450
https://bugzilla.redhat.com/1960321
https://bugzilla.redhat.com/2164440
https://bugzilla.redhat.com/2164487
https://bugzilla.redhat.com/2164492
https://bugzilla.redhat.com/2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2144000
https://bugzilla.redhat.com/show_bug.cgi?id=2144003
https://bugzilla.redhat.com/show_bug.cgi?id=2144006
https://bugzilla.redhat.com/show_bug.cgi?id=2144008
https://bugzilla.redhat.com/show_bug.cgi?id=2144010
https://bugzilla.redhat.com/show_bug.cgi?id=2144012
https://bugzilla.redhat.com/show_bug.cgi?id=2144015
https://bugzilla.redhat.com/show_bug.cgi?id=2144017
https://bugzilla.redhat.com/show_bug.cgi?id=2144019
https://bugzilla.redhat.com/show_bug.cgi?id=2145170
https://bugzilla.redhat.com/show_bug.cgi?id=2158412
https://bugzilla.redhat.com/show_bug.cgi?id=2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2164487
https://bugzilla.redhat.com/show_bug.cgi?id=2164488
https://bugzilla.redhat.com/show_bug.cgi?id=2164492
https://bugzilla.redhat.com/show_bug.cgi?id=2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2164497
https://bugzilla.redhat.com/show_bug.cgi?id=2164499
https://bugzilla.redhat.com/show_bug.cgi?id=2164500
https://cert-portal.siemens.com/productcert/html/ssa-203374.html
https://cert-portal.siemens.com/productcert/html/ssa-337522.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-556635.html
https://cert-portal.siemens.com/productcert/html/ssa-561322.html
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-699386.html
https://cert-portal.siemens.com/productcert/html/ssa-769027.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-879734.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401
https://errata.almalinux.org/9/ALSA-2023-2165.html
https://errata.rockylinux.org/RLSA-2023:0946
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b
https://github.com/advisories/GHSA-v5w6-wcm8-jm4q
https://linux.oracle.com/cve/CVE-2022-4450.html
https://linux.oracle.com/errata/ELSA-2023-32791.html
https://nvd.nist.gov/vuln/detail/CVE-2022-4450
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003
https://rustsec.org/advisories/RUSTSEC-2023-0010.html
https://security.gentoo.org/glsa/202402-08
https://ubuntu.com/security/notices/USN-5844-1
https://ubuntu.com/security/notices/USN-6564-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2022-4450
https://www.openssl.org/news/secadv/20230207.txt
|
| openssl |
CVE-2023-0215 |
HIGH |
1.1.1l-r0 |
1.1.1t-r0 |
https://access.redhat.com/errata/RHSA-2023:0946
https://access.redhat.com/errata/RHSA-2023:2165
https://access.redhat.com/security/cve/CVE-2023-0215
https://bugzilla.redhat.com/1960321
https://bugzilla.redhat.com/2164440
https://bugzilla.redhat.com/2164487
https://bugzilla.redhat.com/2164492
https://bugzilla.redhat.com/2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2144000
https://bugzilla.redhat.com/show_bug.cgi?id=2144003
https://bugzilla.redhat.com/show_bug.cgi?id=2144006
https://bugzilla.redhat.com/show_bug.cgi?id=2144008
https://bugzilla.redhat.com/show_bug.cgi?id=2144010
https://bugzilla.redhat.com/show_bug.cgi?id=2144012
https://bugzilla.redhat.com/show_bug.cgi?id=2144015
https://bugzilla.redhat.com/show_bug.cgi?id=2144017
https://bugzilla.redhat.com/show_bug.cgi?id=2144019
https://bugzilla.redhat.com/show_bug.cgi?id=2145170
https://bugzilla.redhat.com/show_bug.cgi?id=2158412
https://bugzilla.redhat.com/show_bug.cgi?id=2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2164487
https://bugzilla.redhat.com/show_bug.cgi?id=2164488
https://bugzilla.redhat.com/show_bug.cgi?id=2164492
https://bugzilla.redhat.com/show_bug.cgi?id=2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2164497
https://bugzilla.redhat.com/show_bug.cgi?id=2164499
https://bugzilla.redhat.com/show_bug.cgi?id=2164500
https://cert-portal.siemens.com/productcert/html/ssa-203374.html
https://cert-portal.siemens.com/productcert/html/ssa-337522.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-556635.html
https://cert-portal.siemens.com/productcert/html/ssa-561322.html
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-769027.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-879734.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401
https://errata.almalinux.org/9/ALSA-2023-2165.html
https://errata.rockylinux.org/RLSA-2023:0946
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344
https://github.com/advisories/GHSA-r7jw-wp68-3xch
https://linux.oracle.com/cve/CVE-2023-0215.html
https://linux.oracle.com/errata/ELSA-2023-32791.html
https://nvd.nist.gov/vuln/detail/CVE-2023-0215
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003
https://rustsec.org/advisories/RUSTSEC-2023-0009.html
https://security.gentoo.org/glsa/202402-08
https://security.netapp.com/advisory/ntap-20230427-0007
https://security.netapp.com/advisory/ntap-20230427-0007/
https://security.netapp.com/advisory/ntap-20230427-0009
https://security.netapp.com/advisory/ntap-20230427-0009/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://ubuntu.com/security/notices/USN-5844-1
https://ubuntu.com/security/notices/USN-5845-1
https://ubuntu.com/security/notices/USN-5845-2
https://ubuntu.com/security/notices/USN-6564-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-0215
https://www.openssl.org/news/secadv/20230207.txt
|
| openssl |
CVE-2023-0286 |
HIGH |
1.1.1l-r0 |
1.1.1t-r0 |
https://access.redhat.com/errata/RHSA-2023:0946
https://access.redhat.com/errata/RHSA-2025:7937
https://access.redhat.com/security/cve/CVE-2023-0286
https://access.redhat.com/security/cve/cve-2023-0286
https://bugzilla.redhat.com/2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2144000
https://bugzilla.redhat.com/show_bug.cgi?id=2144003
https://bugzilla.redhat.com/show_bug.cgi?id=2144006
https://bugzilla.redhat.com/show_bug.cgi?id=2144008
https://bugzilla.redhat.com/show_bug.cgi?id=2144010
https://bugzilla.redhat.com/show_bug.cgi?id=2144012
https://bugzilla.redhat.com/show_bug.cgi?id=2144015
https://bugzilla.redhat.com/show_bug.cgi?id=2144017
https://bugzilla.redhat.com/show_bug.cgi?id=2144019
https://bugzilla.redhat.com/show_bug.cgi?id=2145170
https://bugzilla.redhat.com/show_bug.cgi?id=2158412
https://bugzilla.redhat.com/show_bug.cgi?id=2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2164487
https://bugzilla.redhat.com/show_bug.cgi?id=2164488
https://bugzilla.redhat.com/show_bug.cgi?id=2164492
https://bugzilla.redhat.com/show_bug.cgi?id=2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2164497
https://bugzilla.redhat.com/show_bug.cgi?id=2164499
https://bugzilla.redhat.com/show_bug.cgi?id=2164500
https://cert-portal.siemens.com/productcert/html/ssa-028723.html
https://cert-portal.siemens.com/productcert/html/ssa-203374.html
https://cert-portal.siemens.com/productcert/html/ssa-264815.html
https://cert-portal.siemens.com/productcert/html/ssa-337522.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-455250.html
https://cert-portal.siemens.com/productcert/html/ssa-556635.html
https://cert-portal.siemens.com/productcert/html/ssa-561322.html
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-769027.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-879734.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401
https://errata.almalinux.org/9/ALSA-2025-7937.html
https://errata.rockylinux.org/RLSA-2023:0946
https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt
https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d
https://github.com/advisories/GHSA-x4qr-2fvf-3mr5
https://github.com/pyca/cryptography
https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5
https://linux.oracle.com/cve/CVE-2023-0286.html
https://linux.oracle.com/errata/ELSA-2025-7937.html
https://nvd.nist.gov/vuln/detail/CVE-2023-0286
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003
https://rustsec.org/advisories/RUSTSEC-2023-0006.html
https://security.gentoo.org/glsa/202402-08
https://ubuntu.com/security/notices/USN-5844-1
https://ubuntu.com/security/notices/USN-5845-1
https://ubuntu.com/security/notices/USN-5845-2
https://ubuntu.com/security/notices/USN-6564-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-0286
https://www.openssl.org/news/secadv/20230207.txt
|
| openssl |
CVE-2023-0464 |
HIGH |
1.1.1l-r0 |
1.1.1t-r1 |
https://access.redhat.com/errata/RHSA-2023:3722
https://access.redhat.com/security/cve/CVE-2023-0464
https://bugzilla.redhat.com/2181082
https://bugzilla.redhat.com/2182561
https://bugzilla.redhat.com/2182565
https://bugzilla.redhat.com/2188461
https://bugzilla.redhat.com/2207947
https://cert-portal.siemens.com/productcert/html/ssa-028723.html
https://cert-portal.siemens.com/productcert/html/ssa-077170.html
https://cert-portal.siemens.com/productcert/html/ssa-337522.html
https://cert-portal.siemens.com/productcert/html/ssa-341067.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-556635.html
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-769027.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-879734.html
https://errata.almalinux.org/9/ALSA-2023-3722.html
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1
https://github.com/advisories/GHSA-w2w6-xp88-5cvw
https://linux.oracle.com/cve/CVE-2023-0464.html
https://linux.oracle.com/errata/ELSA-2023-3722.html
https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html
https://nvd.nist.gov/vuln/detail/CVE-2023-0464
https://security.gentoo.org/glsa/202402-08
https://security.netapp.com/advisory/ntap-20230406-0006
https://security.netapp.com/advisory/ntap-20230406-0006/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://ubuntu.com/security/notices/USN-6039-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.couchbase.com/alerts
https://www.couchbase.com/alerts/
https://www.cve.org/CVERecord?id=CVE-2023-0464
https://www.debian.org/security/2023/dsa-5417
https://www.openssl.org/news/secadv/20230322.txt
|
| openssl |
CVE-2022-2097 |
MEDIUM |
1.1.1l-r0 |
1.1.1q-r0 |
https://access.redhat.com/errata/RHSA-2022:6224
https://access.redhat.com/security/cve/CVE-2022-2097
https://bugzilla.redhat.com/2081494
https://bugzilla.redhat.com/2087911
https://bugzilla.redhat.com/2087913
https://bugzilla.redhat.com/2097310
https://bugzilla.redhat.com/2104905
https://bugzilla.redhat.com/show_bug.cgi?id=2081494
https://bugzilla.redhat.com/show_bug.cgi?id=2097310
https://bugzilla.redhat.com/show_bug.cgi?id=2100554
https://bugzilla.redhat.com/show_bug.cgi?id=2104905
https://cert-portal.siemens.com/productcert/html/ssa-332410.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-879734.html
https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097
https://errata.almalinux.org/9/ALSA-2022-6224.html
https://errata.rockylinux.org/RLSA-2022:5818
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93
https://github.com/advisories/GHSA-3wx7-46ch-7rq2
https://github.com/alexcrichton/openssl-src-rs
https://linux.oracle.com/cve/CVE-2022-2097.html
https://linux.oracle.com/errata/ELSA-2022-9955.html
https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/
https://nvd.nist.gov/vuln/detail/CVE-2022-2097
https://rustsec.org/advisories/RUSTSEC-2022-0032.html
https://security.gentoo.org/glsa/202210-02
https://security.netapp.com/advisory/ntap-20220715-0011
https://security.netapp.com/advisory/ntap-20220715-0011/
https://security.netapp.com/advisory/ntap-20230420-0008
https://security.netapp.com/advisory/ntap-20230420-0008/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://ubuntu.com/security/notices/USN-5502-1
https://ubuntu.com/security/notices/USN-6457-1
https://www.cve.org/CVERecord?id=CVE-2022-2097
https://www.debian.org/security/2023/dsa-5343
https://www.openssl.org/news/secadv/20220705.txt
|
| openssl |
CVE-2022-4304 |
MEDIUM |
1.1.1l-r0 |
1.1.1t-r0 |
https://access.redhat.com/errata/RHSA-2023:0946
https://access.redhat.com/errata/RHSA-2023:2165
https://access.redhat.com/security/cve/CVE-2022-4304
https://bugzilla.redhat.com/1960321
https://bugzilla.redhat.com/2164440
https://bugzilla.redhat.com/2164487
https://bugzilla.redhat.com/2164492
https://bugzilla.redhat.com/2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2144000
https://bugzilla.redhat.com/show_bug.cgi?id=2144003
https://bugzilla.redhat.com/show_bug.cgi?id=2144006
https://bugzilla.redhat.com/show_bug.cgi?id=2144008
https://bugzilla.redhat.com/show_bug.cgi?id=2144010
https://bugzilla.redhat.com/show_bug.cgi?id=2144012
https://bugzilla.redhat.com/show_bug.cgi?id=2144015
https://bugzilla.redhat.com/show_bug.cgi?id=2144017
https://bugzilla.redhat.com/show_bug.cgi?id=2144019
https://bugzilla.redhat.com/show_bug.cgi?id=2145170
https://bugzilla.redhat.com/show_bug.cgi?id=2158412
https://bugzilla.redhat.com/show_bug.cgi?id=2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2164487
https://bugzilla.redhat.com/show_bug.cgi?id=2164488
https://bugzilla.redhat.com/show_bug.cgi?id=2164492
https://bugzilla.redhat.com/show_bug.cgi?id=2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2164497
https://bugzilla.redhat.com/show_bug.cgi?id=2164499
https://bugzilla.redhat.com/show_bug.cgi?id=2164500
https://cert-portal.siemens.com/productcert/html/ssa-203374.html
https://cert-portal.siemens.com/productcert/html/ssa-264814.html
https://cert-portal.siemens.com/productcert/html/ssa-337522.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-556635.html
https://cert-portal.siemens.com/productcert/html/ssa-561322.html
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-699386.html
https://cert-portal.siemens.com/productcert/html/ssa-769027.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-879734.html
https://cert-portal.siemens.com/productcert/html/ssa-943925.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401
https://errata.almalinux.org/9/ALSA-2023-2165.html
https://errata.rockylinux.org/RLSA-2023:0946
https://github.com/advisories/GHSA-p52g-cm5j-mjv4
https://linux.oracle.com/cve/CVE-2022-4304.html
https://linux.oracle.com/errata/ELSA-2023-32791.html
https://nvd.nist.gov/vuln/detail/CVE-2022-4304
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003
https://rustsec.org/advisories/RUSTSEC-2023-0007.html
https://security.gentoo.org/glsa/202402-08
https://ubuntu.com/security/notices/USN-5844-1
https://ubuntu.com/security/notices/USN-6564-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2022-4304
https://www.openssl.org/news/secadv/20230207.txt
|
| openssl |
CVE-2023-0465 |
MEDIUM |
1.1.1l-r0 |
1.1.1t-r2 |
https://access.redhat.com/errata/RHSA-2023:3722
https://access.redhat.com/security/cve/CVE-2023-0465
https://bugzilla.redhat.com/2181082
https://bugzilla.redhat.com/2182561
https://bugzilla.redhat.com/2182565
https://bugzilla.redhat.com/2188461
https://bugzilla.redhat.com/2207947
https://cert-portal.siemens.com/productcert/html/ssa-337522.html
https://cert-portal.siemens.com/productcert/html/ssa-341067.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-556635.html
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-769027.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html
https://cert-portal.siemens.com/productcert/html/ssa-879734.html
https://errata.almalinux.org/9/ALSA-2023-3722.html
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c
https://github.com/advisories/GHSA-77f3-6546-6rj7
https://linux.oracle.com/cve/CVE-2023-0465.html
https://linux.oracle.com/errata/ELSA-2023-3722.html
https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html
https://nvd.nist.gov/vuln/detail/CVE-2023-0465
https://security.gentoo.org/glsa/202402-08
https://security.netapp.com/advisory/ntap-20230414-0001
https://security.netapp.com/advisory/ntap-20230414-0001/
https://ubuntu.com/security/notices/USN-6039-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-0465
https://www.debian.org/security/2023/dsa-5417
https://www.openssl.org/news/secadv/20230328.txt
|
| ssl_client |
CVE-2022-28391 |
HIGH |
1.33.1-r6 |
1.33.1-r7 |
https://access.redhat.com/security/cve/CVE-2022-28391
https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch
https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch
https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661
https://nvd.nist.gov/vuln/detail/CVE-2022-28391
https://www.cve.org/CVERecord?id=CVE-2022-28391
|
| xz-libs |
CVE-2022-1271 |
HIGH |
5.2.5-r0 |
5.2.5-r1 |
https://access.redhat.com/errata/RHSA-2022:4940
https://access.redhat.com/security/cve/CVE-2022-1271
https://bugzilla.redhat.com/2073310
https://bugzilla.redhat.com/show_bug.cgi?id=2073310
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-455250.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1271
https://errata.almalinux.org/9/ALSA-2022-4940.html
https://errata.rockylinux.org/RLSA-2022:4940
https://git.tukaani.org/?p=xz.git%3Ba=commit%3Bh=69d1b3fc29677af8ade8dc15dba83f0589cb63d6
https://linux.oracle.com/cve/CVE-2022-1271.html
https://linux.oracle.com/errata/ELSA-2022-5052.html
https://lists.gnu.org/r/bug-gzip/2022-04/msg00011.html
https://nvd.nist.gov/vuln/detail/CVE-2022-1271
https://security-tracker.debian.org/tracker/CVE-2022-1271
https://security.gentoo.org/glsa/202209-01
https://security.netapp.com/advisory/ntap-20220930-0006/
https://tukaani.org/xz/xzgrep-ZDI-CAN-16587.patch
https://ubuntu.com/security/notices/USN-5378-1
https://ubuntu.com/security/notices/USN-5378-2
https://ubuntu.com/security/notices/USN-5378-3
https://ubuntu.com/security/notices/USN-5378-4
https://www.cve.org/CVERecord?id=CVE-2022-1271
https://www.openwall.com/lists/oss-security/2022/04/07/8
|
| zlib |
CVE-2022-37434 |
CRITICAL |
1.2.11-r3 |
1.2.12-r2 |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434
http://seclists.org/fulldisclosure/2022/Oct/37
http://seclists.org/fulldisclosure/2022/Oct/38
http://seclists.org/fulldisclosure/2022/Oct/41
http://seclists.org/fulldisclosure/2022/Oct/42
http://www.openwall.com/lists/oss-security/2022/08/05/2
http://www.openwall.com/lists/oss-security/2022/08/09/1
https://access.redhat.com/errata/RHSA-2022:8291
https://access.redhat.com/security/cve/CVE-2022-37434
https://bugzilla.redhat.com/2116639
https://bugzilla.redhat.com/show_bug.cgi?id=2053198
https://bugzilla.redhat.com/show_bug.cgi?id=2077431
https://bugzilla.redhat.com/show_bug.cgi?id=2081296
https://bugzilla.redhat.com/show_bug.cgi?id=2116639
https://cert-portal.siemens.com/productcert/html/ssa-150063.html
https://cert-portal.siemens.com/productcert/html/ssa-202008.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-470355.html
https://cert-portal.siemens.com/productcert/html/ssa-561322.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434
https://errata.almalinux.org/9/ALSA-2022-8291.html
https://errata.rockylinux.org/RLSA-2022:8291
https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-w5mr-8397-m99w
https://github.com/curl/curl/issues/9271
https://github.com/ivd38/zlib_overflow
https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063
https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d
https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1
https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764
https://linux.oracle.com/cve/CVE-2022-37434.html
https://linux.oracle.com/errata/ELSA-2023-1095.html
https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/
https://nvd.nist.gov/vuln/detail/CVE-2022-37434
https://security.netapp.com/advisory/ntap-20220901-0005/
https://security.netapp.com/advisory/ntap-20230427-0007/
https://support.apple.com/kb/HT213488
https://support.apple.com/kb/HT213489
https://support.apple.com/kb/HT213490
https://support.apple.com/kb/HT213491
https://support.apple.com/kb/HT213493
https://support.apple.com/kb/HT213494
https://ubuntu.com/security/notices/USN-5570-1
https://ubuntu.com/security/notices/USN-5570-2
https://ubuntu.com/security/notices/USN-5573-1
https://ubuntu.com/security/notices/USN-6736-1
https://ubuntu.com/security/notices/USN-6736-2
https://www.cve.org/CVERecord?id=CVE-2022-37434
https://www.debian.org/security/2022/dsa-5218
|
| zlib |
CVE-2018-25032 |
HIGH |
1.2.11-r3 |
1.2.12-r0 |
http://seclists.org/fulldisclosure/2022/May/33
http://seclists.org/fulldisclosure/2022/May/35
http://seclists.org/fulldisclosure/2022/May/38
http://www.openwall.com/lists/oss-security/2022/03/25/2
http://www.openwall.com/lists/oss-security/2022/03/26/1
https://access.redhat.com/errata/RHSA-2022:8420
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-25032.json
https://access.redhat.com/security/cve/CVE-2018-25032
https://bugzilla.redhat.com/2067945
https://cert-portal.siemens.com/productcert/html/ssa-333517.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://cert-portal.siemens.com/productcert/html/ssa-419740.html
https://cert-portal.siemens.com/productcert/html/ssa-470355.html
https://cert-portal.siemens.com/productcert/html/ssa-565386.html
https://cert-portal.siemens.com/productcert/html/ssa-942865.html
https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf
https://errata.almalinux.org/9/ALSA-2022-8420.html
https://github.com/advisories/GHSA-jc36-42cf-vqwj
https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531
https://github.com/madler/zlib/compare/v1.2.11...v1.2.12
https://github.com/madler/zlib/issues/605
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml
https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4
https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5
https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ
https://linux.oracle.com/cve/CVE-2018-25032.html
https://linux.oracle.com/errata/ELSA-2022-9565.html
https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html
https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html
https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/
https://nvd.nist.gov/vuln/detail/CVE-2018-25032
https://security.gentoo.org/glsa/202210-42
https://security.netapp.com/advisory/ntap-20220526-0009
https://security.netapp.com/advisory/ntap-20220526-0009/
https://security.netapp.com/advisory/ntap-20220729-0004
https://security.netapp.com/advisory/ntap-20220729-0004/
https://support.apple.com/kb/HT213255
https://support.apple.com/kb/HT213256
https://support.apple.com/kb/HT213257
https://ubuntu.com/security/notices/USN-5355-1
https://ubuntu.com/security/notices/USN-5355-2
https://ubuntu.com/security/notices/USN-5359-1
https://ubuntu.com/security/notices/USN-5359-2
https://ubuntu.com/security/notices/USN-5739-1
https://ubuntu.com/security/notices/USN-6736-1
https://ubuntu.com/security/notices/USN-6736-2
https://www.cve.org/CVERecord?id=CVE-2018-25032
https://www.debian.org/security/2022/dsa-5111
https://www.openwall.com/lists/oss-security/2022/03/24/1
https://www.openwall.com/lists/oss-security/2022/03/28/1
https://www.openwall.com/lists/oss-security/2022/03/28/3
https://www.oracle.com/security-alerts/cpujul2022.html
|
| No Misconfigurations found |
|---|
| com.fasterxml.jackson.core:jackson-core |
CVE-2025-52999 |
HIGH |
2.10.1 |
2.15.0 |
https://access.redhat.com/errata/RHSA-2025:12280
https://access.redhat.com/security/cve/CVE-2025-52999
https://advisory.echohq.com/cve/CVE-2025-52999
https://bugzilla.redhat.com/2374804
https://bugzilla.redhat.com/show_bug.cgi?id=2374804
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52999
https://errata.almalinux.org/9/ALSA-2025-12280.html
https://errata.rockylinux.org/RLSA-2025:12280
https://github.com/FasterXML/jackson-core
https://github.com/FasterXML/jackson-core/pull/943
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-h46c-h94j-95f3
https://github.com/advisories/GHSA-h46c-h94j-95f3
https://linux.oracle.com/cve/CVE-2025-52999.html
https://linux.oracle.com/errata/ELSA-2025-14126.html
https://nvd.nist.gov/vuln/detail/CVE-2025-52999
https://www.cve.org/CVERecord?id=CVE-2025-52999
|
| com.fasterxml.jackson.core:jackson-core |
CVE-2026-68494 |
HIGH |
2.10.1 |
2.18.8, 2.21.4 |
https://access.redhat.com/security/cve/CVE-2026-68494
https://advisory.echohq.com/cve/CVE-2026-68494
https://github.com/FasterXML/jackson-core
https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd
https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641
https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8
https://github.com/FasterXML/jackson-core/pull/1611
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9
https://github.com/advisories/GHSA-72hv-8253-57qq
https://nvd.nist.gov/vuln/detail/CVE-2026-68494
https://www.cve.org/CVERecord?id=CVE-2026-18401
https://www.cve.org/CVERecord?id=CVE-2026-68494
|
| com.fasterxml.jackson.core:jackson-core |
CVE-2026-89425 |
HIGH |
2.10.1 |
2.21.7, 2.22.3, 2.18.11 |
https://access.redhat.com/errata/RHSA-2026:86706
https://access.redhat.com/security/cve/CVE-2026-89425
https://advisory.echohq.com/cve/CVE-2026-89425
https://bugzilla.redhat.com/2538720
https://bugzilla.redhat.com/2539084
https://bugzilla.redhat.com/show_bug.cgi?id=2538720
https://bugzilla.redhat.com/show_bug.cgi?id=2539084
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89407
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89425
https://errata.almalinux.org/9/ALSA-2026-86706.html
https://errata.rockylinux.org/RLSA-2026:86706
https://github.com/FasterXML/jackson-core
https://github.com/FasterXML/jackson-core/commit/211cf2c5d91abbec38067f37efc1363cd4e88ee3
https://github.com/FasterXML/jackson-core/pull/1698
https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-2.18.11
https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-3.2.3
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf
https://linux.oracle.com/cve/CVE-2026-89425.html
https://linux.oracle.com/errata/ELSA-2026-86706.html
https://nvd.nist.gov/vuln/detail/CVE-2026-89425
https://www.cve.org/CVERecord?id=CVE-2026-89425
|
| com.fasterxml.jackson.core:jackson-core |
CVE-2025-49128 |
MEDIUM |
2.10.1 |
2.13.0 |
https://access.redhat.com/security/cve/CVE-2025-49128
https://advisory.echohq.com/cve/CVE-2025-49128
https://github.com/FasterXML/jackson-core
https://github.com/FasterXML/jackson-core/commit/a6c297682737dde13337cb7c3020f299518609a8
https://github.com/FasterXML/jackson-core/pull/652
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-wf8f-6423-gfxg
https://github.com/advisories/GHSA-wf8f-6423-gfxg
https://nvd.nist.gov/vuln/detail/CVE-2021-22145
https://nvd.nist.gov/vuln/detail/CVE-2025-49128
https://www.cve.org/CVERecord?id=CVE-2025-49128
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-25649 |
HIGH |
2.10.1 |
2.6.7.4, 2.9.10.7, 2.10.5.1 |
https://access.redhat.com/security/cve/CVE-2020-25649
https://bugzilla.redhat.com/show_bug.cgi?id=1887664
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/3d932709abd0b5390efe67451653fc9efa9db677
https://github.com/FasterXML/jackson-databind/commit/612f971b78c60202e9cd75a299050c8f2d724a59
https://github.com/FasterXML/jackson-databind/commit/612f971b78c60202e9cd75a299050c8f2d724a59%20%28jackson-databind-2.11.0.rc1%29
https://github.com/FasterXML/jackson-databind/issues/2589
https://lists.apache.org/thread.html/r011d1430e8f40dff9550c3bc5d0f48b14c01ba8aecabd91d5e495386@%3Ccommits.turbine.apache.org%3E
https://lists.apache.org/thread.html/r024b7bda9c43c5560d81238748775c5ecfe01b57280f90df1f773949@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r04529cedaca40c2ff90af4880493f9c88a8ebf4d1d6c861d23108a5a@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r0881e23bd9034c8f51fdccdc8f4d085ba985dcd738f8520569ca5c3d@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r0b8dc3acd4503e4ecb6fbd6ea7d95f59941168d8452ac0ab1d1d96bb@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r1b7ed0c4b6c4301d4dfd6fdbc5581b0a789d3240cab55d766f33c6c6@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r2882fc1f3032cd7be66e28787f04ec6f1874ac68d47e310e30ff7eb1@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r2b6ddb3a4f4cd11d8f6305011e1b7438ba813511f2e3ab3180c7ffda@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r2eb66c182853c69ecfb52f63d3dec09495e9b65be829fd889a081ae1@%3Cdev.hive.apache.org%3E
https://lists.apache.org/thread.html/r2f5c5479f99398ef344b7ebd4d90bc3316236c45d0f3bc42090efcd7@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r31f4ee7d561d56a0c2c2c6eb1d6ce3e05917ff9654fdbfec05dc2b83@%3Ccommits.servicecomb.apache.org%3E
https://lists.apache.org/thread.html/r3e6ae311842de4e64c5d560a475b7f9cc7e0a9a8649363c6cf7537eb@%3Ccommits.karaf.apache.org%3E
https://lists.apache.org/thread.html/r407538adec3185dd35a05c9a26ae2f74425b15132470cf540f41d85b@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r45e7350dfc92bb192f3f88e9971c11ab2be0953cc375be3dda5170bd@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r5b130fe668503c4b7e2caf1b16f86b7f2070fd1b7ef8f26195a2ffbd@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r5f8a1608d758936bd6bbc5eed980777437b611537bf6fff40663fc71@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r605764e05e201db33b3e9c2e66ff620658f07ad74f296abe483f7042@%3Creviews.iotdb.apache.org%3E
https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc@%3Cdev.kafka.apache.org%3E
https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc@%3Cusers.kafka.apache.org%3E
https://lists.apache.org/thread.html/r63c87aab97155f3f3cbe11d030c4a184ea0de440ee714977db02e956@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r68d029ee74ab0f3b0569d0c05f5688cb45dd3abe96a6534735252805@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r6a4f3ef6edfed2e0884269d84798f766779bbbc1005f7884e0800d61@%3Cdev.knox.apache.org%3E
https://lists.apache.org/thread.html/r6a6df5647583541e3cb71c75141008802f7025cee1c430d4ed78f4cc@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r6b11eca1d646f45eb0d35d174e6b1e47cfae5295b92000856bfb6304@%3Cdev.kafka.apache.org%3E
https://lists.apache.org/thread.html/r6b11eca1d646f45eb0d35d174e6b1e47cfae5295b92000856bfb6304@%3Cusers.kafka.apache.org%3E
https://lists.apache.org/thread.html/r6cbd599b80e787f02ff7a1391d9278a03f37d6a6f4f943f0f01a62fb@%3Creviews.iotdb.apache.org%3E
https://lists.apache.org/thread.html/r6e3d4f7991542119a4ca6330271d7fbf7b9fb3abab24ada82ddf1ee4@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r73bef1bb601a9f093f915f8075eb49fcca51efade57b817afd5def07@%3Ccommits.iotdb.apache.org%3E
https://lists.apache.org/thread.html/r765283e145049df9b8998f14dcd444345555aae02b1610cfb3188bf8@%3Cnotifications.iotdb.apache.org%3E
https://lists.apache.org/thread.html/r78d53a0a269c18394daf5940105dc8c7f9a2399503c2e78be20abe7e@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r7cb5b4b3e4bd41a8042e5725b7285877a17bcbf07f4eb3f7b316af60@%3Creviews.iotdb.apache.org%3E
https://lists.apache.org/thread.html/r86c78bf7656fdb2dab69cbf17f3d7492300f771025f1a3a65d5e5ce5@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r8764bb835bcb8e311c882ff91dd3949c9824e905e880930be56f6ba3@%3Cuser.spark.apache.org%3E
https://lists.apache.org/thread.html/r8937a7160717fe8b2221767163c4de4f65bc5466405cb1c5310f9080@%3Cdev.kafka.apache.org%3E
https://lists.apache.org/thread.html/r8937a7160717fe8b2221767163c4de4f65bc5466405cb1c5310f9080@%3Cusers.kafka.apache.org%3E
https://lists.apache.org/thread.html/r8ae961c80930e2717c75025414ce48a432cea1137c02f648b1fb9524@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r900d4408c4189b376d1ec580ea7740ea6f8710dc2f0b7e9c9eeb5ae0@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r90d1e97b0a743cf697d89a792a9b669909cc5a1692d1e0083a22e66c@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r91722ecfba688b0c565675f8bf380269fde8ec62b54d6161db544c22@%3Ccommits.karaf.apache.org%3E
https://lists.apache.org/thread.html/r94c7e86e546120f157264ba5ba61fd29b3a8d530ed325a9b4fa334d7@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r95a297eb5fd1f2d3a2281f15340e2413f952e9d5503296c3adc7201a@%3Ccommits.tomee.apache.org%3E
https://lists.apache.org/thread.html/r98bfe3b90ea9408f12c4b447edcb5638703d80bc782430aa0c210a54@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/ra1157e57a01d25e36b0dc17959ace758fc21ba36746de29ba1d8b130@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/ra409f798a1e5a6652b7097429b388650ccd65fd958cee0b6f69bba00@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/ra95faf968f3463acb3f31a6fbec31453fc5045325f99f396961886d3@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/raf13235de6df1d47a717199e1ecd700dff3236632f5c9a1488d9845b@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/rb674520b9f6c808c1bf263b1369e14048ec3243615f35cfd24e33604@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7@%3Cdev.kafka.apache.org%3E
https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7@%3Cusers.kafka.apache.org%3E
https://lists.apache.org/thread.html/rc15e90bbef196a5c6c01659e015249d6c9a73581ca9afb8aeecf00d2@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/rc82ff47853289e9cd17f5cfbb053c04cafc75ee32e3d7223963f83bb@%3Cdev.knox.apache.org%3E
https://lists.apache.org/thread.html/rc88f2fa2b7bd6443921727aeee7704a1fb02433e722e2abf677e0d3d@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rc959cdb57c4fe198316130ff4a5ecbf9d680e356032ff2e9f4f05d54@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/rd317f15a675d114dbf5b488d27eeb2467b4424356b16116eb18a652d@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/rd57c7582adc90e233f23f3727db3df9115b27a823b92374f11453f34@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/rd6f6bf848c2d47fa4a85c27d011d948778b8f7e58ba495968435a0b3@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rdca8711bb7aa5d47a44682606cd0ea3497e2e922f22b7ee83e81e6c1@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/rdf9a34726482222c90d50ae1b9847881de67dde8cfde4999633d2cdc@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/re16f81d3ad49a93dd2f0cba9f8fc88e5fb89f30bf9a2ad7b6f3e69c1@%3Ccommits.karaf.apache.org%3E
https://lists.apache.org/thread.html/re96dc7a13e13e56190a5d80f9e5440a0d0c83aeec6467b562fbf2dca@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/rf1809a1374041a969d77afab21fc38925de066bc97e86157d3ac3402@%3Ccommits.karaf.apache.org%3E
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6X2UT4X6M7DLQYBOOHMXBWGYJ65RL2CT
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6X2UT4X6M7DLQYBOOHMXBWGYJ65RL2CT/
https://nvd.nist.gov/vuln/detail/CVE-2020-25649
https://security.netapp.com/advisory/ntap-20210108-0007
https://security.netapp.com/advisory/ntap-20210108-0007/
https://www.cve.org/CVERecord?id=CVE-2020-25649
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-36518 |
HIGH |
2.10.1 |
2.13.2.1, 2.12.6.1 |
https://access.redhat.com/errata/RHSA-2023:2312
https://access.redhat.com/errata/RHSA-2024:3061
https://access.redhat.com/security/cve/CVE-2020-36518
https://bugzilla.redhat.com/2064698
https://bugzilla.redhat.com/show_bug.cgi?id=2064698
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36518
https://errata.almalinux.org/9/ALSA-2023-2312.html
https://errata.rockylinux.org/RLSA-2024:3061
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/0a8157c6ca478b1bc7be4ba7dccdb3863275f0de
https://github.com/FasterXML/jackson-databind/commit/3cc52f82ecf943e06c1d7c3b078e405fb3923d2b
https://github.com/FasterXML/jackson-databind/commit/8238ab41d0350fb915797c89d46777b4496b74fd
https://github.com/FasterXML/jackson-databind/commit/b3587924ee5d8695942f364d0d404d48d0ea6126
https://github.com/FasterXML/jackson-databind/commit/fcfc4998ec23f0b1f7f8a9521c2b317b6c25892b
https://github.com/FasterXML/jackson-databind/issues/2816
https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12
https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.13
https://github.com/advisories/GHSA-57j2-w4cx-62h2
https://linux.oracle.com/cve/CVE-2020-36518.html
https://linux.oracle.com/errata/ELSA-2024-3061.html
https://lists.debian.org/debian-lts-announce/2022/05/msg00001.html
https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html
https://nvd.nist.gov/vuln/detail/CVE-2020-36518
https://security.netapp.com/advisory/ntap-20220506-0004
https://security.netapp.com/advisory/ntap-20220506-0004/
https://www.cve.org/CVERecord?id=CVE-2020-36518
https://www.debian.org/security/2022/dsa-5283
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2021-46877 |
HIGH |
2.10.1 |
2.12.6, 2.13.1 |
https://access.redhat.com/security/cve/CVE-2021-46877
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/3ccde7d938fea547e598fdefe9a82cff37fed5cb
https://github.com/FasterXML/jackson-databind/commit/3ccde7d938fea547e598fdefe9a82cff37fed5cb%20%28jackson-databind-2.12.6%29
https://github.com/FasterXML/jackson-databind/commit/3ccde7d938fea547e598fdefe9a82cff37fed5cb%20%28jackson-databind-3.13.1%29
https://github.com/FasterXML/jackson-databind/issues/3328
https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12.6
https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.13.1
https://groups.google.com/g/jackson-user/c/OsBsirPM_Vw
https://nvd.nist.gov/vuln/detail/CVE-2021-46877
https://www.cve.org/CVERecord?id=CVE-2021-46877
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2022-42003 |
HIGH |
2.10.1 |
2.12.7.1, 2.13.4.2 |
https://access.redhat.com/security/cve/CVE-2022-42003
https://advisory.echohq.com/cve/CVE-2022-42003
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51020
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/blob/2.13/release-notes/VERSION-2.x
https://github.com/FasterXML/jackson-databind/commit/0e37a39502439ecbaa1a5b5188387c01bf7f7fa1
https://github.com/FasterXML/jackson-databind/commit/2c4a601c626f7790cad9d3c322d244e182838288
https://github.com/FasterXML/jackson-databind/commit/7ba9ac5b87a9d6ac0d2815158ecbeb315ad4dcdc
https://github.com/FasterXML/jackson-databind/commit/cd090979b7ea78c75e4de8a4aed04f7e9fa8deea
https://github.com/FasterXML/jackson-databind/commit/d499f2e7bbc5ebd63af11e1f5cf1989fa323aa45
https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33
https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33%20%28jackson-databind-2.14.0-rc1%29
https://github.com/FasterXML/jackson-databind/commits/jackson-databind-2.4.0-rc1?after=75b97b8519f0d50c62523ad85170d80a197a2c86+174&branch=jackson-databind-2.4.0-rc1&qualified_name=refs%2Ftags%2Fjackson-databind-2.4.0-rc1
https://github.com/FasterXML/jackson-databind/compare/jackson-databind-2.13.4.1...jackson-databind-2.13.4.2
https://github.com/FasterXML/jackson-databind/issues/3590
https://github.com/FasterXML/jackson-databind/issues/3627
https://github.com/advisories/GHSA-jjjh-jjxp-wpff
https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html
https://nvd.nist.gov/vuln/detail/CVE-2022-42003
https://security.gentoo.org/glsa/202210-21
https://security.netapp.com/advisory/ntap-20221124-0004
https://security.netapp.com/advisory/ntap-20221124-0004/
https://www.cve.org/CVERecord?id=CVE-2022-42003
https://www.debian.org/security/2022/dsa-5283
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2022-42004 |
HIGH |
2.10.1 |
2.12.7.1, 2.13.4 |
https://access.redhat.com/security/cve/CVE-2022-42004
https://advisory.echohq.com/cve/CVE-2022-42004
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50490
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/063183589218fec19a9293ed2f17ec53ea80ba88
https://github.com/FasterXML/jackson-databind/commit/063183589218fec19a9293ed2f17ec53ea80ba88%20%28jackson-databind-2.13.4%29
https://github.com/FasterXML/jackson-databind/commit/0e37a39502439ecbaa1a5b5188387c01bf7f7fa1
https://github.com/FasterXML/jackson-databind/commit/35de19e7144c4df8ab178b800ba86e80c3d84252
https://github.com/FasterXML/jackson-databind/commit/cd090979b7ea78c75e4de8a4aed04f7e9fa8deea
https://github.com/FasterXML/jackson-databind/issues/3582
https://github.com/advisories/GHSA-rgv9-q543-rqg4
https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html
https://nvd.nist.gov/vuln/detail/CVE-2022-42004
https://security.gentoo.org/glsa/202210-21
https://security.netapp.com/advisory/ntap-20221118-0008
https://security.netapp.com/advisory/ntap-20221118-0008/
https://www.cve.org/CVERecord?id=CVE-2022-42004
https://www.debian.org/security/2022/dsa-5283
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54512 |
HIGH |
2.10.1 |
2.18.8, 3.1.4, 2.21.4 |
https://access.redhat.com/errata/RHSA-2026:40895
https://access.redhat.com/security/cve/CVE-2026-54512
https://advisory.echohq.com/cve/CVE-2026-54512
https://bugzilla.redhat.com/2492010
https://bugzilla.redhat.com/2492015
https://bugzilla.redhat.com/show_bug.cgi?id=2492010
https://bugzilla.redhat.com/show_bug.cgi?id=2492015
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54512
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54513
https://errata.almalinux.org/9/ALSA-2026-40895.html
https://errata.rockylinux.org/RLSA-2026:40895
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5
https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5%20%28jackson-databind-2.18.8%29
https://github.com/FasterXML/jackson-databind/issues/5988
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm
https://linux.oracle.com/cve/CVE-2026-54512.html
https://linux.oracle.com/errata/ELSA-2026-43400.html
https://nvd.nist.gov/vuln/detail/CVE-2026-54512
https://www.cve.org/CVERecord?id=CVE-2026-54512
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54513 |
HIGH |
2.10.1 |
2.18.8, 2.21.4, 3.1.4 |
https://access.redhat.com/errata/RHSA-2026:36839
https://access.redhat.com/errata/RHSA-2026:40895
https://access.redhat.com/errata/RHSA-2026:41951
https://access.redhat.com/errata/RHSA-2026:43218
https://access.redhat.com/errata/RHSA-2026:43400
https://access.redhat.com/errata/RHSA-2026:44061
https://access.redhat.com/errata/RHSA-2026:44062
https://access.redhat.com/errata/RHSA-2026:44063
https://access.redhat.com/errata/RHSA-2026:44064
https://access.redhat.com/errata/RHSA-2026:44065
https://access.redhat.com/errata/RHSA-2026:44066
https://access.redhat.com/errata/RHSA-2026:44271
https://access.redhat.com/errata/RHSA-2026:48095
https://access.redhat.com/errata/RHSA-2026:48151
https://access.redhat.com/errata/RHSA-2026:50846
https://access.redhat.com/errata/RHSA-2026:50847
https://access.redhat.com/errata/RHSA-2026:50848
https://access.redhat.com/errata/RHSA-2026:50849
https://access.redhat.com/errata/RHSA-2026:54435
https://access.redhat.com/errata/RHSA-2026:54622
https://access.redhat.com/errata/RHSA-2026:62260
https://access.redhat.com/errata/RHSA-2026:66488
https://access.redhat.com/errata/RHSA-2026:66545
https://access.redhat.com/security/cve/CVE-2026-54513
https://advisory.echohq.com/cve/CVE-2026-54513
https://bugzilla.redhat.com/2492010
https://bugzilla.redhat.com/2492015
https://bugzilla.redhat.com/show_bug.cgi?id=2492010
https://bugzilla.redhat.com/show_bug.cgi?id=2492015
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54512
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54513
https://errata.almalinux.org/9/ALSA-2026-40895.html
https://errata.rockylinux.org/RLSA-2026:40895
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5
https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e
https://github.com/FasterXML/jackson-databind/issues/5981
https://github.com/FasterXML/jackson-databind/issues/5983
https://github.com/FasterXML/jackson-databind/pull/5984
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f
https://linux.oracle.com/cve/CVE-2026-54513.html
https://linux.oracle.com/errata/ELSA-2026-43400.html
https://nvd.nist.gov/vuln/detail/CVE-2026-54513
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54513.json
https://www.cve.org/CVERecord?id=CVE-2026-54513
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-91776 |
HIGH |
2.10.1 |
2.18.11, 2.21.7, 2.22.3 |
https://access.redhat.com/security/cve/CVE-2026-91776
https://advisory.echohq.com/cve/CVE-2026-91776
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/2870d1d6dc1b7e1c07ee11dd5b04ab71cddbb577
https://github.com/FasterXML/jackson-databind/issues/6203
https://github.com/FasterXML/jackson-databind/pull/6203
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54
https://nvd.nist.gov/vuln/detail/CVE-2026-91776
https://www.cve.org/CVERecord?id=CVE-2026-91776
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-91777 |
HIGH |
2.10.1 |
2.21.7, 2.18.11, 2.22.3 |
https://access.redhat.com/errata/RHSA-2026:85231
https://access.redhat.com/security/cve/CVE-2026-91777
https://advisory.echohq.com/cve/CVE-2026-91777
https://bugzilla.redhat.com/2539085
https://bugzilla.redhat.com/show_bug.cgi?id=2539085
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91777
https://errata.almalinux.org/9/ALSA-2026-85231.html
https://errata.rockylinux.org/RLSA-2026:85231
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/37ad9b81712cbb9fb62c2d2c1813593252a24b67
https://github.com/FasterXML/jackson-databind/issues/6204
https://github.com/FasterXML/jackson-databind/pull/6204
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24
https://linux.oracle.com/cve/CVE-2026-91777.html
https://linux.oracle.com/errata/ELSA-2026-85231.html
https://nvd.nist.gov/vuln/detail/CVE-2026-91777
https://www.cve.org/CVERecord?id=CVE-2026-91777
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-19032 |
MEDIUM |
2.10.1 |
2.18.10, 2.21.6, 2.22.2 |
https://access.redhat.com/security/cve/CVE-2026-19032
https://advisory.echohq.com/cve/CVE-2026-19032
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551
https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166
https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d
https://github.com/FasterXML/jackson-databind/pull/6129
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf
https://nvd.nist.gov/vuln/detail/CVE-2026-19032
https://www.cve.org/CVERecord?id=CVE-2026-19032
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-50193 |
MEDIUM |
2.10.1 |
2.14.0 |
https://access.redhat.com/security/cve/CVE-2026-50193
https://advisory.echohq.com/cve/CVE-2026-50193
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/a1fa4ae4ecf5cee16da465985f135f3e81816f8c
https://github.com/FasterXML/jackson-databind/issues/3447
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3wrr-7qpf-2prh
https://nvd.nist.gov/vuln/detail/CVE-2026-50193
https://www.cve.org/CVERecord?id=CVE-2026-50193
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54514 |
MEDIUM |
2.10.1 |
2.18.8, 2.21.4, 3.1.4 |
https://access.redhat.com/security/cve/CVE-2026-54514
https://advisory.echohq.com/cve/CVE-2026-54514
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/1f5a1037b1e9e05920e755cb35f198bcd46667e4
https://github.com/FasterXML/jackson-databind/pull/5951
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-hgj6-7826-r7m5
https://nvd.nist.gov/vuln/detail/CVE-2026-54514
https://www.cve.org/CVERecord?id=CVE-2026-54514
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54515 |
MEDIUM |
2.10.1 |
3.1.4, 2.18.9, 2.21.5, 2.22.1 |
https://access.redhat.com/security/cve/CVE-2026-54515
https://advisory.echohq.com/cve/CVE-2026-54515
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/0e1b0b211f7a53baa62ba2f4c9bd006c7bf4d5fa
https://github.com/FasterXML/jackson-databind/issues/5962
https://github.com/FasterXML/jackson-databind/issues/5964
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5jmj-h7xm-6q6v
https://nvd.nist.gov/vuln/detail/CVE-2026-54515
https://www.cve.org/CVERecord?id=CVE-2026-54515
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-59889 |
MEDIUM |
2.10.1 |
2.21.5, 2.18.9, 2.22.1 |
https://access.redhat.com/security/cve/CVE-2026-59889
https://advisory.echohq.com/cve/CVE-2026-59889
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/d627a8a86fcb062429282f79f3f256f181ed2c7b
https://github.com/FasterXML/jackson-databind/issues/6060
https://github.com/FasterXML/jackson-databind/pull/6056
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5gvw-p9qm-jgwh
https://nvd.nist.gov/vuln/detail/CVE-2026-59889
https://www.cve.org/CVERecord?id=CVE-2026-59889
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-77310 |
MEDIUM |
2.10.1 |
2.18.9, 2.21.5, 2.22.1 |
https://access.redhat.com/security/cve/CVE-2026-77310
https://advisory.echohq.com/cve/CVE-2026-77310
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/2fc7bd9057dd051d7dea0e5fcad89822d0fa5ebd
https://github.com/FasterXML/jackson-databind/pull/6058
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.9
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.5
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.1
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.5
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.1
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-vvgp-rfg2-7rr6
https://nvd.nist.gov/vuln/detail/CVE-2026-77310
https://www.cve.org/CVERecord?id=CVE-2026-77310
|
| com.fasterxml.woodstox:woodstox-core |
CVE-2022-40152 |
MEDIUM |
6.0.3 |
6.4.0, 5.4.0 |
https://access.redhat.com/security/cve/CVE-2022-40152
https://advisory.echohq.com/cve/CVE-2022-40152
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47434
https://github.com/FasterXML/woodstox
https://github.com/FasterXML/woodstox/issues/157
https://github.com/FasterXML/woodstox/issues/160
https://github.com/FasterXML/woodstox/pull/159
https://github.com/advisories/GHSA-3f7h-mf4q-vrm4
https://github.com/x-stream/xstream/issues/304
https://nvd.nist.gov/vuln/detail/CVE-2022-40152
https://www.cve.org/CVERecord?id=CVE-2022-40152
|
| com.google.code.gson:gson |
CVE-2022-25647 |
HIGH |
2.8.2 |
2.8.9 |
https://access.redhat.com/security/cve/CVE-2022-25647
https://github.com/google/gson
https://github.com/google/gson/pull/1991
https://github.com/google/gson/pull/1991/commits
https://linux.oracle.com/cve/CVE-2022-25647.html
https://linux.oracle.com/errata/ELSA-2022-9656.html
https://lists.debian.org/debian-lts-announce/2022/05/msg00015.html
https://lists.debian.org/debian-lts-announce/2022/09/msg00009.html
https://nvd.nist.gov/vuln/detail/CVE-2022-25647
https://security.netapp.com/advisory/ntap-20220901-0009
https://security.netapp.com/advisory/ntap-20220901-0009/
https://snyk.io/vuln/SNYK-JAVA-COMGOOGLECODEGSON-1730327
https://ubuntu.com/security/notices/USN-6692-1
https://www.cve.org/CVERecord?id=CVE-2022-25647
https://www.debian.org/security/2022/dsa-5227
https://www.oracle.com/security-alerts/cpujul2022.html
|
| com.google.guava:guava |
CVE-2026-102554 |
HIGH |
25.0-jre |
33.7.2 |
https://access.redhat.com/security/cve/CVE-2026-102554
https://advisory.echohq.com/cve/CVE-2026-102554
https://github.com/advisories/GHSA-xxph-c9ww-hj94
https://github.com/google/guava
https://github.com/google/guava/commit/b931fe9d6d5cf00bc55714ad3308d086f71850fe
https://github.com/google/guava/releases/tag/v33.7.2
https://github.com/google/guava/security/advisories/GHSA-xxph-c9ww-hj94
https://nvd.nist.gov/vuln/detail/CVE-2026-102554
https://www.cve.org/CVERecord?id=CVE-2026-102554
|
| com.google.guava:guava |
CVE-2026-102554 |
HIGH |
25.0-jre |
33.7.2 |
https://access.redhat.com/security/cve/CVE-2026-102554
https://advisory.echohq.com/cve/CVE-2026-102554
https://github.com/advisories/GHSA-xxph-c9ww-hj94
https://github.com/google/guava
https://github.com/google/guava/commit/b931fe9d6d5cf00bc55714ad3308d086f71850fe
https://github.com/google/guava/releases/tag/v33.7.2
https://github.com/google/guava/security/advisories/GHSA-xxph-c9ww-hj94
https://nvd.nist.gov/vuln/detail/CVE-2026-102554
https://www.cve.org/CVERecord?id=CVE-2026-102554
|
| com.google.guava:guava |
CVE-2023-2976 |
MEDIUM |
25.0-jre |
32.0.0-android |
https://access.redhat.com/security/cve/CVE-2023-2976
https://advisory.echohq.com/cve/CVE-2023-2976
https://github.com/advisories/GHSA-7g45-4rm6-3mm3
https://github.com/google/guava
https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284
https://github.com/google/guava/issues/2575
https://github.com/google/guava/issues/6532
https://github.com/google/guava/releases/tag/v32.0.0
https://nvd.nist.gov/vuln/detail/CVE-2023-2976
https://security.netapp.com/advisory/ntap-20230818-0008
https://security.netapp.com/advisory/ntap-20230818-0008/
https://security.netapp.com/advisory/ntap-20241108-0002
https://security.netapp.com/advisory/ntap-20241108-0002/
https://www.cve.org/CVERecord?id=CVE-2023-2976
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01006.html
|
| com.google.guava:guava |
CVE-2023-2976 |
MEDIUM |
25.0-jre |
32.0.0-android |
https://access.redhat.com/security/cve/CVE-2023-2976
https://advisory.echohq.com/cve/CVE-2023-2976
https://github.com/advisories/GHSA-7g45-4rm6-3mm3
https://github.com/google/guava
https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284
https://github.com/google/guava/issues/2575
https://github.com/google/guava/issues/6532
https://github.com/google/guava/releases/tag/v32.0.0
https://nvd.nist.gov/vuln/detail/CVE-2023-2976
https://security.netapp.com/advisory/ntap-20230818-0008
https://security.netapp.com/advisory/ntap-20230818-0008/
https://security.netapp.com/advisory/ntap-20241108-0002
https://security.netapp.com/advisory/ntap-20241108-0002/
https://www.cve.org/CVERecord?id=CVE-2023-2976
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01006.html
|
| com.google.guava:guava |
CVE-2020-8908 |
LOW |
25.0-jre |
32.0.0-android |
https://access.redhat.com/security/cve/CVE-2020-8908
https://advisory.echohq.com/cve/CVE-2020-8908
https://github.com/advisories/GHSA-5mg8-w23w-74h3
https://github.com/google/guava
https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284
https://github.com/google/guava/commit/fec0dbc4634006a6162cfd4d0d09c962073ddf40
https://github.com/google/guava/issues/2575
https://github.com/google/guava/issues/4011
https://github.com/google/guava/issues/4011#issuecomment-1573923586
https://github.com/google/guava/issues/4011#issuecomment-1578991974
https://github.com/google/guava/releases/tag/v32.0.0
https://lists.apache.org/thread.html/r007add131977f4f576c232b25e024249a3d16f66aad14a4b52819d21@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r037fed1d0ebde50c9caf8d99815db3093c344c3f651c5a49a09824ce@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r07ed3e4417ad043a27bee7bb33322e9bfc7d7e6d1719b8e3dfd95c14@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r161b87f8037bbaff400194a63cd2016c9a69f5949f06dcc79beeab54@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r215b3d50f56faeb2f9383505f3e62faa9f549bb23e8a9848b78a968e@%3Ccommits.ws.apache.org%3E
https://lists.apache.org/thread.html/r294be9d31c0312d2c0837087204b5d4bf49d0552890e6eec716fa6a6@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r2fe45d96eea8434b91592ca08109118f6308d60f6d0e21d52438cfb4@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r3c3b33ee5bef0c67391d27a97cbfd89d44f328cf072b601b58d4e748@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r3dd8881de891598d622227e9840dd7c2ef1d08abbb49e9690c7ae1bc@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/r4776f62dfae4a0006658542f43034a7fc199350e35a66d4e18164ee6@%3Ccommits.cxf.apache.org%3E
https://lists.apache.org/thread.html/r49549a8322f62cd3acfa4490d25bfba0be04f3f9ff4d14fe36199d27@%3Cyarn-dev.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r58a8775205ab1839dba43054b09a9ab3b25b423a4170b2413c4067ac@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r5b3d93dfdfb7708e796e8762ab40edbde8ff8add48aba53e5ea26f44@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/r5d61b98ceb7bba939a651de5900dbd67be3817db6bfcc41c6e04e199@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r6874dfe26eefc41b7c9a5e4a0487846fc4accf8c78ff948b24a1104a@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r68d86f4b06c808204f62bcb254fcb5b0432528ee8d37a07ef4bc8222@%3Ccommits.ws.apache.org%3E
https://lists.apache.org/thread.html/r79e47ed555bdb1180e528420a7a2bb898541367a29a3bc6bbf0baf2c@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r7b0e81d8367264d6cad98766a469d64d11248eb654417809bfdacf09@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r841c5e14e1b55281523ebcde661ece00b38a0569e00ef5e12bd5f6ba@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/ra7ab308481ee729f998691e8e3e02e93b1dedfc98f6b1cd3d86923b3@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rb2364f4cf4d274eab5a7ecfaf64bf575cedf8b0173551997c749d322@%3Cgitbox.hive.apache.org%3E
https://lists.apache.org/thread.html/rb8c0f1b7589864396690fe42a91a71dea9412e86eec66dc85bbacaaf@%3Ccommits.cxf.apache.org%3E
https://lists.apache.org/thread.html/rbc7642b9800249553f13457e46b813bea1aec99d2bc9106510e00ff3@%3Ctorque-dev.db.apache.org%3E
https://lists.apache.org/thread.html/rc2dbc4633a6eea1fcbce6831876cfa17b73759a98c65326d1896cb1a@%3Ctorque-dev.db.apache.org%3E
https://lists.apache.org/thread.html/rc607bc52f3507b8b9c28c6a747c3122f51ac24afe80af2a670785b97@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/rcafc3a637d82bdc9a24036b2ddcad1e519dd0e6f848fcc3d606fd78f@%3Cdev.hive.apache.org%3E
https://lists.apache.org/thread.html/rd01f5ff0164c468ec7abc96ff7646cea3cce6378da2e4aa29c6bcb95@%3Cgithub.arrow.apache.org%3E
https://lists.apache.org/thread.html/rd2704306ec729ccac726e50339b8a8f079515cc29ccb77713b16e7c5@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/rd5d58088812cf8e677d99b07f73c654014c524c94e7fedbdee047604@%3Ctorque-dev.db.apache.org%3E
https://lists.apache.org/thread.html/rd7e12d56d49d73e2b8549694974b07561b79b05455f7f781954231bf@%3Cdev.pig.apache.org%3E
https://lists.apache.org/thread.html/re120f6b3d2f8222121080342c5801fdafca2f5188ceeb3b49c8a1d27@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/reebbd63c25bc1a946caa419cec2be78079f8449d1af48e52d47c9e85@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/rf00b688ffa620c990597f829ff85fdbba8bf73ee7bfb34783e1f0d4e@%3Cyarn-dev.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rf9f0fa84b8ae1a285f0210bafec6de2a9eba083007d04640b82aa625@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/rfc27e2727a20a574f39273e0432aa97486a332f9b3068f6ac1346594@%3Cdev.myfaces.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2020-8908
https://security.netapp.com/advisory/ntap-20220210-0003
https://security.netapp.com/advisory/ntap-20220210-0003/
https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEGUAVA-1015415
https://www.cve.org/CVERecord?id=CVE-2020-8908
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| com.google.guava:guava |
CVE-2020-8908 |
LOW |
25.0-jre |
32.0.0-android |
https://access.redhat.com/security/cve/CVE-2020-8908
https://advisory.echohq.com/cve/CVE-2020-8908
https://github.com/advisories/GHSA-5mg8-w23w-74h3
https://github.com/google/guava
https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284
https://github.com/google/guava/commit/fec0dbc4634006a6162cfd4d0d09c962073ddf40
https://github.com/google/guava/issues/2575
https://github.com/google/guava/issues/4011
https://github.com/google/guava/issues/4011#issuecomment-1573923586
https://github.com/google/guava/issues/4011#issuecomment-1578991974
https://github.com/google/guava/releases/tag/v32.0.0
https://lists.apache.org/thread.html/r007add131977f4f576c232b25e024249a3d16f66aad14a4b52819d21@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r037fed1d0ebde50c9caf8d99815db3093c344c3f651c5a49a09824ce@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r07ed3e4417ad043a27bee7bb33322e9bfc7d7e6d1719b8e3dfd95c14@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r161b87f8037bbaff400194a63cd2016c9a69f5949f06dcc79beeab54@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r215b3d50f56faeb2f9383505f3e62faa9f549bb23e8a9848b78a968e@%3Ccommits.ws.apache.org%3E
https://lists.apache.org/thread.html/r294be9d31c0312d2c0837087204b5d4bf49d0552890e6eec716fa6a6@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r2fe45d96eea8434b91592ca08109118f6308d60f6d0e21d52438cfb4@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r3c3b33ee5bef0c67391d27a97cbfd89d44f328cf072b601b58d4e748@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r3dd8881de891598d622227e9840dd7c2ef1d08abbb49e9690c7ae1bc@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/r4776f62dfae4a0006658542f43034a7fc199350e35a66d4e18164ee6@%3Ccommits.cxf.apache.org%3E
https://lists.apache.org/thread.html/r49549a8322f62cd3acfa4490d25bfba0be04f3f9ff4d14fe36199d27@%3Cyarn-dev.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r58a8775205ab1839dba43054b09a9ab3b25b423a4170b2413c4067ac@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r5b3d93dfdfb7708e796e8762ab40edbde8ff8add48aba53e5ea26f44@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/r5d61b98ceb7bba939a651de5900dbd67be3817db6bfcc41c6e04e199@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r6874dfe26eefc41b7c9a5e4a0487846fc4accf8c78ff948b24a1104a@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r68d86f4b06c808204f62bcb254fcb5b0432528ee8d37a07ef4bc8222@%3Ccommits.ws.apache.org%3E
https://lists.apache.org/thread.html/r79e47ed555bdb1180e528420a7a2bb898541367a29a3bc6bbf0baf2c@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r7b0e81d8367264d6cad98766a469d64d11248eb654417809bfdacf09@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r841c5e14e1b55281523ebcde661ece00b38a0569e00ef5e12bd5f6ba@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/ra7ab308481ee729f998691e8e3e02e93b1dedfc98f6b1cd3d86923b3@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rb2364f4cf4d274eab5a7ecfaf64bf575cedf8b0173551997c749d322@%3Cgitbox.hive.apache.org%3E
https://lists.apache.org/thread.html/rb8c0f1b7589864396690fe42a91a71dea9412e86eec66dc85bbacaaf@%3Ccommits.cxf.apache.org%3E
https://lists.apache.org/thread.html/rbc7642b9800249553f13457e46b813bea1aec99d2bc9106510e00ff3@%3Ctorque-dev.db.apache.org%3E
https://lists.apache.org/thread.html/rc2dbc4633a6eea1fcbce6831876cfa17b73759a98c65326d1896cb1a@%3Ctorque-dev.db.apache.org%3E
https://lists.apache.org/thread.html/rc607bc52f3507b8b9c28c6a747c3122f51ac24afe80af2a670785b97@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/rcafc3a637d82bdc9a24036b2ddcad1e519dd0e6f848fcc3d606fd78f@%3Cdev.hive.apache.org%3E
https://lists.apache.org/thread.html/rd01f5ff0164c468ec7abc96ff7646cea3cce6378da2e4aa29c6bcb95@%3Cgithub.arrow.apache.org%3E
https://lists.apache.org/thread.html/rd2704306ec729ccac726e50339b8a8f079515cc29ccb77713b16e7c5@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/rd5d58088812cf8e677d99b07f73c654014c524c94e7fedbdee047604@%3Ctorque-dev.db.apache.org%3E
https://lists.apache.org/thread.html/rd7e12d56d49d73e2b8549694974b07561b79b05455f7f781954231bf@%3Cdev.pig.apache.org%3E
https://lists.apache.org/thread.html/re120f6b3d2f8222121080342c5801fdafca2f5188ceeb3b49c8a1d27@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/reebbd63c25bc1a946caa419cec2be78079f8449d1af48e52d47c9e85@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/rf00b688ffa620c990597f829ff85fdbba8bf73ee7bfb34783e1f0d4e@%3Cyarn-dev.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rf9f0fa84b8ae1a285f0210bafec6de2a9eba083007d04640b82aa625@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/rfc27e2727a20a574f39273e0432aa97486a332f9b3068f6ac1346594@%3Cdev.myfaces.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2020-8908
https://security.netapp.com/advisory/ntap-20220210-0003
https://security.netapp.com/advisory/ntap-20220210-0003/
https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEGUAVA-1015415
https://www.cve.org/CVERecord?id=CVE-2020-8908
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| com.h2database:h2 |
CVE-2021-42392 |
CRITICAL |
1.4.197 |
2.0.206 |
https://access.redhat.com/security/cve/CVE-2021-42392
https://github.com/h2database/h2database
https://github.com/h2database/h2database/releases/tag/version-2.0.206
https://github.com/h2database/h2database/security/advisories/GHSA-h376-j262-vhq6
https://jfrog.com/blog/the-jndi-strikes-back-unauthenticated-rce-in-h2-database-console
https://jfrog.com/blog/the-jndi-strikes-back-unauthenticated-rce-in-h2-database-console/
https://lists.debian.org/debian-lts-announce/2022/02/msg00017.html
https://nvd.nist.gov/vuln/detail/CVE-2021-42392
https://security.netapp.com/advisory/ntap-20220119-0001
https://security.netapp.com/advisory/ntap-20220119-0001/
https://ubuntu.com/security/notices/USN-5365-1
https://ubuntu.com/security/notices/USN-6834-1
https://www.cve.org/CVERecord?id=CVE-2021-42392
https://www.debian.org/security/2022/dsa-5076
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.secpod.com/blog/log4shell-critical-remote-code-execution-vulnerability-in-h2database-console
https://www.secpod.com/blog/log4shell-critical-remote-code-execution-vulnerability-in-h2database-console/
|
| com.h2database:h2 |
CVE-2022-23221 |
CRITICAL |
1.4.197 |
2.1.210 |
http://packetstormsecurity.com/files/165676/H2-Database-Console-Remote-Code-Execution.html
http://seclists.org/fulldisclosure/2022/Jan/39
https://access.redhat.com/security/cve/CVE-2022-23221
https://github.com/advisories/GHSA-45hx-wfhj-473x
https://github.com/h2database/h2database
https://github.com/h2database/h2database/releases/tag/version-2.1.210
https://github.com/h2database/h2database/security/advisories
https://lists.debian.org/debian-lts-announce/2022/02/msg00017.html
https://nvd.nist.gov/vuln/detail/CVE-2022-23221
https://security.netapp.com/advisory/ntap-20230818-0011
https://security.netapp.com/advisory/ntap-20230818-0011/
https://twitter.com/d0nkey_man/status/1483824727936450564
https://ubuntu.com/security/notices/USN-5365-1
https://ubuntu.com/security/notices/USN-6834-1
https://www.cve.org/CVERecord?id=CVE-2022-23221
https://www.debian.org/security/2022/dsa-5076
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
|
| com.squareup.okhttp3:okhttp |
CVE-2021-0341 |
HIGH |
3.9.0 |
4.9.2 |
https://access.redhat.com/security/cve/CVE-2021-0341
https://advisory.echohq.com/cve/CVE-2021-0341
https://github.com/advisories/GHSA-3cqm-mf7h-prrj
https://github.com/square/okhttp
https://github.com/square/okhttp/commit/f574ea2f5259d9040f264ddeb582fb1ce563f10c
https://github.com/square/okhttp/issues/6724
https://github.com/square/okhttp/pull/6741
https://nvd.nist.gov/vuln/detail/CVE-2021-0341
https://source.android.com/security/bulletin/2021-02-01
https://www.cve.org/CVERecord?id=CVE-2021-0341
|
| com.squareup.okio:okio |
CVE-2023-3635 |
MEDIUM |
1.13.0 |
3.4.0, 1.17.6 |
https://access.redhat.com/security/cve/CVE-2023-3635
https://advisory.echohq.com/cve/CVE-2023-3635
https://github.com/advisories/GHSA-w33c-445m-f8w7
https://github.com/square/okio
https://github.com/square/okio/blob/master/CHANGELOG.md#version-1176
https://github.com/square/okio/commit/81bce1a30af244550b0324597720e4799281da7b
https://github.com/square/okio/commit/b4fa875dc24950680c386e4b1c593660ce4f7839
https://github.com/square/okio/pull/1280
https://github.com/square/okio/pull/1334
https://nvd.nist.gov/vuln/detail/CVE-2023-3635
https://research.jfrog.com/vulnerabilities/okio-gzip-source-unhandled-exception-dos-xray-523195
https://research.jfrog.com/vulnerabilities/okio-gzip-source-unhandled-exception-dos-xray-523195/
https://www.cve.org/CVERecord?id=CVE-2023-3635
|
| com.sun.mail:jakarta.mail |
CVE-2025-7962 |
MEDIUM |
1.6.4 |
1.6.8, 2.0.2 |
http://www.openwall.com/lists/oss-security/2025/09/03/4
https://access.redhat.com/security/cve/CVE-2025-7962
https://advisory.echohq.com/cve/CVE-2025-7962
https://github.com/advisories/GHSA-9342-92gg-6v29
https://github.com/eclipse-ee4j/angus-mail
https://github.com/eclipse-ee4j/angus-mail/commit/269099b652a0a5c2fa140f1296a18f0fbbea0d44
https://github.com/jakartaee/mail-api/issues/765
https://github.com/jakartaee/mail-api/pull/760
https://gitlab.eclipse.org/security/cve-assignement/-/issues/67
https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/290
https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/290#note_5320539
https://nvd.nist.gov/vuln/detail/CVE-2025-7962
https://www.cve.org/CVERecord?id=CVE-2025-7962
|
| commons-beanutils:commons-beanutils |
CVE-2025-48734 |
HIGH |
1.9.4 |
1.11.0 |
http://www.openwall.com/lists/oss-security/2025/05/28/6
https://access.redhat.com/errata/RHSA-2025:9114
https://access.redhat.com/errata/RHSA-2025:9318
https://access.redhat.com/security/cve/CVE-2025-48734
https://advisory.echohq.com/cve/CVE-2025-48734
https://bugzilla.redhat.com/2368956
https://bugzilla.redhat.com/show_bug.cgi?id=1767483
https://bugzilla.redhat.com/show_bug.cgi?id=2368956
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10086
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48734
https://dlcdn.apache.org/commons/beanutils/RELEASE-NOTES.txt
https://errata.almalinux.org/9/ALSA-2025-9114.html
https://errata.rockylinux.org/RLSA-2025:9318
https://github.com/advisories/GHSA-wxr5-93ph-8wr9
https://github.com/apache/commons-beanutils
https://github.com/apache/commons-beanutils/commit/28ad955a1613ed5885870cc7da52093c1ce739dc
https://github.com/apache/commons-beanutils/commit/bd20740da25b69552ddef8523beec0837297eaf9
https://linux.oracle.com/cve/CVE-2025-48734.html
https://linux.oracle.com/errata/ELSA-2025-9318.html
https://lists.apache.org/thread/s0hb3jkfj5f3ryx6c57zqtfohb0of1g9
https://lists.debian.org/debian-lts-announce/2025/06/msg00027.html
https://nvd.nist.gov/vuln/detail/CVE-2025-48734
https://ubuntu.com/security/notices/USN-8322-1
https://www.cve.org/CVERecord?id=CVE-2025-48734
https://www.openwall.com/lists/oss-security/2025/05/28/6
|
| commons-beanutils:commons-beanutils |
CVE-2025-48734 |
HIGH |
1.9.4 |
1.11.0 |
http://www.openwall.com/lists/oss-security/2025/05/28/6
https://access.redhat.com/errata/RHSA-2025:9114
https://access.redhat.com/errata/RHSA-2025:9318
https://access.redhat.com/security/cve/CVE-2025-48734
https://advisory.echohq.com/cve/CVE-2025-48734
https://bugzilla.redhat.com/2368956
https://bugzilla.redhat.com/show_bug.cgi?id=1767483
https://bugzilla.redhat.com/show_bug.cgi?id=2368956
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10086
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48734
https://dlcdn.apache.org/commons/beanutils/RELEASE-NOTES.txt
https://errata.almalinux.org/9/ALSA-2025-9114.html
https://errata.rockylinux.org/RLSA-2025:9318
https://github.com/advisories/GHSA-wxr5-93ph-8wr9
https://github.com/apache/commons-beanutils
https://github.com/apache/commons-beanutils/commit/28ad955a1613ed5885870cc7da52093c1ce739dc
https://github.com/apache/commons-beanutils/commit/bd20740da25b69552ddef8523beec0837297eaf9
https://linux.oracle.com/cve/CVE-2025-48734.html
https://linux.oracle.com/errata/ELSA-2025-9318.html
https://lists.apache.org/thread/s0hb3jkfj5f3ryx6c57zqtfohb0of1g9
https://lists.debian.org/debian-lts-announce/2025/06/msg00027.html
https://nvd.nist.gov/vuln/detail/CVE-2025-48734
https://ubuntu.com/security/notices/USN-8322-1
https://www.cve.org/CVERecord?id=CVE-2025-48734
https://www.openwall.com/lists/oss-security/2025/05/28/6
|
| commons-io:commons-io |
CVE-2024-47554 |
HIGH |
2.5 |
2.14.0 |
http://www.openwall.com/lists/oss-security/2024/10/03/2
https://access.redhat.com/security/cve/CVE-2024-47554
https://advisory.echohq.com/cve/CVE-2024-47554
https://github.com/advisories/GHSA-78wr-2p64-hpwj
https://github.com/apache/commons-io
https://lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1
https://nvd.nist.gov/vuln/detail/CVE-2024-47554
https://security.netapp.com/advisory/ntap-20250131-0010
https://security.netapp.com/advisory/ntap-20250131-0010/
https://ubuntu.com/security/notices/USN-8191-1
https://www.cve.org/CVERecord?id=CVE-2024-47554
|
| commons-io:commons-io |
CVE-2021-29425 |
MEDIUM |
2.5 |
2.7 |
https://access.redhat.com/security/cve/CVE-2021-29425
https://advisory.echohq.com/cve/CVE-2021-29425
https://arxiv.org/pdf/2306.05534.pdf
https://github.com/advisories/GHSA-gwrp-pvrq-jmwv
https://github.com/jensdietrich/xshady-release/tree/main/CVE-2021-29425
https://issues.apache.org/jira/browse/IO-556
https://lists.apache.org/thread.html/r01b4a1fcdf3311c936ce33d75a9398b6c255f00c1a2f312ac21effe1@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r0bfa8f7921abdfae788b1f076a12f73a92c93cc0a6e1083bce0027c5@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r0d73e2071d1f1afe1a15da14c5b6feb2cf17e3871168d5a3c8451436@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r1c2f4683c35696cf6f863e3c107e37ec41305b1930dd40c17260de71@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r20416f39ca7f7344e7d76fe4d7063bb1d91ad106926626e7e83fb346@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r2345b49dbffa8a5c3c589c082fe39228a2c1d14f11b96c523da701db@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe@%3Cusers.kafka.apache.org%3E
https://lists.apache.org/thread.html/r27b1eedda37468256c4bb768fde1e8b79b37ec975cbbfd0d65a7ac34@%3Cdev.myfaces.apache.org%3E
https://lists.apache.org/thread.html/r2bc986a070457daca457a54fe71ee09d2584c24dc262336ca32b6a19@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r2df50af2641d38f432ef025cd2ba5858215cc0cf3fc10396a674ad2e@%3Cpluto-scm.portals.apache.org%3E
https://lists.apache.org/thread.html/r345330b7858304938b7b8029d02537a116d75265a598c98fa333504a@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r4050f9f6b42ebfa47a98cbdee4aabed4bb5fb8093db7dbb88faceba2@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r462db908acc1e37c455e11b1a25992b81efd18e641e7e0ceb1b6e046@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r477c285126ada5c3b47946bb702cb222ac4e7fd3100c8549bdd6d3b2@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r47ab6f68cbba8e730f42c4ea752f3a44eb95fb09064070f2476bb401@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r5149f78be265be69d34eacb4e4b0fc7c9c697bcdfa91a1c1658d717b@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r523a6ffad58f71c4f3761e3cee72df878e48cdc89ebdce933be1475c@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r808be7d93b17a7055c1981a8453ae5f0d0fce5855407793c5d0ffffa@%3Cuser.commons.apache.org%3E
https://lists.apache.org/thread.html/r8569a41d565ca880a4dee0e645dad1cd17ab4a92e68055ad9ebb7375@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r86528f4b7d222aed7891e7ac03d69a0db2a2dfa17b86ac3470d7f374@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r873d5ddafc0a68fd999725e559776dc4971d1ab39c0f5cc81bd9bc04@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r8bfc7235e6b39d90e6f446325a5a44c3e9e50da18860fdabcee23e29@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r8efcbabde973ea72f5e0933adc48ef1425db5cde850bf641b3993f31@%3Cdev.commons.apache.org%3E
https://lists.apache.org/thread.html/r92ea904f4bae190b03bd42a4355ce3c2fbe8f36ab673e03f6ca3f9fa@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/ra8ef65aedc086d2d3d21492b4c08ae0eb8a3a42cc52e29ba1bc009d8@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/raa053846cae9d497606027816ae87b4e002b2e0eb66cb0dee710e1f5@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/rad4ae544747df32ccd58fff5a86cd556640396aeb161aa71dd3d192a@%3Cuser.commons.apache.org%3E
https://lists.apache.org/thread.html/rbebd3e19651baa7a4a5503a9901c95989df9d40602c8e35cb05d3eb5@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/rc10fa20ef4d13cbf6ebe0b06b5edb95466a1424a9b7673074ed03260@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rc2dd3204260e9227a67253ef68b6f1599446005bfa0e1ddce4573a80@%3Cpluto-dev.portals.apache.org%3E
https://lists.apache.org/thread.html/rc359823b5500e9a9a2572678ddb8e01d3505a7ffcadfa8d13b8780ab@%3Cuser.commons.apache.org%3E
https://lists.apache.org/thread.html/rc5f3df5316c5237b78a3dff5ab95b311ad08e61d418cd992ca7e34ae@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rc65f9bc679feffe4589ea0981ee98bc0af9139470f077a91580eeee0@%3Cpluto-dev.portals.apache.org%3E
https://lists.apache.org/thread.html/rca71a10ca533eb9bfac2d590533f02e6fb9064d3b6aa3ec90fdc4f51@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rd09d4ab3e32e4b3a480e2ff6ff118712981ca82e817f28f2a85652a6@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/re41e9967bee064e7369411c28f0f5b2ad28b8334907c9c6208017279@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/red3aea910403d8620c73e1c7b9c9b145798d0469eb3298a7be7891af@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rfa2f08b7c0caf80ca9f4a18bd875918fdd4e894e2ea47942a4589b9c@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/rfcd2c649c205f12b72dde044f905903460669a220a2eb7e12652d19d@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rfd01af05babc95b8949e6d8ea78d9834699e1b06981040dde419a330@%3Cdev.commons.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/08/msg00016.html
https://nvd.nist.gov/vuln/detail/CVE-2021-29425
https://security.netapp.com/advisory/ntap-20220210-0004
https://security.netapp.com/advisory/ntap-20220210-0004/
https://ubuntu.com/security/notices/USN-5095-1
https://www.cve.org/CVERecord?id=CVE-2021-29425
https://www.openwall.com/lists/oss-security/2021/04/12/1
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| commons-io:commons-io |
CVE-2024-47554 |
HIGH |
2.6 |
2.14.0 |
http://www.openwall.com/lists/oss-security/2024/10/03/2
https://access.redhat.com/security/cve/CVE-2024-47554
https://advisory.echohq.com/cve/CVE-2024-47554
https://github.com/advisories/GHSA-78wr-2p64-hpwj
https://github.com/apache/commons-io
https://lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1
https://nvd.nist.gov/vuln/detail/CVE-2024-47554
https://security.netapp.com/advisory/ntap-20250131-0010
https://security.netapp.com/advisory/ntap-20250131-0010/
https://ubuntu.com/security/notices/USN-8191-1
https://www.cve.org/CVERecord?id=CVE-2024-47554
|
| commons-io:commons-io |
CVE-2021-29425 |
MEDIUM |
2.6 |
2.7 |
https://access.redhat.com/security/cve/CVE-2021-29425
https://advisory.echohq.com/cve/CVE-2021-29425
https://arxiv.org/pdf/2306.05534.pdf
https://github.com/advisories/GHSA-gwrp-pvrq-jmwv
https://github.com/jensdietrich/xshady-release/tree/main/CVE-2021-29425
https://issues.apache.org/jira/browse/IO-556
https://lists.apache.org/thread.html/r01b4a1fcdf3311c936ce33d75a9398b6c255f00c1a2f312ac21effe1@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r0bfa8f7921abdfae788b1f076a12f73a92c93cc0a6e1083bce0027c5@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r0d73e2071d1f1afe1a15da14c5b6feb2cf17e3871168d5a3c8451436@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r1c2f4683c35696cf6f863e3c107e37ec41305b1930dd40c17260de71@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r20416f39ca7f7344e7d76fe4d7063bb1d91ad106926626e7e83fb346@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r2345b49dbffa8a5c3c589c082fe39228a2c1d14f11b96c523da701db@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe@%3Cusers.kafka.apache.org%3E
https://lists.apache.org/thread.html/r27b1eedda37468256c4bb768fde1e8b79b37ec975cbbfd0d65a7ac34@%3Cdev.myfaces.apache.org%3E
https://lists.apache.org/thread.html/r2bc986a070457daca457a54fe71ee09d2584c24dc262336ca32b6a19@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r2df50af2641d38f432ef025cd2ba5858215cc0cf3fc10396a674ad2e@%3Cpluto-scm.portals.apache.org%3E
https://lists.apache.org/thread.html/r345330b7858304938b7b8029d02537a116d75265a598c98fa333504a@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r4050f9f6b42ebfa47a98cbdee4aabed4bb5fb8093db7dbb88faceba2@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r462db908acc1e37c455e11b1a25992b81efd18e641e7e0ceb1b6e046@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r477c285126ada5c3b47946bb702cb222ac4e7fd3100c8549bdd6d3b2@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r47ab6f68cbba8e730f42c4ea752f3a44eb95fb09064070f2476bb401@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r5149f78be265be69d34eacb4e4b0fc7c9c697bcdfa91a1c1658d717b@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r523a6ffad58f71c4f3761e3cee72df878e48cdc89ebdce933be1475c@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r808be7d93b17a7055c1981a8453ae5f0d0fce5855407793c5d0ffffa@%3Cuser.commons.apache.org%3E
https://lists.apache.org/thread.html/r8569a41d565ca880a4dee0e645dad1cd17ab4a92e68055ad9ebb7375@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r86528f4b7d222aed7891e7ac03d69a0db2a2dfa17b86ac3470d7f374@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r873d5ddafc0a68fd999725e559776dc4971d1ab39c0f5cc81bd9bc04@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r8bfc7235e6b39d90e6f446325a5a44c3e9e50da18860fdabcee23e29@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r8efcbabde973ea72f5e0933adc48ef1425db5cde850bf641b3993f31@%3Cdev.commons.apache.org%3E
https://lists.apache.org/thread.html/r92ea904f4bae190b03bd42a4355ce3c2fbe8f36ab673e03f6ca3f9fa@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/ra8ef65aedc086d2d3d21492b4c08ae0eb8a3a42cc52e29ba1bc009d8@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/raa053846cae9d497606027816ae87b4e002b2e0eb66cb0dee710e1f5@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/rad4ae544747df32ccd58fff5a86cd556640396aeb161aa71dd3d192a@%3Cuser.commons.apache.org%3E
https://lists.apache.org/thread.html/rbebd3e19651baa7a4a5503a9901c95989df9d40602c8e35cb05d3eb5@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/rc10fa20ef4d13cbf6ebe0b06b5edb95466a1424a9b7673074ed03260@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rc2dd3204260e9227a67253ef68b6f1599446005bfa0e1ddce4573a80@%3Cpluto-dev.portals.apache.org%3E
https://lists.apache.org/thread.html/rc359823b5500e9a9a2572678ddb8e01d3505a7ffcadfa8d13b8780ab@%3Cuser.commons.apache.org%3E
https://lists.apache.org/thread.html/rc5f3df5316c5237b78a3dff5ab95b311ad08e61d418cd992ca7e34ae@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rc65f9bc679feffe4589ea0981ee98bc0af9139470f077a91580eeee0@%3Cpluto-dev.portals.apache.org%3E
https://lists.apache.org/thread.html/rca71a10ca533eb9bfac2d590533f02e6fb9064d3b6aa3ec90fdc4f51@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rd09d4ab3e32e4b3a480e2ff6ff118712981ca82e817f28f2a85652a6@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/re41e9967bee064e7369411c28f0f5b2ad28b8334907c9c6208017279@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/red3aea910403d8620c73e1c7b9c9b145798d0469eb3298a7be7891af@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rfa2f08b7c0caf80ca9f4a18bd875918fdd4e894e2ea47942a4589b9c@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/rfcd2c649c205f12b72dde044f905903460669a220a2eb7e12652d19d@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rfd01af05babc95b8949e6d8ea78d9834699e1b06981040dde419a330@%3Cdev.commons.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/08/msg00016.html
https://nvd.nist.gov/vuln/detail/CVE-2021-29425
https://security.netapp.com/advisory/ntap-20220210-0004
https://security.netapp.com/advisory/ntap-20220210-0004/
https://ubuntu.com/security/notices/USN-5095-1
https://www.cve.org/CVERecord?id=CVE-2021-29425
https://www.openwall.com/lists/oss-security/2021/04/12/1
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| commons-lang:commons-lang |
CVE-2025-48924 |
MEDIUM |
2.6 |
|
http://www.openwall.com/lists/oss-security/2025/07/11/1
https://access.redhat.com/security/cve/CVE-2025-48924
https://advisory.echohq.com/cve/CVE-2025-48924
https://github.com/apache/commons-lang
https://github.com/apache/commons-lang/commit/b424803abdb2bec818e4fbcb251ce031c22aca53
https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1
https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html
https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html
https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html
https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html
https://nvd.nist.gov/vuln/detail/CVE-2025-48924
https://ubuntu.com/security/notices/USN-8364-1
https://www.cve.org/CVERecord?id=CVE-2025-48924
https://www.openwall.com/lists/oss-security/2025/07/11/1
|
| io.undertow:undertow-core |
CVE-2022-4492 |
CRITICAL |
2.1.0.Final |
2.3.5.Final, 2.2.24.Final |
https://access.redhat.com/security/cve/CVE-2022-4492
https://bugzilla.redhat.com/show_bug.cgi?id=2153260
https://github.com/undertow-io/undertow/blob/master/core/src/main/java/io/undertow/security/impl/ClientCertAuthenticationMechanism.java
https://github.com/undertow-io/undertow/pull/1447
https://github.com/undertow-io/undertow/pull/1447/commits/e5071e52b72529a14d3ec436ae7102cea5d918c4
https://github.com/undertow-io/undertow/pull/1457
https://github.com/undertow-io/undertow/pull/1457/commits/a4d3b167126a803cc4f7fb740dd9a6ecabf59342
https://issues.redhat.com/browse/MTA-93
https://issues.redhat.com/browse/UNDERTOW-2212
https://nvd.nist.gov/vuln/detail/CVE-2022-4492
https://security.netapp.com/advisory/ntap-20230324-0002
https://security.netapp.com/advisory/ntap-20230324-0002/
https://www.cve.org/CVERecord?id=CVE-2022-4492
|
| io.undertow:undertow-core |
CVE-2022-4492 |
CRITICAL |
2.1.0.Final |
2.3.5.Final, 2.2.24.Final |
https://access.redhat.com/security/cve/CVE-2022-4492
https://bugzilla.redhat.com/show_bug.cgi?id=2153260
https://github.com/undertow-io/undertow/blob/master/core/src/main/java/io/undertow/security/impl/ClientCertAuthenticationMechanism.java
https://github.com/undertow-io/undertow/pull/1447
https://github.com/undertow-io/undertow/pull/1447/commits/e5071e52b72529a14d3ec436ae7102cea5d918c4
https://github.com/undertow-io/undertow/pull/1457
https://github.com/undertow-io/undertow/pull/1457/commits/a4d3b167126a803cc4f7fb740dd9a6ecabf59342
https://issues.redhat.com/browse/MTA-93
https://issues.redhat.com/browse/UNDERTOW-2212
https://nvd.nist.gov/vuln/detail/CVE-2022-4492
https://security.netapp.com/advisory/ntap-20230324-0002
https://security.netapp.com/advisory/ntap-20230324-0002/
https://www.cve.org/CVERecord?id=CVE-2022-4492
|
| io.undertow:undertow-core |
CVE-2025-12543 |
CRITICAL |
2.1.0.Final |
2.3.21.Final, 2.2.39.Final |
https://access.redhat.com/errata/RHSA-2026:0383
https://access.redhat.com/errata/RHSA-2026:0384
https://access.redhat.com/errata/RHSA-2026:0386
https://access.redhat.com/errata/RHSA-2026:33371
https://access.redhat.com/errata/RHSA-2026:33372
https://access.redhat.com/errata/RHSA-2026:3889
https://access.redhat.com/errata/RHSA-2026:3890
https://access.redhat.com/errata/RHSA-2026:3891
https://access.redhat.com/errata/RHSA-2026:3892
https://access.redhat.com/errata/RHSA-2026:4915
https://access.redhat.com/errata/RHSA-2026:4916
https://access.redhat.com/errata/RHSA-2026:4917
https://access.redhat.com/errata/RHSA-2026:4924
https://access.redhat.com/errata/RHSA-2026:76128
https://access.redhat.com/errata/RHSA-2026:76129
https://access.redhat.com/errata/RHSA-2026:76130
https://access.redhat.com/errata/RHSA-2026:76132
https://access.redhat.com/errata/RHSA-2026:76134
https://access.redhat.com/security/cve/CVE-2025-12543
https://bugzilla.redhat.com/show_bug.cgi?id=2408784
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/pull/1857
https://github.com/undertow-io/undertow/pull/1857%20%28main%29
https://github.com/undertow-io/undertow/pull/1860
https://github.com/undertow-io/undertow/pull/1860%20%282.3.x%29
https://github.com/undertow-io/undertow/pull/1882%20%282.2.x%29
https://github.com/undertow-io/undertow/pull/1894%20%282.4.x%29
https://github.com/undertow-io/undertow/releases/tag/2.2.39.Final
https://github.com/undertow-io/undertow/releases/tag/2.3.21.Final
https://issues.redhat.com/browse/UNDERTOW-2656
https://nvd.nist.gov/vuln/detail/CVE-2025-12543
https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-12543.json
https://ubuntu.com/security/notices/USN-8144-1
https://www.cve.org/CVERecord?id=CVE-2025-12543
|
| io.undertow:undertow-core |
CVE-2025-12543 |
CRITICAL |
2.1.0.Final |
2.3.21.Final, 2.2.39.Final |
https://access.redhat.com/errata/RHSA-2026:0383
https://access.redhat.com/errata/RHSA-2026:0384
https://access.redhat.com/errata/RHSA-2026:0386
https://access.redhat.com/errata/RHSA-2026:33371
https://access.redhat.com/errata/RHSA-2026:33372
https://access.redhat.com/errata/RHSA-2026:3889
https://access.redhat.com/errata/RHSA-2026:3890
https://access.redhat.com/errata/RHSA-2026:3891
https://access.redhat.com/errata/RHSA-2026:3892
https://access.redhat.com/errata/RHSA-2026:4915
https://access.redhat.com/errata/RHSA-2026:4916
https://access.redhat.com/errata/RHSA-2026:4917
https://access.redhat.com/errata/RHSA-2026:4924
https://access.redhat.com/errata/RHSA-2026:76128
https://access.redhat.com/errata/RHSA-2026:76129
https://access.redhat.com/errata/RHSA-2026:76130
https://access.redhat.com/errata/RHSA-2026:76132
https://access.redhat.com/errata/RHSA-2026:76134
https://access.redhat.com/security/cve/CVE-2025-12543
https://bugzilla.redhat.com/show_bug.cgi?id=2408784
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/pull/1857
https://github.com/undertow-io/undertow/pull/1857%20%28main%29
https://github.com/undertow-io/undertow/pull/1860
https://github.com/undertow-io/undertow/pull/1860%20%282.3.x%29
https://github.com/undertow-io/undertow/pull/1882%20%282.2.x%29
https://github.com/undertow-io/undertow/pull/1894%20%282.4.x%29
https://github.com/undertow-io/undertow/releases/tag/2.2.39.Final
https://github.com/undertow-io/undertow/releases/tag/2.3.21.Final
https://issues.redhat.com/browse/UNDERTOW-2656
https://nvd.nist.gov/vuln/detail/CVE-2025-12543
https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-12543.json
https://ubuntu.com/security/notices/USN-8144-1
https://www.cve.org/CVERecord?id=CVE-2025-12543
|
| io.undertow:undertow-core |
CVE-2020-10705 |
HIGH |
2.1.0.Final |
2.1.1.Final |
https://access.redhat.com/security/cve/CVE-2020-10705
https://bugzilla.redhat.com/show_bug.cgi?id=1803241
https://nvd.nist.gov/vuln/detail/CVE-2020-10705
https://security.netapp.com/advisory/ntap-20220210-0014
https://security.netapp.com/advisory/ntap-20220210-0014/
https://www.cve.org/CVERecord?id=CVE-2020-10705
|
| io.undertow:undertow-core |
CVE-2020-10705 |
HIGH |
2.1.0.Final |
2.1.1.Final |
https://access.redhat.com/security/cve/CVE-2020-10705
https://bugzilla.redhat.com/show_bug.cgi?id=1803241
https://nvd.nist.gov/vuln/detail/CVE-2020-10705
https://security.netapp.com/advisory/ntap-20220210-0014
https://security.netapp.com/advisory/ntap-20220210-0014/
https://www.cve.org/CVERecord?id=CVE-2020-10705
|
| io.undertow:undertow-core |
CVE-2020-27782 |
HIGH |
2.1.0.Final |
2.1.5, 2.0.33 |
https://access.redhat.com/security/cve/CVE-2020-27782
https://bugzilla.redhat.com/show_bug.cgi?id=1901304
https://github.com/undertow-io/undertow/pull/997/commits/98a9ab7f2d7fe7a7254eaf17d47816c452169c90
https://issues.redhat.com/browse/UNDERTOW-1813
https://nvd.nist.gov/vuln/detail/CVE-2020-27782
https://www.cve.org/CVERecord?id=CVE-2020-27782
|
| io.undertow:undertow-core |
CVE-2020-27782 |
HIGH |
2.1.0.Final |
2.1.5, 2.0.33 |
https://access.redhat.com/security/cve/CVE-2020-27782
https://bugzilla.redhat.com/show_bug.cgi?id=1901304
https://github.com/undertow-io/undertow/pull/997/commits/98a9ab7f2d7fe7a7254eaf17d47816c452169c90
https://issues.redhat.com/browse/UNDERTOW-1813
https://nvd.nist.gov/vuln/detail/CVE-2020-27782
https://www.cve.org/CVERecord?id=CVE-2020-27782
|
| io.undertow:undertow-core |
CVE-2021-3629 |
HIGH |
2.1.0.Final |
2.0.40.Final, 2.2.11.Final |
https://access.redhat.com/security/cve/CVE-2021-3629
https://bugzilla.redhat.com/show_bug.cgi?id=1977362
https://github.com/undertow-io/undertow
https://nvd.nist.gov/vuln/detail/CVE-2021-3629
https://security.netapp.com/advisory/ntap-20220729-0008
https://security.netapp.com/advisory/ntap-20220729-0008/
https://www.cve.org/CVERecord?id=CVE-2021-3629
|
| io.undertow:undertow-core |
CVE-2021-3629 |
HIGH |
2.1.0.Final |
2.0.40.Final, 2.2.11.Final |
https://access.redhat.com/security/cve/CVE-2021-3629
https://bugzilla.redhat.com/show_bug.cgi?id=1977362
https://github.com/undertow-io/undertow
https://nvd.nist.gov/vuln/detail/CVE-2021-3629
https://security.netapp.com/advisory/ntap-20220729-0008
https://security.netapp.com/advisory/ntap-20220729-0008/
https://www.cve.org/CVERecord?id=CVE-2021-3629
|
| io.undertow:undertow-core |
CVE-2021-3859 |
HIGH |
2.1.0.Final |
2.2.15 |
https://access.redhat.com/security/cve/CVE-2021-3859
https://access.redhat.com/security/cve/cve-2021-3859
https://bugzilla.redhat.com/show_bug.cgi?id=2010378
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/commit/db0f5be43f8e2a4b88fbedd2eb6d5a95a29ceaa8
https://github.com/undertow-io/undertow/commit/e43f0ada3f4da6e8579e0020cec3cb1a81e487c2
https://github.com/undertow-io/undertow/pull/1296
https://issues.redhat.com/browse/UNDERTOW-1979
https://nvd.nist.gov/vuln/detail/CVE-2021-3859
https://security.netapp.com/advisory/ntap-20221201-0004
https://security.netapp.com/advisory/ntap-20221201-0004/
https://www.cve.org/CVERecord?id=CVE-2021-3859
|
| io.undertow:undertow-core |
CVE-2021-3859 |
HIGH |
2.1.0.Final |
2.2.15 |
https://access.redhat.com/security/cve/CVE-2021-3859
https://access.redhat.com/security/cve/cve-2021-3859
https://bugzilla.redhat.com/show_bug.cgi?id=2010378
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/commit/db0f5be43f8e2a4b88fbedd2eb6d5a95a29ceaa8
https://github.com/undertow-io/undertow/commit/e43f0ada3f4da6e8579e0020cec3cb1a81e487c2
https://github.com/undertow-io/undertow/pull/1296
https://issues.redhat.com/browse/UNDERTOW-1979
https://nvd.nist.gov/vuln/detail/CVE-2021-3859
https://security.netapp.com/advisory/ntap-20221201-0004
https://security.netapp.com/advisory/ntap-20221201-0004/
https://www.cve.org/CVERecord?id=CVE-2021-3859
|
| io.undertow:undertow-core |
CVE-2022-2053 |
HIGH |
2.1.0.Final |
2.2.19.Final, 2.3.0.Alpha2 |
https://access.redhat.com/security/cve/CVE-2022-2053
https://bugzilla.redhat.com/show_bug.cgi?id=2095862&comment#0
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/pull/1350
https://issues.redhat.com/browse/UNDERTOW-2133
https://nvd.nist.gov/vuln/detail/CVE-2022-2053
https://www.cve.org/CVERecord?id=CVE-2022-2053
|
| io.undertow:undertow-core |
CVE-2022-2053 |
HIGH |
2.1.0.Final |
2.2.19.Final, 2.3.0.Alpha2 |
https://access.redhat.com/security/cve/CVE-2022-2053
https://bugzilla.redhat.com/show_bug.cgi?id=2095862&comment#0
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/pull/1350
https://issues.redhat.com/browse/UNDERTOW-2133
https://nvd.nist.gov/vuln/detail/CVE-2022-2053
https://www.cve.org/CVERecord?id=CVE-2022-2053
|
| io.undertow:undertow-core |
CVE-2023-1108 |
HIGH |
2.1.0.Final |
2.3.5.Final, 2.2.24.Final |
https://access.redhat.com/errata/RHSA-2023:1184
https://access.redhat.com/errata/RHSA-2023:1185
https://access.redhat.com/errata/RHSA-2023:1512
https://access.redhat.com/errata/RHSA-2023:1513
https://access.redhat.com/errata/RHSA-2023:1514
https://access.redhat.com/errata/RHSA-2023:1516
https://access.redhat.com/errata/RHSA-2023:2135
https://access.redhat.com/errata/RHSA-2023:3883
https://access.redhat.com/errata/RHSA-2023:3884
https://access.redhat.com/errata/RHSA-2023:3885
https://access.redhat.com/errata/RHSA-2023:3888
https://access.redhat.com/errata/RHSA-2023:3892
https://access.redhat.com/errata/RHSA-2023:3954
https://access.redhat.com/errata/RHSA-2023:4612
https://access.redhat.com/security/cve/CVE-2023-1108
https://bugzilla.redhat.com/show_bug.cgi?id=2174246
https://github.com/advisories/GHSA-m4mm-pg93-fv78
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/commit/1302c8cf4476936802504efe0d36c58dcd954f78
https://github.com/undertow-io/undertow/commit/1b763064a41a30583b5df9a118898513007a70be
https://github.com/undertow-io/undertow/commit/ccc053b55f5de9872bc1a4999fd6aa85fc5e146d
https://github.com/undertow-io/undertow/pull/1457
https://nvd.nist.gov/vuln/detail/CVE-2023-1108
https://security.netapp.com/advisory/ntap-20231020-0002
https://security.netapp.com/advisory/ntap-20231020-0002/
https://www.cve.org/CVERecord?id=CVE-2023-1108
|
| io.undertow:undertow-core |
CVE-2023-1108 |
HIGH |
2.1.0.Final |
2.3.5.Final, 2.2.24.Final |
https://access.redhat.com/errata/RHSA-2023:1184
https://access.redhat.com/errata/RHSA-2023:1185
https://access.redhat.com/errata/RHSA-2023:1512
https://access.redhat.com/errata/RHSA-2023:1513
https://access.redhat.com/errata/RHSA-2023:1514
https://access.redhat.com/errata/RHSA-2023:1516
https://access.redhat.com/errata/RHSA-2023:2135
https://access.redhat.com/errata/RHSA-2023:3883
https://access.redhat.com/errata/RHSA-2023:3884
https://access.redhat.com/errata/RHSA-2023:3885
https://access.redhat.com/errata/RHSA-2023:3888
https://access.redhat.com/errata/RHSA-2023:3892
https://access.redhat.com/errata/RHSA-2023:3954
https://access.redhat.com/errata/RHSA-2023:4612
https://access.redhat.com/security/cve/CVE-2023-1108
https://bugzilla.redhat.com/show_bug.cgi?id=2174246
https://github.com/advisories/GHSA-m4mm-pg93-fv78
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/commit/1302c8cf4476936802504efe0d36c58dcd954f78
https://github.com/undertow-io/undertow/commit/1b763064a41a30583b5df9a118898513007a70be
https://github.com/undertow-io/undertow/commit/ccc053b55f5de9872bc1a4999fd6aa85fc5e146d
https://github.com/undertow-io/undertow/pull/1457
https://nvd.nist.gov/vuln/detail/CVE-2023-1108
https://security.netapp.com/advisory/ntap-20231020-0002
https://security.netapp.com/advisory/ntap-20231020-0002/
https://www.cve.org/CVERecord?id=CVE-2023-1108
|
| io.undertow:undertow-core |
CVE-2023-4639 |
HIGH |
2.1.0.Final |
2.3.11.Final, 2.2.30.Final |
https://access.redhat.com/errata/RHSA-2024:1674
https://access.redhat.com/errata/RHSA-2024:1675
https://access.redhat.com/errata/RHSA-2024:1676
https://access.redhat.com/errata/RHSA-2024:1677
https://access.redhat.com/errata/RHSA-2024:2763
https://access.redhat.com/errata/RHSA-2024:2764
https://access.redhat.com/errata/RHSA-2024:3919
https://access.redhat.com/security/cve/CVE-2023-4639
https://bugzilla.redhat.com/show_bug.cgi?id=2166022
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/commit/1f93a979d2ac264798e5779b5b7172dfafe0066f
https://nvd.nist.gov/vuln/detail/CVE-2023-4639
https://security.netapp.com/advisory/ntap-20250207-0001
https://security.netapp.com/advisory/ntap-20250207-0001/
https://www.cve.org/CVERecord?id=CVE-2023-4639
|
| io.undertow:undertow-core |
CVE-2023-4639 |
HIGH |
2.1.0.Final |
2.3.11.Final, 2.2.30.Final |
https://access.redhat.com/errata/RHSA-2024:1674
https://access.redhat.com/errata/RHSA-2024:1675
https://access.redhat.com/errata/RHSA-2024:1676
https://access.redhat.com/errata/RHSA-2024:1677
https://access.redhat.com/errata/RHSA-2024:2763
https://access.redhat.com/errata/RHSA-2024:2764
https://access.redhat.com/errata/RHSA-2024:3919
https://access.redhat.com/security/cve/CVE-2023-4639
https://bugzilla.redhat.com/show_bug.cgi?id=2166022
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/commit/1f93a979d2ac264798e5779b5b7172dfafe0066f
https://nvd.nist.gov/vuln/detail/CVE-2023-4639
https://security.netapp.com/advisory/ntap-20250207-0001
https://security.netapp.com/advisory/ntap-20250207-0001/
https://www.cve.org/CVERecord?id=CVE-2023-4639
|
| io.undertow:undertow-core |
CVE-2024-1635 |
HIGH |
2.1.0.Final |
2.3.12.Final, 2.2.31.Final |
https://access.redhat.com/errata/RHSA-2024:1674
https://access.redhat.com/errata/RHSA-2024:1675
https://access.redhat.com/errata/RHSA-2024:1676
https://access.redhat.com/errata/RHSA-2024:1677
https://access.redhat.com/errata/RHSA-2024:1860
https://access.redhat.com/errata/RHSA-2024:1861
https://access.redhat.com/errata/RHSA-2024:1862
https://access.redhat.com/errata/RHSA-2024:1864
https://access.redhat.com/errata/RHSA-2024:1866
https://access.redhat.com/errata/RHSA-2024:3354
https://access.redhat.com/errata/RHSA-2024:4884
https://access.redhat.com/errata/RHSA-2025:4226
https://access.redhat.com/errata/RHSA-2025:9583
https://access.redhat.com/security/cve/CVE-2024-1635
https://bugzilla.redhat.com/show_bug.cgi?id=2264928
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/commit/3cdb104e225f34547ce9fd6eb8799eb68e040f19
https://github.com/undertow-io/undertow/commit/7d388c5aae9b82afb63f24e3b6a2044838dfb4de
https://nvd.nist.gov/vuln/detail/CVE-2024-1635
https://security.netapp.com/advisory/ntap-20240322-0007
https://security.netapp.com/advisory/ntap-20240322-0007/
https://www.cve.org/CVERecord?id=CVE-2024-1635
|
| io.undertow:undertow-core |
CVE-2024-1635 |
HIGH |
2.1.0.Final |
2.3.12.Final, 2.2.31.Final |
https://access.redhat.com/errata/RHSA-2024:1674
https://access.redhat.com/errata/RHSA-2024:1675
https://access.redhat.com/errata/RHSA-2024:1676
https://access.redhat.com/errata/RHSA-2024:1677
https://access.redhat.com/errata/RHSA-2024:1860
https://access.redhat.com/errata/RHSA-2024:1861
https://access.redhat.com/errata/RHSA-2024:1862
https://access.redhat.com/errata/RHSA-2024:1864
https://access.redhat.com/errata/RHSA-2024:1866
https://access.redhat.com/errata/RHSA-2024:3354
https://access.redhat.com/errata/RHSA-2024:4884
https://access.redhat.com/errata/RHSA-2025:4226
https://access.redhat.com/errata/RHSA-2025:9583
https://access.redhat.com/security/cve/CVE-2024-1635
https://bugzilla.redhat.com/show_bug.cgi?id=2264928
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/commit/3cdb104e225f34547ce9fd6eb8799eb68e040f19
https://github.com/undertow-io/undertow/commit/7d388c5aae9b82afb63f24e3b6a2044838dfb4de
https://nvd.nist.gov/vuln/detail/CVE-2024-1635
https://security.netapp.com/advisory/ntap-20240322-0007
https://security.netapp.com/advisory/ntap-20240322-0007/
https://www.cve.org/CVERecord?id=CVE-2024-1635
|
| io.undertow:undertow-core |
CVE-2024-3884 |
HIGH |
2.1.0.Final |
2.2.39.Final, 2.4.0.Beta1, 2.3.21.Final |
https://access.redhat.com/errata/RHSA-2025:22773
https://access.redhat.com/errata/RHSA-2025:22775
https://access.redhat.com/errata/RHSA-2025:22777
https://access.redhat.com/errata/RHSA-2025:3990
https://access.redhat.com/errata/RHSA-2025:3992
https://access.redhat.com/errata/RHSA-2026:0383
https://access.redhat.com/errata/RHSA-2026:0384
https://access.redhat.com/errata/RHSA-2026:0386
https://access.redhat.com/errata/RHSA-2026:3889
https://access.redhat.com/errata/RHSA-2026:3891
https://access.redhat.com/errata/RHSA-2026:3892
https://access.redhat.com/errata/RHSA-2026:4915
https://access.redhat.com/errata/RHSA-2026:4916
https://access.redhat.com/errata/RHSA-2026:4917
https://access.redhat.com/errata/RHSA-2026:4924
https://access.redhat.com/errata/RHSA-2026:6011
https://access.redhat.com/errata/RHSA-2026:6012
https://access.redhat.com/security/cve/CVE-2024-3884
https://bugzilla.redhat.com/show_bug.cgi?id=2275287
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/commit/cb854c779b9e2368c3c274ebd7217c8e75d505be
https://github.com/undertow-io/undertow/pull/1856
https://github.com/undertow-io/undertow/pull/1860
https://github.com/undertow-io/undertow/pull/1882
https://github.com/undertow-io/undertow/pull/1894
https://github.com/undertow-io/undertow/releases/tag/2.2.39.Final
https://github.com/undertow-io/undertow/releases/tag/2.3.21.Final
https://github.com/undertow-io/undertow/releases/tag/2.4.0.Beta1
https://nvd.nist.gov/vuln/detail/CVE-2024-3884
https://www.cve.org/CVERecord?id=CVE-2024-3884
|
| io.undertow:undertow-core |
CVE-2024-3884 |
HIGH |
2.1.0.Final |
2.2.39.Final, 2.4.0.Beta1, 2.3.21.Final |
https://access.redhat.com/errata/RHSA-2025:22773
https://access.redhat.com/errata/RHSA-2025:22775
https://access.redhat.com/errata/RHSA-2025:22777
https://access.redhat.com/errata/RHSA-2025:3990
https://access.redhat.com/errata/RHSA-2025:3992
https://access.redhat.com/errata/RHSA-2026:0383
https://access.redhat.com/errata/RHSA-2026:0384
https://access.redhat.com/errata/RHSA-2026:0386
https://access.redhat.com/errata/RHSA-2026:3889
https://access.redhat.com/errata/RHSA-2026:3891
https://access.redhat.com/errata/RHSA-2026:3892
https://access.redhat.com/errata/RHSA-2026:4915
https://access.redhat.com/errata/RHSA-2026:4916
https://access.redhat.com/errata/RHSA-2026:4917
https://access.redhat.com/errata/RHSA-2026:4924
https://access.redhat.com/errata/RHSA-2026:6011
https://access.redhat.com/errata/RHSA-2026:6012
https://access.redhat.com/security/cve/CVE-2024-3884
https://bugzilla.redhat.com/show_bug.cgi?id=2275287
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/commit/cb854c779b9e2368c3c274ebd7217c8e75d505be
https://github.com/undertow-io/undertow/pull/1856
https://github.com/undertow-io/undertow/pull/1860
https://github.com/undertow-io/undertow/pull/1882
https://github.com/undertow-io/undertow/pull/1894
https://github.com/undertow-io/undertow/releases/tag/2.2.39.Final
https://github.com/undertow-io/undertow/releases/tag/2.3.21.Final
https://github.com/undertow-io/undertow/releases/tag/2.4.0.Beta1
https://nvd.nist.gov/vuln/detail/CVE-2024-3884
https://www.cve.org/CVERecord?id=CVE-2024-3884
|
| io.undertow:undertow-core |
CVE-2024-4027 |
HIGH |
2.1.0.Final |
2.2.39.Final, 2.4.0.Beta1, 2.3.21.Final |
https://access.redhat.com/security/cve/CVE-2024-4027
https://bugzilla.redhat.com/show_bug.cgi?id=2276410
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/commit/6b7c18481ce65ae4012d92fe2b7f17a21ef4d70b
https://github.com/undertow-io/undertow/commit/8318dd36fdc2c9842baf10c5f1bfbb3bc23f75e7
https://github.com/undertow-io/undertow/commit/cb854c779b9e2368c3c274ebd7217c8e75d505be
https://github.com/undertow-io/undertow/commit/fb14baa51b611a4a9f755f1d8b07d6e12eac68e3
https://github.com/undertow-io/undertow/pull/1860
https://github.com/undertow-io/undertow/pull/1882
https://github.com/undertow-io/undertow/pull/1894
https://github.com/undertow-io/undertow/releases/tag/2.2.39.Final
https://github.com/undertow-io/undertow/releases/tag/2.3.21.Final
https://github.com/undertow-io/undertow/releases/tag/2.4.0.Beta1
https://issues.redhat.com/browse/UNDERTOW-2377
https://nvd.nist.gov/vuln/detail/CVE-2024-4027
https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-4027.json
https://www.cve.org/CVERecord?id=CVE-2024-4027
|
| io.undertow:undertow-core |
CVE-2024-4027 |
HIGH |
2.1.0.Final |
2.2.39.Final, 2.4.0.Beta1, 2.3.21.Final |
https://access.redhat.com/security/cve/CVE-2024-4027
https://bugzilla.redhat.com/show_bug.cgi?id=2276410
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/commit/6b7c18481ce65ae4012d92fe2b7f17a21ef4d70b
https://github.com/undertow-io/undertow/commit/8318dd36fdc2c9842baf10c5f1bfbb3bc23f75e7
https://github.com/undertow-io/undertow/commit/cb854c779b9e2368c3c274ebd7217c8e75d505be
https://github.com/undertow-io/undertow/commit/fb14baa51b611a4a9f755f1d8b07d6e12eac68e3
https://github.com/undertow-io/undertow/pull/1860
https://github.com/undertow-io/undertow/pull/1882
https://github.com/undertow-io/undertow/pull/1894
https://github.com/undertow-io/undertow/releases/tag/2.2.39.Final
https://github.com/undertow-io/undertow/releases/tag/2.3.21.Final
https://github.com/undertow-io/undertow/releases/tag/2.4.0.Beta1
https://issues.redhat.com/browse/UNDERTOW-2377
https://nvd.nist.gov/vuln/detail/CVE-2024-4027
https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-4027.json
https://www.cve.org/CVERecord?id=CVE-2024-4027
|
| io.undertow:undertow-core |
CVE-2024-5971 |
HIGH |
2.1.0.Final |
2.3.15.Final, 2.2.34.Final |
https://access.redhat.com/errata/RHSA-2024:4392
https://access.redhat.com/errata/RHSA-2024:4884
https://access.redhat.com/errata/RHSA-2024:5143
https://access.redhat.com/errata/RHSA-2024:5144
https://access.redhat.com/errata/RHSA-2024:5145
https://access.redhat.com/errata/RHSA-2024:5147
https://access.redhat.com/errata/RHSA-2024:6508
https://access.redhat.com/errata/RHSA-2024:6883
https://access.redhat.com/security/cve/CVE-2024-5971
https://bugzilla.redhat.com/show_bug.cgi?id=2292211
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/pull/1638
https://github.com/undertow-io/undertow/pull/1640
https://github.com/undertow-io/undertow/pull/1641
https://issues.redhat.com/browse/UNDERTOW-2413
https://nvd.nist.gov/vuln/detail/CVE-2024-5971
https://security.netapp.com/advisory/ntap-20240828-0001/
https://www.cve.org/CVERecord?id=CVE-2024-5971
|
| io.undertow:undertow-core |
CVE-2024-5971 |
HIGH |
2.1.0.Final |
2.3.15.Final, 2.2.34.Final |
https://access.redhat.com/errata/RHSA-2024:4392
https://access.redhat.com/errata/RHSA-2024:4884
https://access.redhat.com/errata/RHSA-2024:5143
https://access.redhat.com/errata/RHSA-2024:5144
https://access.redhat.com/errata/RHSA-2024:5145
https://access.redhat.com/errata/RHSA-2024:5147
https://access.redhat.com/errata/RHSA-2024:6508
https://access.redhat.com/errata/RHSA-2024:6883
https://access.redhat.com/security/cve/CVE-2024-5971
https://bugzilla.redhat.com/show_bug.cgi?id=2292211
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/pull/1638
https://github.com/undertow-io/undertow/pull/1640
https://github.com/undertow-io/undertow/pull/1641
https://issues.redhat.com/browse/UNDERTOW-2413
https://nvd.nist.gov/vuln/detail/CVE-2024-5971
https://security.netapp.com/advisory/ntap-20240828-0001/
https://www.cve.org/CVERecord?id=CVE-2024-5971
|
| io.undertow:undertow-core |
CVE-2024-6162 |
HIGH |
2.1.0.Final |
2.3.14.Final, 2.2.33.Final |
https://access.redhat.com/errata/RHSA-2024:1194
https://access.redhat.com/errata/RHSA-2024:4386
https://access.redhat.com/errata/RHSA-2024:4884
https://access.redhat.com/security/cve/CVE-2024-6162
https://bugzilla.redhat.com/show_bug.cgi?id=2293069
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/commit/90f202ada89b6d9883beed0f1fe10c99d470d9a8
https://github.com/undertow-io/undertow/commit/a28ac53076e2fa532266d25e0c0b1a01d0e9d2cf
https://github.com/undertow-io/undertow/pull/1612
https://github.com/undertow-io/undertow/releases/tag/2.2.33.Final
https://github.com/undertow-io/undertow/releases/tag/2.3.14.Final
https://issues.redhat.com/browse/JBEAP-26268
https://issues.redhat.com/browse/UNDERTOW-2334
https://nvd.nist.gov/vuln/detail/CVE-2024-6162
https://security.netapp.com/advisory/ntap-20241129-0009
https://security.netapp.com/advisory/ntap-20241129-0009/
https://www.cve.org/CVERecord?id=CVE-2024-6162
|
| io.undertow:undertow-core |
CVE-2024-6162 |
HIGH |
2.1.0.Final |
2.3.14.Final, 2.2.33.Final |
https://access.redhat.com/errata/RHSA-2024:1194
https://access.redhat.com/errata/RHSA-2024:4386
https://access.redhat.com/errata/RHSA-2024:4884
https://access.redhat.com/security/cve/CVE-2024-6162
https://bugzilla.redhat.com/show_bug.cgi?id=2293069
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/commit/90f202ada89b6d9883beed0f1fe10c99d470d9a8
https://github.com/undertow-io/undertow/commit/a28ac53076e2fa532266d25e0c0b1a01d0e9d2cf
https://github.com/undertow-io/undertow/pull/1612
https://github.com/undertow-io/undertow/releases/tag/2.2.33.Final
https://github.com/undertow-io/undertow/releases/tag/2.3.14.Final
https://issues.redhat.com/browse/JBEAP-26268
https://issues.redhat.com/browse/UNDERTOW-2334
https://nvd.nist.gov/vuln/detail/CVE-2024-6162
https://security.netapp.com/advisory/ntap-20241129-0009
https://security.netapp.com/advisory/ntap-20241129-0009/
https://www.cve.org/CVERecord?id=CVE-2024-6162
|
| io.undertow:undertow-core |
CVE-2024-7885 |
HIGH |
2.1.0.Final |
2.2.36.Final, 2.3.17.Final |
https://access.redhat.com/errata/RHSA-2024:11023
https://access.redhat.com/errata/RHSA-2024:6508
https://access.redhat.com/errata/RHSA-2024:6883
https://access.redhat.com/errata/RHSA-2024:7441
https://access.redhat.com/errata/RHSA-2024:7442
https://access.redhat.com/errata/RHSA-2024:7735
https://access.redhat.com/errata/RHSA-2024:7736
https://access.redhat.com/errata/RHSA-2024:8080
https://access.redhat.com/errata/RHSA-2025:16667
https://access.redhat.com/errata/RHSA-2026:0743
https://access.redhat.com/security/cve/CVE-2024-7885
https://bugzilla.redhat.com/show_bug.cgi?id=2305290
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/blob/182e4ca1543c52f438b0244c930dca3d8b6e68e3/core/src/main/java/io/undertow/server/protocol/proxy/ProxyProtocolReadListener.java
https://github.com/undertow-io/undertow/commit/80c125e09068ac52ed0a9acde266ef12f8ed7ae1
https://github.com/undertow-io/undertow/commit/ce5182c37376982ef0abee34fce0d8c0aab0fab8
https://nvd.nist.gov/vuln/detail/CVE-2024-7885
https://security.netapp.com/advisory/ntap-20241011-0004
https://security.netapp.com/advisory/ntap-20241011-0004/
https://www.cve.org/CVERecord?id=CVE-2024-7885
|
| io.undertow:undertow-core |
CVE-2024-7885 |
HIGH |
2.1.0.Final |
2.2.36.Final, 2.3.17.Final |
https://access.redhat.com/errata/RHSA-2024:11023
https://access.redhat.com/errata/RHSA-2024:6508
https://access.redhat.com/errata/RHSA-2024:6883
https://access.redhat.com/errata/RHSA-2024:7441
https://access.redhat.com/errata/RHSA-2024:7442
https://access.redhat.com/errata/RHSA-2024:7735
https://access.redhat.com/errata/RHSA-2024:7736
https://access.redhat.com/errata/RHSA-2024:8080
https://access.redhat.com/errata/RHSA-2025:16667
https://access.redhat.com/errata/RHSA-2026:0743
https://access.redhat.com/security/cve/CVE-2024-7885
https://bugzilla.redhat.com/show_bug.cgi?id=2305290
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/blob/182e4ca1543c52f438b0244c930dca3d8b6e68e3/core/src/main/java/io/undertow/server/protocol/proxy/ProxyProtocolReadListener.java
https://github.com/undertow-io/undertow/commit/80c125e09068ac52ed0a9acde266ef12f8ed7ae1
https://github.com/undertow-io/undertow/commit/ce5182c37376982ef0abee34fce0d8c0aab0fab8
https://nvd.nist.gov/vuln/detail/CVE-2024-7885
https://security.netapp.com/advisory/ntap-20241011-0004
https://security.netapp.com/advisory/ntap-20241011-0004/
https://www.cve.org/CVERecord?id=CVE-2024-7885
|
| io.undertow:undertow-core |
CVE-2025-9784 |
HIGH |
2.1.0.Final |
2.2.38.Final, 2.3.20.Final |
https://access.redhat.com/errata/RHSA-2025:23143
https://access.redhat.com/errata/RHSA-2026:0383
https://access.redhat.com/errata/RHSA-2026:0384
https://access.redhat.com/errata/RHSA-2026:0386
https://access.redhat.com/errata/RHSA-2026:33371
https://access.redhat.com/errata/RHSA-2026:33372
https://access.redhat.com/errata/RHSA-2026:3889
https://access.redhat.com/errata/RHSA-2026:3891
https://access.redhat.com/errata/RHSA-2026:3892
https://access.redhat.com/errata/RHSA-2026:4915
https://access.redhat.com/errata/RHSA-2026:4916
https://access.redhat.com/errata/RHSA-2026:4917
https://access.redhat.com/errata/RHSA-2026:4924
https://access.redhat.com/errata/RHSA-2026:76128
https://access.redhat.com/errata/RHSA-2026:76129
https://access.redhat.com/errata/RHSA-2026:76130
https://access.redhat.com/errata/RHSA-2026:76132
https://access.redhat.com/errata/RHSA-2026:76134
https://access.redhat.com/security/cve/CVE-2025-9784
https://bugzilla.redhat.com/show_bug.cgi?id=2392306
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/pull/1778
https://github.com/undertow-io/undertow/pull/1802
https://github.com/undertow-io/undertow/pull/1803
https://github.com/undertow-io/undertow/pull/1804
https://github.com/undertow-io/undertow/pull/1805
https://github.com/undertow-io/undertow/releases/tag/2.2.38.Final
https://issues.redhat.com/browse/UNDERTOW-2598
https://kb.cert.org/vuls/id/767506
https://nvd.nist.gov/vuln/detail/CVE-2025-9784
https://www.cve.org/CVERecord?id=CVE-2025-9784
https://www.kb.cert.org/vuls/id/767506
|
| io.undertow:undertow-core |
CVE-2025-9784 |
HIGH |
2.1.0.Final |
2.2.38.Final, 2.3.20.Final |
https://access.redhat.com/errata/RHSA-2025:23143
https://access.redhat.com/errata/RHSA-2026:0383
https://access.redhat.com/errata/RHSA-2026:0384
https://access.redhat.com/errata/RHSA-2026:0386
https://access.redhat.com/errata/RHSA-2026:33371
https://access.redhat.com/errata/RHSA-2026:33372
https://access.redhat.com/errata/RHSA-2026:3889
https://access.redhat.com/errata/RHSA-2026:3891
https://access.redhat.com/errata/RHSA-2026:3892
https://access.redhat.com/errata/RHSA-2026:4915
https://access.redhat.com/errata/RHSA-2026:4916
https://access.redhat.com/errata/RHSA-2026:4917
https://access.redhat.com/errata/RHSA-2026:4924
https://access.redhat.com/errata/RHSA-2026:76128
https://access.redhat.com/errata/RHSA-2026:76129
https://access.redhat.com/errata/RHSA-2026:76130
https://access.redhat.com/errata/RHSA-2026:76132
https://access.redhat.com/errata/RHSA-2026:76134
https://access.redhat.com/security/cve/CVE-2025-9784
https://bugzilla.redhat.com/show_bug.cgi?id=2392306
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/pull/1778
https://github.com/undertow-io/undertow/pull/1802
https://github.com/undertow-io/undertow/pull/1803
https://github.com/undertow-io/undertow/pull/1804
https://github.com/undertow-io/undertow/pull/1805
https://github.com/undertow-io/undertow/releases/tag/2.2.38.Final
https://issues.redhat.com/browse/UNDERTOW-2598
https://kb.cert.org/vuls/id/767506
https://nvd.nist.gov/vuln/detail/CVE-2025-9784
https://www.cve.org/CVERecord?id=CVE-2025-9784
https://www.kb.cert.org/vuls/id/767506
|
| io.undertow:undertow-core |
CVE-2020-10687 |
MEDIUM |
2.1.0.Final |
2.2.0.Final |
https://access.redhat.com/security/cve/CVE-2020-10687
https://bugzilla.redhat.com/show_bug.cgi?id=1785049
https://lists.apache.org/thread.html/r6603513ea8afbf6857fd77ca5888ec8385d0af493baa4250e28c351c@%3Cdev.cxf.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2020-10687
https://security.netapp.com/advisory/ntap-20220210-0015
https://security.netapp.com/advisory/ntap-20220210-0015/
https://www.cve.org/CVERecord?id=CVE-2020-10687
|
| io.undertow:undertow-core |
CVE-2020-10687 |
MEDIUM |
2.1.0.Final |
2.2.0.Final |
https://access.redhat.com/security/cve/CVE-2020-10687
https://bugzilla.redhat.com/show_bug.cgi?id=1785049
https://lists.apache.org/thread.html/r6603513ea8afbf6857fd77ca5888ec8385d0af493baa4250e28c351c@%3Cdev.cxf.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2020-10687
https://security.netapp.com/advisory/ntap-20220210-0015
https://security.netapp.com/advisory/ntap-20220210-0015/
https://www.cve.org/CVERecord?id=CVE-2020-10687
|
| io.undertow:undertow-core |
CVE-2020-10719 |
MEDIUM |
2.1.0.Final |
2.1.1.Final |
https://access.redhat.com/security/cve/CVE-2020-10719
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10719
https://nvd.nist.gov/vuln/detail/CVE-2020-10719
https://security.netapp.com/advisory/ntap-20220210-0014
https://security.netapp.com/advisory/ntap-20220210-0014/
https://www.cve.org/CVERecord?id=CVE-2020-10719
|
| io.undertow:undertow-core |
CVE-2020-10719 |
MEDIUM |
2.1.0.Final |
2.1.1.Final |
https://access.redhat.com/security/cve/CVE-2020-10719
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10719
https://nvd.nist.gov/vuln/detail/CVE-2020-10719
https://security.netapp.com/advisory/ntap-20220210-0014
https://security.netapp.com/advisory/ntap-20220210-0014/
https://www.cve.org/CVERecord?id=CVE-2020-10719
|
| io.undertow:undertow-core |
CVE-2021-20220 |
MEDIUM |
2.1.0.Final |
2.1.6, 2.0.34 |
https://access.redhat.com/security/cve/CVE-2021-20220
https://bugzilla.redhat.com/show_bug.cgi?id=1923133
https://github.com/undertow-io/undertow/commit/9e797b2f99617fdad0471eaa88c711ee7f44605f
https://nvd.nist.gov/vuln/detail/CVE-2021-20220
https://security.netapp.com/advisory/ntap-20220210-0013
https://security.netapp.com/advisory/ntap-20220210-0013/
https://www.cve.org/CVERecord?id=CVE-2021-20220
|
| io.undertow:undertow-core |
CVE-2021-20220 |
MEDIUM |
2.1.0.Final |
2.1.6, 2.0.34 |
https://access.redhat.com/security/cve/CVE-2021-20220
https://bugzilla.redhat.com/show_bug.cgi?id=1923133
https://github.com/undertow-io/undertow/commit/9e797b2f99617fdad0471eaa88c711ee7f44605f
https://nvd.nist.gov/vuln/detail/CVE-2021-20220
https://security.netapp.com/advisory/ntap-20220210-0013
https://security.netapp.com/advisory/ntap-20220210-0013/
https://www.cve.org/CVERecord?id=CVE-2021-20220
|
| io.undertow:undertow-core |
CVE-2021-3597 |
MEDIUM |
2.1.0.Final |
2.2.9.Final, 2.0.39.Final |
https://access.redhat.com/security/cve/CVE-2021-3597
https://bugzilla.redhat.com/show_bug.cgi?id=1970930
https://github.com/undertow-io/undertow
https://nvd.nist.gov/vuln/detail/CVE-2021-3597
https://security.netapp.com/advisory/ntap-20220804-0003
https://security.netapp.com/advisory/ntap-20220804-0003/
https://www.cve.org/CVERecord?id=CVE-2021-3597
|
| io.undertow:undertow-core |
CVE-2021-3597 |
MEDIUM |
2.1.0.Final |
2.2.9.Final, 2.0.39.Final |
https://access.redhat.com/security/cve/CVE-2021-3597
https://bugzilla.redhat.com/show_bug.cgi?id=1970930
https://github.com/undertow-io/undertow
https://nvd.nist.gov/vuln/detail/CVE-2021-3597
https://security.netapp.com/advisory/ntap-20220804-0003
https://security.netapp.com/advisory/ntap-20220804-0003/
https://www.cve.org/CVERecord?id=CVE-2021-3597
|
| io.undertow:undertow-core |
CVE-2023-1973 |
MEDIUM |
2.1.0.Final |
2.2.32.Final, 2.3.13.Final |
https://access.redhat.com/errata/RHSA-2024:1674
https://access.redhat.com/errata/RHSA-2024:1675
https://access.redhat.com/errata/RHSA-2024:1676
https://access.redhat.com/errata/RHSA-2024:1677
https://access.redhat.com/errata/RHSA-2024:2763
https://access.redhat.com/errata/RHSA-2024:2764
https://access.redhat.com/security/cve/CVE-2023-1973
https://bugzilla.redhat.com/show_bug.cgi?id=2185662
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/commit/0410f3c4d9b39b754a2203a29834cac51da11258
https://github.com/undertow-io/undertow/commit/b289b18bc0ba40c134698a430c70ca1835c51d78
https://nvd.nist.gov/vuln/detail/CVE-2023-1973
https://www.cve.org/CVERecord?id=CVE-2023-1973
|
| io.undertow:undertow-core |
CVE-2023-1973 |
MEDIUM |
2.1.0.Final |
2.2.32.Final, 2.3.13.Final |
https://access.redhat.com/errata/RHSA-2024:1674
https://access.redhat.com/errata/RHSA-2024:1675
https://access.redhat.com/errata/RHSA-2024:1676
https://access.redhat.com/errata/RHSA-2024:1677
https://access.redhat.com/errata/RHSA-2024:2763
https://access.redhat.com/errata/RHSA-2024:2764
https://access.redhat.com/security/cve/CVE-2023-1973
https://bugzilla.redhat.com/show_bug.cgi?id=2185662
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/commit/0410f3c4d9b39b754a2203a29834cac51da11258
https://github.com/undertow-io/undertow/commit/b289b18bc0ba40c134698a430c70ca1835c51d78
https://nvd.nist.gov/vuln/detail/CVE-2023-1973
https://www.cve.org/CVERecord?id=CVE-2023-1973
|
| io.undertow:undertow-core |
CVE-2024-1459 |
MEDIUM |
2.1.0.Final |
2.2.31.Final, 2.3.12.Final |
https://access.redhat.com/errata/RHSA-2024:1674
https://access.redhat.com/errata/RHSA-2024:1675
https://access.redhat.com/errata/RHSA-2024:1676
https://access.redhat.com/errata/RHSA-2024:1677
https://access.redhat.com/errata/RHSA-2024:2763
https://access.redhat.com/errata/RHSA-2024:2764
https://access.redhat.com/security/cve/CVE-2024-1459
https://bugzilla.redhat.com/show_bug.cgi?id=2259475
https://github.com/undertow-io/undertow/commit/40bb3314f013247af8e222870bd5045ca8650c5c
https://github.com/undertow-io/undertow/commit/54f3e4325425c472f5af5fc973e02df83d7a711a
https://github.com/undertow-io/undertow/pull/1556
https://issues.redhat.com/browse/UNDERTOW-2339
https://nvd.nist.gov/vuln/detail/CVE-2024-1459
https://security.netapp.com/advisory/ntap-20241122-0008
https://security.netapp.com/advisory/ntap-20241122-0008/
https://www.cve.org/CVERecord?id=CVE-2024-1459
|
| io.undertow:undertow-core |
CVE-2024-1459 |
MEDIUM |
2.1.0.Final |
2.2.31.Final, 2.3.12.Final |
https://access.redhat.com/errata/RHSA-2024:1674
https://access.redhat.com/errata/RHSA-2024:1675
https://access.redhat.com/errata/RHSA-2024:1676
https://access.redhat.com/errata/RHSA-2024:1677
https://access.redhat.com/errata/RHSA-2024:2763
https://access.redhat.com/errata/RHSA-2024:2764
https://access.redhat.com/security/cve/CVE-2024-1459
https://bugzilla.redhat.com/show_bug.cgi?id=2259475
https://github.com/undertow-io/undertow/commit/40bb3314f013247af8e222870bd5045ca8650c5c
https://github.com/undertow-io/undertow/commit/54f3e4325425c472f5af5fc973e02df83d7a711a
https://github.com/undertow-io/undertow/pull/1556
https://issues.redhat.com/browse/UNDERTOW-2339
https://nvd.nist.gov/vuln/detail/CVE-2024-1459
https://security.netapp.com/advisory/ntap-20241122-0008
https://security.netapp.com/advisory/ntap-20241122-0008/
https://www.cve.org/CVERecord?id=CVE-2024-1459
|
| io.undertow:undertow-core |
CVE-2024-3653 |
MEDIUM |
2.1.0.Final |
2.3.15.Final, 2.2.34.Final |
https://access.redhat.com/errata/RHSA-2024:4392
https://access.redhat.com/errata/RHSA-2024:5143
https://access.redhat.com/errata/RHSA-2024:5144
https://access.redhat.com/errata/RHSA-2024:5145
https://access.redhat.com/errata/RHSA-2024:5147
https://access.redhat.com/errata/RHSA-2024:6437
https://access.redhat.com/security/cve/CVE-2024-3653
https://bugzilla.redhat.com/show_bug.cgi?id=2274437
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/pull/1639
https://github.com/undertow-io/undertow/pull/1640
https://github.com/undertow-io/undertow/pull/1641
https://issues.redhat.com/browse/UNDERTOW-2382
https://nvd.nist.gov/vuln/detail/CVE-2024-3653
https://security.netapp.com/advisory/ntap-20240828-0002/
https://www.cve.org/CVERecord?id=CVE-2024-3653
|
| io.undertow:undertow-core |
CVE-2024-3653 |
MEDIUM |
2.1.0.Final |
2.3.15.Final, 2.2.34.Final |
https://access.redhat.com/errata/RHSA-2024:4392
https://access.redhat.com/errata/RHSA-2024:5143
https://access.redhat.com/errata/RHSA-2024:5144
https://access.redhat.com/errata/RHSA-2024:5145
https://access.redhat.com/errata/RHSA-2024:5147
https://access.redhat.com/errata/RHSA-2024:6437
https://access.redhat.com/security/cve/CVE-2024-3653
https://bugzilla.redhat.com/show_bug.cgi?id=2274437
https://github.com/undertow-io/undertow
https://github.com/undertow-io/undertow/pull/1639
https://github.com/undertow-io/undertow/pull/1640
https://github.com/undertow-io/undertow/pull/1641
https://issues.redhat.com/browse/UNDERTOW-2382
https://nvd.nist.gov/vuln/detail/CVE-2024-3653
https://security.netapp.com/advisory/ntap-20240828-0002/
https://www.cve.org/CVERecord?id=CVE-2024-3653
|
| org.apache.activemq:artemis-cli |
CVE-2023-50780 |
HIGH |
2.10.1 |
2.29.0 |
http://www.openwall.com/lists/oss-security/2024/10/14/2
https://access.redhat.com/security/cve/CVE-2023-50780
https://github.com/apache/activemq-artemis
https://github.com/apache/activemq-artemis/commit/cfb585eaf61d570eecd65c6ad0e92282df7d3869
https://issues.apache.org/jira/browse/ARTEMIS-4150
https://lists.apache.org/thread/63b78shqz312phsx7v1ryr7jv7bprg58
https://nvd.nist.gov/vuln/detail/CVE-2023-50780
https://www.cve.org/CVERecord?id=CVE-2023-50780
|
| org.apache.activemq:artemis-commons |
CVE-2020-10727 |
MEDIUM |
2.10.1 |
2.13.0 |
https://access.redhat.com/security/cve/CVE-2020-10727
https://bugzilla.redhat.com/show_bug.cgi?id=1827200
https://github.com/apache/artemis
https://issues.redhat.com/browse/ENTMQBR-3435
https://nvd.nist.gov/vuln/detail/CVE-2020-10727
https://security.netapp.com/advisory/ntap-20210827-0001
https://security.netapp.com/advisory/ntap-20210827-0001/
https://www.cve.org/CVERecord?id=CVE-2020-10727
|
| org.apache.activemq:artemis-commons |
CVE-2020-10727 |
MEDIUM |
2.10.1 |
2.13.0 |
https://access.redhat.com/security/cve/CVE-2020-10727
https://bugzilla.redhat.com/show_bug.cgi?id=1827200
https://github.com/apache/artemis
https://issues.redhat.com/browse/ENTMQBR-3435
https://nvd.nist.gov/vuln/detail/CVE-2020-10727
https://security.netapp.com/advisory/ntap-20210827-0001
https://security.netapp.com/advisory/ntap-20210827-0001/
https://www.cve.org/CVERecord?id=CVE-2020-10727
|
| org.apache.activemq:artemis-core-client |
CVE-2022-23913 |
HIGH |
2.10.1 |
2.19.1 |
https://access.redhat.com/security/cve/CVE-2022-23913
https://github.com/apache/activemq-artemis
https://github.com/apache/activemq-artemis/pull/3862
https://github.com/apache/activemq-artemis/pull/3862/commits/1f92368240229b8f5db92a92a72c703faf83e9b7
https://github.com/apache/activemq-artemis/pull/3871
https://github.com/apache/activemq-artemis/pull/3871/commits/153d2e9a979aead8dff95fbc91d659ecc7d0fb82
https://github.com/github/codeql-java-CVE-coverage/issues/1061
https://issues.apache.org/jira/browse/ARTEMIS-3593
https://lists.apache.org/thread/fjynj57rd99s814rdn5hzvmx8lz403q2
https://nvd.nist.gov/vuln/detail/CVE-2022-23913
https://security.netapp.com/advisory/ntap-20220303-0003
https://security.netapp.com/advisory/ntap-20220303-0003/
https://www.cve.org/CVERecord?id=CVE-2022-23913
|
| org.apache.activemq:artemis-core-client |
CVE-2022-23913 |
HIGH |
2.10.1 |
2.19.1 |
https://access.redhat.com/security/cve/CVE-2022-23913
https://github.com/apache/activemq-artemis
https://github.com/apache/activemq-artemis/pull/3862
https://github.com/apache/activemq-artemis/pull/3862/commits/1f92368240229b8f5db92a92a72c703faf83e9b7
https://github.com/apache/activemq-artemis/pull/3871
https://github.com/apache/activemq-artemis/pull/3871/commits/153d2e9a979aead8dff95fbc91d659ecc7d0fb82
https://github.com/github/codeql-java-CVE-coverage/issues/1061
https://issues.apache.org/jira/browse/ARTEMIS-3593
https://lists.apache.org/thread/fjynj57rd99s814rdn5hzvmx8lz403q2
https://nvd.nist.gov/vuln/detail/CVE-2022-23913
https://security.netapp.com/advisory/ntap-20220303-0003
https://security.netapp.com/advisory/ntap-20220303-0003/
https://www.cve.org/CVERecord?id=CVE-2022-23913
|
| org.apache.activemq:artemis-core-client |
CVE-2021-4040 |
MEDIUM |
2.10.1 |
2.19.1 |
https://access.redhat.com/security/cve/CVE-2021-4040
https://bugzilla.redhat.com/show_bug.cgi?id=2028254
https://github.com/apache/activemq-artemis
https://github.com/apache/activemq-artemis/pull/3862
https://github.com/apache/activemq-artemis/pull/3871
https://github.com/apache/activemq-artemis/pull/3871/commits
https://github.com/apache/activemq-artemis/pull/3871/commits/153d2e9a979aead8dff95fbc91d659ecc7d0fb82
https://issues.apache.org/jira/browse/ARTEMIS-3593
https://nvd.nist.gov/vuln/detail/CVE-2021-4040
https://www.cve.org/CVERecord?id=CVE-2021-4040
|
| org.apache.activemq:artemis-core-client |
CVE-2021-4040 |
MEDIUM |
2.10.1 |
2.19.1 |
https://access.redhat.com/security/cve/CVE-2021-4040
https://bugzilla.redhat.com/show_bug.cgi?id=2028254
https://github.com/apache/activemq-artemis
https://github.com/apache/activemq-artemis/pull/3862
https://github.com/apache/activemq-artemis/pull/3871
https://github.com/apache/activemq-artemis/pull/3871/commits
https://github.com/apache/activemq-artemis/pull/3871/commits/153d2e9a979aead8dff95fbc91d659ecc7d0fb82
https://issues.apache.org/jira/browse/ARTEMIS-3593
https://nvd.nist.gov/vuln/detail/CVE-2021-4040
https://www.cve.org/CVERecord?id=CVE-2021-4040
|
| org.apache.activemq:artemis-server |
CVE-2022-35278 |
MEDIUM |
2.10.1 |
2.24.0 |
https://access.redhat.com/security/cve/CVE-2022-35278
https://lists.apache.org/thread/bh6y81wtotg75337bpvxcjy436zfgf3n
https://nvd.nist.gov/vuln/detail/CVE-2022-35278
https://security.netapp.com/advisory/ntap-20221209-0005
https://security.netapp.com/advisory/ntap-20221209-0005/
https://www.cve.org/CVERecord?id=CVE-2022-35278
|
| org.apache.activemq:artemis-server |
CVE-2025-27427 |
LOW |
2.10.1 |
2.40.0 |
http://www.openwall.com/lists/oss-security/2025/03/31/1
https://access.redhat.com/security/cve/CVE-2025-27427
https://github.com/apache/activemq-artemis
https://github.com/apache/activemq-artemis/commit/2216a75a57f098295abb283d556c8b8bda91324d
https://github.com/apache/activemq-artemis/commit/6ab458015689303db8878941abe1bc973299fc2e
https://issues.apache.org/jira/browse/ARTEMIS-5346
https://lists.apache.org/thread/8dzlm2vkqphyrnkrby8r8kzndsm5o6x8
https://nvd.nist.gov/vuln/detail/CVE-2025-27427
https://www.cve.org/CVERecord?id=CVE-2025-27427
|
| org.apache.avro:avro |
CVE-2024-47561 |
CRITICAL |
1.7.6 |
1.11.4 |
http://www.openwall.com/lists/oss-security/2024/10/03/1
https://access.redhat.com/security/cve/CVE-2024-47561
https://advisory.echohq.com/cve/CVE-2024-47561
https://github.com/advisories/GHSA-r7pg-v2c8-mfg3
https://github.com/apache/avro
https://github.com/apache/avro/commit/8f89868d29272e3afea2ff8de8c85cb81a57d900
https://github.com/apache/avro/commit/f6b3bd7e50e6e09fedddb98c61558c022ba31285
https://github.com/apache/avro/pull/2934
https://github.com/apache/avro/pull/2980
https://issues.apache.org/jira/browse/AVRO-3985
https://lists.apache.org/thread/c2v7mhqnmq0jmbwxqq3r5jbj1xg43h5x
https://nvd.nist.gov/vuln/detail/CVE-2024-47561
https://security.netapp.com/advisory/ntap-20241011-0003
https://security.netapp.com/advisory/ntap-20241011-0003/
https://thehackernews.com/2024/10/critical-apache-avro-sdk-flaw-allows.html
https://www.cve.org/CVERecord?id=CVE-2024-47561
https://www.openwall.com/lists/oss-security/2024/10/03/1
|
| org.apache.avro:avro |
CVE-2023-39410 |
HIGH |
1.7.6 |
1.11.3 |
http://www.openwall.com/lists/oss-security/2023/09/29/6
https://access.redhat.com/security/cve/CVE-2023-39410
https://advisory.echohq.com/cve/CVE-2023-39410
https://github.com/advisories/GHSA-rhrv-645h-fjfh
https://github.com/apache/avro
https://github.com/apache/avro/commit/a12a7e44ddbe060c3dc731863cad5c15f9267828
https://github.com/pypa/advisory-database/tree/main/vulns/avro/PYSEC-2023-188.yaml
https://issues.apache.org/jira/browse/AVRO-3819
https://lists.apache.org/thread/q142wj99cwdd0jo5lvdoxzoymlqyjdds
https://nvd.nist.gov/vuln/detail/CVE-2023-39410
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://www.cve.org/CVERecord?id=CVE-2023-39410
https://www.openwall.com/lists/oss-security/2023/09/29/6
|
| org.apache.commons:commons-lang3 |
CVE-2025-48924 |
MEDIUM |
3.9 |
3.18.0 |
http://www.openwall.com/lists/oss-security/2025/07/11/1
https://access.redhat.com/security/cve/CVE-2025-48924
https://advisory.echohq.com/cve/CVE-2025-48924
https://github.com/apache/commons-lang
https://github.com/apache/commons-lang/commit/b424803abdb2bec818e4fbcb251ce031c22aca53
https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1
https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html
https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html
https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html
https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html
https://nvd.nist.gov/vuln/detail/CVE-2025-48924
https://ubuntu.com/security/notices/USN-8364-1
https://www.cve.org/CVERecord?id=CVE-2025-48924
https://www.openwall.com/lists/oss-security/2025/07/11/1
|
| org.apache.cxf:cxf-core |
CVE-2022-46364 |
CRITICAL |
3.3.6 |
3.4.10, 3.5.5 |
https://access.redhat.com/security/cve/CVE-2022-46364
https://cxf.apache.org/security-advisories.data/CVE-2022-46364.txt?version=1&modificationDate=1670944472739&api=v2
https://nvd.nist.gov/vuln/detail/CVE-2022-46364
https://www.cve.org/CVERecord?id=CVE-2022-46364
|
| org.apache.cxf:cxf-core |
CVE-2026-49875 |
CRITICAL |
3.3.6 |
4.2.2, 4.1.7, 3.6.12 |
http://www.openwall.com/lists/oss-security/2026/06/11/2
https://access.redhat.com/errata/RHSA-2026:36839
https://access.redhat.com/errata/RHSA-2026:37390
https://access.redhat.com/security/cve/CVE-2026-49875
https://advisory.echohq.com/cve/CVE-2026-49875
https://bugzilla.redhat.com/show_bug.cgi?id=2488309
https://cxf.apache.org/security-advisories.data/CVE-2026-49875.txt
https://github.com/advisories/GHSA-xw5h-cmh3-8j6j
https://github.com/apache/cxf
https://lists.apache.org/thread/3kb9w5bg90xcp06fccoz9k3gpsvyy79o
https://nvd.nist.gov/vuln/detail/CVE-2026-49875
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-49875.json
https://www.cve.org/CVERecord?id=CVE-2026-49875
|
| org.apache.cxf:cxf-core |
CVE-2022-46363 |
HIGH |
3.3.6 |
3.4.10, 3.5.5 |
https://access.redhat.com/security/cve/CVE-2022-46363
https://github.com/apache/cxf
https://lists.apache.org/thread/pdzo1qgyplf4y523tnnzrcm7hoco3l8c
https://nvd.nist.gov/vuln/detail/CVE-2022-46363
https://www.cve.org/CVERecord?id=CVE-2022-46363
|
| org.apache.cxf:cxf-core |
CVE-2025-23184 |
HIGH |
3.3.6 |
3.5.10, 3.6.5, 4.0.6 |
http://www.openwall.com/lists/oss-security/2025/01/20/3
https://access.redhat.com/security/cve/CVE-2025-23184
https://github.com/apache/cxf
https://github.com/apache/cxf/pull/2048
https://github.com/apache/cxf/pull/2111
https://issues.apache.org/jira/browse/CXF-7396
https://lists.apache.org/thread/lfs8l63rnctnj2skfrxyys7v8fgnt122
https://nvd.nist.gov/vuln/detail/CVE-2025-23184
https://security.netapp.com/advisory/ntap-20250214-0003
https://security.netapp.com/advisory/ntap-20250214-0003/
https://www.cve.org/CVERecord?id=CVE-2025-23184
https://www.vicarius.io/vsociety/posts/cve-2025-23184-detect-apache-cxf-vulnerability
https://www.vicarius.io/vsociety/posts/cve-2025-23184-mitigate-apache-cxf-vulnerability
|
| org.apache.cxf:cxf-core |
CVE-2026-50645 |
HIGH |
3.3.6 |
4.2.2, 4.1.7, 3.6.12 |
http://www.openwall.com/lists/oss-security/2026/06/11/12
https://advisory.echohq.com/cve/CVE-2026-50645
https://cxf.apache.org/security-advisories.data/CVE-2026-50645.txt
https://github.com/advisories/GHSA-ghvc-7hp8-2g2v
https://github.com/apache/cxf
https://lists.apache.org/thread/24zb7cqcvykhwm0j797dmdq25s61mj93
https://nvd.nist.gov/vuln/detail/CVE-2026-50645
|
| org.apache.cxf:cxf-core |
CVE-2025-48795 |
MEDIUM |
3.3.6 |
3.5.11, 3.6.6, 4.0.7, 4.1.1 |
http://www.openwall.com/lists/oss-security/2025/07/15/3
https://access.redhat.com/security/cve/CVE-2025-48795
https://github.com/apache/cxf
https://github.com/apache/cxf/commit/1c1d687f8e295f433a3592a3bc0b0a63c432bfde
https://github.com/apache/cxf/pull/2258
https://lists.apache.org/thread/vo5qv02mvv5plmb6z2xf1ktjmrpv3jmn
https://nvd.nist.gov/vuln/detail/CVE-2025-48795
https://www.cve.org/CVERecord?id=CVE-2025-48795
|
| org.apache.cxf:cxf-rt-databinding-aegis |
CVE-2024-28752 |
CRITICAL |
3.3.6 |
3.5.8, 3.6.3, 4.0.4 |
http://www.openwall.com/lists/oss-security/2024/03/14/3
https://access.redhat.com/security/cve/CVE-2024-28752
https://cxf.apache.org/security-advisories.data/CVE-2024-28752.txt
https://github.com/advisories/GHSA-qmgx-j96g-4428
https://github.com/apache/cxf
https://github.com/apache/cxf/commit/d0baeb3ee64c6d7c883bd2f5c4cb0de6b0b5f463
https://nvd.nist.gov/vuln/detail/CVE-2024-28752
https://security.netapp.com/advisory/ntap-20240517-0001
https://security.netapp.com/advisory/ntap-20240517-0001/
https://www.cve.org/CVERecord?id=CVE-2024-28752
|
| org.apache.cxf:cxf-rt-transports-jms |
CVE-2026-50632 |
CRITICAL |
3.3.6 |
4.2.2, 4.1.7, 3.6.12 |
https://access.redhat.com/errata/RHSA-2026:37390
https://access.redhat.com/security/cve/CVE-2026-50632
https://advisory.echohq.com/cve/CVE-2026-50632
https://bugzilla.redhat.com/show_bug.cgi?id=2488304
https://github.com/apache/cxf
https://lists.apache.org/thread/740ghch5z5y675cn2kzgtyo5k37n6qcw
https://nvd.nist.gov/vuln/detail/CVE-2026-50632
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50632.json
https://www.cve.org/CVERecord?id=CVE-2026-50632
|
| org.apache.cxf:cxf-rt-transports-jms |
CVE-2026-44417 |
HIGH |
3.3.6 |
4.2.1, 4.1.6, 3.6.11 |
https://access.redhat.com/errata/RHSA-2026:37390
https://access.redhat.com/security/cve/CVE-2026-44417
https://bugzilla.redhat.com/show_bug.cgi?id=2480729
https://github.com/apache/cxf
https://lists.apache.org/thread/bqg6gjy2cx7rfyqjxcpv3jwjvmclvz4o
https://nvd.nist.gov/vuln/detail/CVE-2026-44417
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44417.json
https://www.cve.org/CVERecord?id=CVE-2026-44417
|
| org.apache.cxf:cxf-rt-transports-jms |
CVE-2025-48913 |
MEDIUM |
3.3.6 |
3.6.8, 4.0.9, 4.1.3 |
http://www.openwall.com/lists/oss-security/2025/08/07/2
https://access.redhat.com/security/cve/CVE-2025-48913
https://github.com/apache/cxf
https://github.com/apache/cxf/commit/24e50ffeca3132570c2f297c5c7dbd05a1bb1bfa
https://github.com/mbhatt1/disclosures/security/advisories/GHSA-hv69-h8rg-7jg2
https://lists.apache.org/thread/f1nv488ztc0js4g5ml2v88mzkzslyh83
https://nvd.nist.gov/vuln/detail/CVE-2025-48913
https://www.cve.org/CVERecord?id=CVE-2025-48913
|
| org.apache.httpcomponents:httpclient |
CVE-2020-13956 |
MEDIUM |
4.5.11 |
4.5.13, 5.0.3 |
https://access.redhat.com/security/cve/CVE-2020-13956
https://advisory.echohq.com/cve/CVE-2020-13956
https://bugzilla.redhat.com/show_bug.cgi?id=1886587
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13956
https://errata.almalinux.org/8/ALSA-2022-1861.html
https://errata.rockylinux.org/RLSA-2022:1861
https://github.com/advisories/GHSA-7r82-7xv7-xcpj
https://github.com/apache/httpcomponents-client
https://linux.oracle.com/cve/CVE-2020-13956.html
https://linux.oracle.com/errata/ELSA-2022-1861.html
https://lists.apache.org/thread.html/r03bbc318c81be21f5c8a9b85e34f2ecc741aa804a8e43b0ef2c37749@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/r043a75acdeb52b15dd5e9524cdadef4202e6a5228644206acf9363f9@%3Cdev.hive.apache.org%3E
https://lists.apache.org/thread.html/r06cf3ca5c8ceb94b39cd24a73d4e96153b485a7dac88444dd876accb@%3Cissues.drill.apache.org%3E
https://lists.apache.org/thread.html/r0a75b8f0f72f3e18442dc56d33f3827b905f2fe5b7ba48997436f5d1@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r0bebe6f9808ac7bdf572873b4fa96a29c6398c90dab29f131f3ebffe@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r12cb62751b35bdcda0ae2a08b67877d665a1f4d41eee0fa7367169e0@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/r132e4c6a560cfc519caa1aaee63bdd4036327610eadbd89f76dd5457@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r2835543ef0f91adcc47da72389b816e36936f584c7be584d2314fac3@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/r2a03dc210231d7e852ef73015f71792ac0fcaca6cccc024c522ef17d@%3Ccommits.creadur.apache.org%3E
https://lists.apache.org/thread.html/r2dc7930b43eadc78220d269b79e13ecd387e4bee52db67b2f47d4303@%3Cgitbox.hive.apache.org%3E
https://lists.apache.org/thread.html/r34178ab6ef106bc940665fd3f4ba5026fac3603b3fa2aefafa0b619d@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/r34efec51cb817397ccf9f86e25a75676d435ba5f83ee7b2eabdad707@%3Ccommits.creadur.apache.org%3E
https://lists.apache.org/thread.html/r3cecd59fba74404cbf4eb430135e1080897fb376f111406a78bed13a@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/r3f740e4c38bba1face49078aa5cbeeb558c27be601cc9712ad2dcd1e@%3Ccommits.creadur.apache.org%3E
https://lists.apache.org/thread.html/r4850b3fbaea02fde2886e461005e4af8d37c80a48b3ce2a6edca0e30@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r549ac8c159bf0c568c19670bedeb8d7c0074beded951d34b1c1d0d05@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r55b2a1d1e9b1ec9db792b93da8f0f99a4fd5a5310b02673359d9b4d1@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r5b55f65c123a7481104d663a915ec45a0d103e6aaa03f42ed1c07a89@%3Cdev.jackrabbit.apache.org%3E
https://lists.apache.org/thread.html/r5de3d3808e7b5028df966e45115e006456c4e8931dc1e29036f17927@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r5fec9c1d67f928179adf484b01e7becd7c0a6fdfe3a08f92ea743b90@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r63296c45d5d84447babaf39bd1487329d8a80d8d563e67a4b6f3d8a7@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/r69a94e2f302d1b778bdfefe90fcb4b8c50b226438c3c8c1d0de85a19@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/r6a3cda38d050ebe13c1bc9a28d0a8ec38945095d07eca49046bcb89f@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r6d672b46622842e565e00f6ef6bef83eb55d8792aac2bee75bff9a2a@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/r6dab7da30f8bf075f79ee189e33b45a197502e2676481bb8787fc0d7@%3Cdev.hc.apache.org%3E
https://lists.apache.org/thread.html/r6eb2dae157dbc9af1f30d1f64e9c60d4ebef618f3dce4a0e32d6ea4d@%3Ccommits.drill.apache.org%3E
https://lists.apache.org/thread.html/r70c429923100c5a4fae8e5bc71c8a2d39af3de4888f50a0ac3755e6f@%3Ccommits.creadur.apache.org%3E
https://lists.apache.org/thread.html/r87ddc09295c27f25471269ad0a79433a91224045988b88f0413a97ec@%3Cissues.bookkeeper.apache.org%3E
https://lists.apache.org/thread.html/r8aa1e5c343b89aec5b69961471950e862f15246cb6392910161c389b@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/r9e52a6c72c8365000ecd035e48cc9fee5a677a150350d4420c46443d@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/ra539f20ef0fb0c27ee39945b5f56bf162e5c13d1c60f7344dab8de3b@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/ra8bc6b61c5df301a6fe5a716315528ecd17ccb8a7f907e24a47a1a5e@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/rad6222134183046f3928f733bf680919e0c390739bfbfe6c90049673@%3Cissues.drill.apache.org%3E
https://lists.apache.org/thread.html/rae14ae25ff4a60251e3ba2629c082c5ba3851dfd4d21218b99b56652@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/rb33212dab7beccaf1ffef9b88610047c644f644c7a0ebdc44d77e381@%3Ccommits.turbine.apache.org%3E
https://lists.apache.org/thread.html/rb4ba262d6f08ab9cf8b1ebbcd9b00b0368ffe90dad7ad7918b4b56fc@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/rb725052404fabffbe093c83b2c46f3f87e12c3193a82379afbc529f8@%3Csolr-user.lucene.apache.org%3E
https://lists.apache.org/thread.html/rc0863892ccfd9fd0d0ae10091f24ee769fb39b8957fe4ebabfc11f17@%3Cdev.jackrabbit.apache.org%3E
https://lists.apache.org/thread.html/rc3739e0ad4bcf1888c6925233bfc37dd71156bbc8416604833095c42@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/rc505fee574fe8d18f9b0c655a4d120b0ae21bb6a73b96003e1d9be35@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/rc5c6ccb86d2afe46bbd4b71573f0448dc1f87bbcd5a0d8c7f8f904b2@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/rc990e2462ec32b09523deafb2c73606208599e196fa2d7f50bdbc587@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/rcced7ed3237c29cd19c1e9bf465d0038b8b2e967b99fc283db7ca553@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/rcd9ad5dda60c82ab0d0c9bd3e9cb1dc740804451fc20c7f451ef5cc4@%3Cgitbox.hive.apache.org%3E
https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/rd5ab56beb2ac6879f6ab427bc4e5f7691aed8362d17b713f61779858@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/re504acd4d63b8df2a7353658f45c9a3137e5f80e41cf7de50058b2c1@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/rea3dbf633dde5008d38bf6600a3738b9216e733e03f9ff7becf79625@%3Cissues.drill.apache.org%3E
https://lists.apache.org/thread.html/ree942561f4620313c75982a4e5f3b74fe6f7062b073210779648eec2@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/reef569c2419705754a3acf42b5f19b2a158153cef0e448158bc54917@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/rf03228972e56cb4a03e6d9558188c2938078cf3ceb23a3fead87c9ca@%3Cissues.bookkeeper.apache.org%3E
https://lists.apache.org/thread.html/rf43d17ed0d1fb4fb79036b582810ef60b18b1ef3add0d5dea825af1e@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/rf4db88c22e1be9eb60c7dc623d0528642c045fb196a24774ac2fa3a3@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/rf7ca60f78f05b772cc07d27e31bcd112f9910a05caf9095e38ee150f@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/rfb35f6db9ba1f1e061b63769a4eff5abadcc254ebfefc280e5a0dcf1@%3Ccommits.creadur.apache.org%3E
https://lists.apache.org/thread.html/rfbedcb586a1e7dfce87ee03c720e583fc2ceeafa05f35c542cecc624@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/rfc00884c7b7ca878297bffe45fcb742c362b00b26ba37070706d44c3@%3Cissues.hive.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2020-13956
https://priyankn.github.io/2021-02-26-CVE-2020-13956/
https://security.netapp.com/advisory/ntap-20220210-0002
https://security.netapp.com/advisory/ntap-20220210-0002/
https://ubuntu.com/security/notices/USN-5239-1
https://www.cve.org/CVERecord?id=CVE-2020-13956
https://www.openwall.com/lists/oss-security/2020/10/08/4
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| org.apache.neethi:neethi |
CVE-2026-42402 |
HIGH |
3.1.1 |
3.2.2 |
http://www.openwall.com/lists/oss-security/2026/05/01/6
https://access.redhat.com/security/cve/CVE-2026-42402
https://advisory.echohq.com/cve/CVE-2026-42402
https://github.com/apache/ws-neethi
https://lists.apache.org/thread/p826j0phhmr9f83wzpmys1y0bdfrr2q4
https://nvd.nist.gov/vuln/detail/CVE-2026-42402
https://www.cve.org/CVERecord?id=CVE-2026-42402
|
| org.apache.neethi:neethi |
CVE-2026-42403 |
HIGH |
3.1.1 |
3.2.2 |
http://www.openwall.com/lists/oss-security/2026/05/01/7
https://access.redhat.com/security/cve/CVE-2026-42403
https://advisory.echohq.com/cve/CVE-2026-42403
https://github.com/apache/ws-neethi
https://lists.apache.org/thread/zm6t8skkkskjwk1881l4m4n0l7dqclzo
https://nvd.nist.gov/vuln/detail/CVE-2026-42403
https://www.cve.org/CVERecord?id=CVE-2026-42403
|
| org.apache.neethi:neethi |
CVE-2026-42404 |
MEDIUM |
3.1.1 |
3.2.2 |
http://www.openwall.com/lists/oss-security/2026/05/01/8
https://access.redhat.com/security/cve/CVE-2026-42404
https://advisory.echohq.com/cve/CVE-2026-42404
https://github.com/apache/ws-neethi
https://lists.apache.org/thread/zdspnt64zznyjyn648553kptx69w23oq
https://nvd.nist.gov/vuln/detail/CVE-2026-42404
https://www.cve.org/CVERecord?id=CVE-2026-42404
|
| org.apache.santuario:xmlsec |
CVE-2021-40690 |
HIGH |
2.1.4 |
2.2.3, 2.1.7 |
https://access.redhat.com/security/cve/CVE-2021-40690
https://lists.apache.org/thread.html/r3b3f5ba9b0de8c9c125077b71af06026d344a709a8ba67db81ee9faa@%3Ccommits.tomee.apache.org%3E
https://lists.apache.org/thread.html/r401ecb7274794f040cd757b259ebe3e8c463ae74f7961209ccad3c59@%3Cissues.cxf.apache.org%3E
https://lists.apache.org/thread.html/r8848751b6a5dd78cc9e99d627e74fecfaffdfa1bb615dce827aad633@%3Cdev.santuario.apache.org%3E
https://lists.apache.org/thread.html/r8a5c0ce9014bd07303aec1e5eed55951704878016465d3dae00e0c28@%3Ccommits.tomee.apache.org%3E
https://lists.apache.org/thread.html/r9c100d53c84d54cf71975e3f0cfcc2856a8846554a04c99390156ce4@%3Ccommits.tomee.apache.org%3E
https://lists.apache.org/thread.html/raf352f95c19c0c4051af3180752cb69acbea88d0d066ab176c6170e8@%3Cuser.poi.apache.org%3E
https://lists.apache.org/thread.html/rbbbac0759b12472abd0c278d32b5e0867bb21934df8e14e5e641597c@%3Ccommits.tomee.apache.org%3E
https://lists.apache.org/thread.html/rbdac116aef912b563da54f4c152222c0754e32fb2f785519ac5e059f@%3Ccommits.tomee.apache.org%3E
https://lists.apache.org/thread.html/re294cfc61f509512874ea514d8d64fd276253d54ac378ffa7a4880c8@%3Ccommits.tomee.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/09/msg00015.html
https://nvd.nist.gov/vuln/detail/CVE-2021-40690
https://santuario.apache.org/secadv.data/CVE-2021-40690.txt.asc
https://security.netapp.com/advisory/ntap-20230818-0002
https://security.netapp.com/advisory/ntap-20230818-0002/
https://ubuntu.com/security/notices/USN-5525-1
https://www.cve.org/CVERecord?id=CVE-2021-40690
https://www.debian.org/security/2021/dsa-5010
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
|
| org.apache.santuario:xmlsec |
CVE-2023-44483 |
MEDIUM |
2.1.4 |
2.3.4, 2.2.6, 3.0.3 |
http://www.openwall.com/lists/oss-security/2023/10/20/5
https://access.redhat.com/security/cve/CVE-2023-44483
https://github.com/apache/santuario-java
https://lists.apache.org/thread/vmqbp9mfxtrf0kmbnnmbn3h9j6dr9q55
https://nvd.nist.gov/vuln/detail/CVE-2023-44483
https://santuario.apache.org/secadv.data/CVE-2023-44483.txt.asc?version=1&modificationDate=1697782758000&api=v2
https://security.netapp.com/advisory/ntap-20241108-0002
https://security.netapp.com/advisory/ntap-20241108-0002/
https://www.cve.org/CVERecord?id=CVE-2023-44483
|
| org.apache.thrift:libthrift |
CVE-2020-13949 |
HIGH |
0.13.0 |
0.14.0 |
https://access.redhat.com/security/cve/CVE-2020-13949
https://advisory.echohq.com/cve/CVE-2020-13949
https://github.com/advisories/GHSA-g2fg-mr77-6vrm
https://github.com/apache/hbase
https://github.com/apache/hbase/pull/2958
https://lists.apache.org/thread.html/r01b34416677f1ba869525e1b891ac66fa6f88c024ee4d7cdea6b456b@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r02ba8db500d15a5949e9a7742815438002ba1cf1b361bdda52ed40ca@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r02f7771863383ae993eb83cdfb70c3cb65a355c913242c850f61f1b8@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r0372f0af2dad0b76fbd7a6cfdaad29d50384ad48dda475a5026ff9a3@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r08a7bd19470ef8950d58cc9d9e7b02bc69c43f56c601989a7729cce5@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r1084a911dff90b2733b442ee0f5929d19b168035d447f2d25f534fe4@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r117d5d2b08d505b69558a2a31b0a1cf8990cd0385060b147e70e76a9@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r12090c81b67d21a814de6cf54428934a5e5613fde222759bbb05e99b@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r13f40151513ff095a44a86556c65597a7e55c00f5e19764a05530266@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r143ca388b0c83fe659db14be76889d50b453b0ee06f423181f736933@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r1456eab5f3768be69436d5b0a68b483eb316eb85eb3ef6eba156a302@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r1504886a550426d3c05772c47b1a6350c3235e51fd1fdffbec43e974@%3Cuser.thrift.apache.org%3E
https://lists.apache.org/thread.html/r15eed5d21e16a5cce810c1e096ffcffc36cd08c2f78ce2f9b24b4a6a@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r179119bbfb5610499286a84c316f6789c5afbfa5340edec6eb28d027@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r17cca685ad53bc8300ee7fcfe874cb784a222343f217dd076e7dc1b6@%3Ccommits.camel.apache.org%3E
https://lists.apache.org/thread.html/r18732bb1343894143d68db58fe4c8f56d9cd221b37f1378ed7373372@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r191a9279e2863b68e5496ee4ecd8be0d4fe43b324b934f0d1f106e1d@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r196409cc4df929d540a2e66169104f2b3b258d8bd96b5f083c59ee51@%3Ccommits.camel.apache.org%3E
https://lists.apache.org/thread.html/r1d4a247329a8478073163567bbc8c8cb6b49c6bfc2bf58153a857af1@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r1dea91f0562e0a960b45b1c5635b2a47b258b77171334276bcf260a7@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r1fb2d26b81c64ce96c4fd42b9e6842ff315b02c36518213b6c057350@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r20f6f8f8cf07986dc5304baed3bf4d8a1c4cf135ff6fe3640be4d7ec@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r278e96edc4bc13efb2cb1620a73e48f569162b833c6bda3e6ea18b80@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r27b7d3d95ffa8498899ef1c9de553d469f8fe857640a3f6e58dba640@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r286e9a13d3ab0550042997219101cb87871834b8d5ec293b0c60f009@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r298a25228868ebc0943d56c8f3641212a0962d2dbcf1507d5860038e@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r2d180180f37c2ab5cebd711d080d01d8452efa8ad43c5d9cd7064621@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r2ed66a3823990306b742b281af1834b9bc85f98259c870b8ffb13d93@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r2f6a547f226579f542eb08793631d1f2d47d7aed7e2f9d11a4e6af9f@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r3550b61639688e0efbc253c6c3e6358851c1f053109f1c149330b535@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r36581cc7047f007dd6aadbdd34e18545ec2c1eb7ccdae6dd47a877a9@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r3a1291a7ab8ee43db87cb0253371489810877028fc6e7c68dc640926@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r3de0e0c26d4bd00dd28cab27fb44fba11d1c1d20275f7cce71393dd1@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r3e31ec7e8c39db7553be4f4fd4d27cf27c41f1ba9c985995c4ea9c5a@%3Cnotifications.thrift.apache.org%3E
https://lists.apache.org/thread.html/r3f3e1d562c528b4bafef2dde51f79dd444a4b68ef24920d68068b6f9@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r3f97dbbbb1b2a7324521208bb595392853714e141a37b8f68d395835@%3Cnotifications.thrift.apache.org%3E
https://lists.apache.org/thread.html/r409e296c890753296c544a74d4de0d4a3ce719207a5878262fa2bd71@%3Ccommits.hbase.apache.org%3E
https://lists.apache.org/thread.html/r421a9a76811c1aed7637b5fe5376ab14c09ccdd7b70d5211d6e76d1e@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r43dc2b2e928e9d845b07ac075634cb759d91bb852421dc282f87a74a@%3Cdev.thrift.apache.org%3E
https://lists.apache.org/thread.html/r449288f6a941a2585262e0f4454fdefe169d5faee33314f6f89fab30@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r4d90b6d8de9697beb38814596d3a0d4994fa9aba1f6731a2c648d3ae@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r4fa53eacca2ac38904f38dc226caebb3f2f668b2da887f2fd416f4a7@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r515e01a30443cfa2dbb355c44c63149869afd684fb7b0344c58fa67b@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r533a172534ae67f6f17c4d33a1b814d3d5ada9ccd4eb442249f33fa2@%3Ccommits.camel.apache.org%3E
https://lists.apache.org/thread.html/r587b4a5bcbc290269df0906bafba074f3fe4e50d4e959212f56fa7ea@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r62aa6d07b23095d980f348d330ed766560f9a9e940fec051f534ce37@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r635133a74fa07ef3331cae49a9a088365922266edd58099a6162a5d3@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r668aed02e287c93403e0b8df16089011ee4a96afc8f479809f1fc07f@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r6990c849aeafe65366794bfd002febd47b7ffa8cf3c059b400bbb11d@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r699c031e6921b0ad0f943848e7ba1d0e88c953619d47908618998f76@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r6ae3c68b0bfe430fb32f24236475276b6302bed625b23f53b68748b5@%3Cuser.thrift.apache.org%3E
https://lists.apache.org/thread.html/r6ba4f0817f98bf7c1cb314301cb7a24ba11a0b3e7a5be8b0ae3190b0@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r6c5b7324274fd361b038c5cc316e99344b7ae20beae7163214fac14d@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r72c3d1582d50b2ca7dd1ee97e81c847a5cf3458be26d42653c39d7a6@%3Ccommits.camel.apache.org%3E
https://lists.apache.org/thread.html/r741364444c3b238ab4a161f67f0d3a8f68acc517a39e6a93aa85d753@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r74eb88b422421c65514c23cb9c2b2216efb9254317ea1b6a264fe6dc@%3Ccommits.hbase.apache.org%3E
https://lists.apache.org/thread.html/r7597683cc8b87a31ec864835225a543dad112d7841bf1f17bf7eb8db@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r7ae909438ff5a2ffed9211e6ab0bd926396fd0b1fc33f31a406ee704@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r812915ecfa541ad2ca65c68a97b2c014dc87141dfaefc4de85049681@%3Ccommits.camel.apache.org%3E
https://lists.apache.org/thread.html/r850522c56c05aa06391546bdb530bb8fc3437f2b77d16e571ae73309@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r869331422580d35b4e65bd74cf3090298c4651bf4f31bfb19ae769da@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r886b6d9a89b6fa0aafbf0a8f8f14351548d6c6f027886a3646dbd075@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r8897a41f50d4eb19b268bde99328e943ba586f77779efa6de720c39f@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r890b8ec5203d70a59a6b1289420d46938d9029ed706aa724978789be@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r89fdd39965efb7c6d22bc21c286d203252cea476e1782724aca0748e@%3Cuser.thrift.apache.org%3E
https://lists.apache.org/thread.html/r8dfbefcd606af6737b62461a45a9af9222040b62eab474ff2287cf75@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r90b4473950e26607ed77f3d70f120166f6a36a3f80888e4eeabcaf91@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r93f23f74315e009f4fb68ef7fc794dceee42cf87fe6613814dcd8c70@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r950ced188d62320fdb84d9e2c6ba896328194952eff7430c4f55e4b0@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r995b945cc8f6ec976d8c52d42ba931a688b45fb32cbdde715b6a816a@%3Cuser.thrift.apache.org%3E
https://lists.apache.org/thread.html/r9b51e7c253cb0989b4c03ed9f4e5f0478e427473357209ccc4d08ebf@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r9ec75f690dd60fec8621ba992290962705d5b7f0d8fd0a42fab0ac9f@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/ra3f7f06a1759c8e2985ed24ae2f5483393c744c1956d661adc873f2c@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/ra7371efd8363c1cd0f5331aafd359a808cf7277472b8616d7b392128@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/ra9f7c755790313e1adb95d29794043fb102029e803daf4212ae18063@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/race178e9500ab8a5a6112667d27c48559150cadb60f2814bc67c40af@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/rad635e16b300cf434280001ee6ecd2ed2c70987bf16eb862bfa86e02@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/rada9d2244a66ede0be29afc5d5f178a209f9988db56b9b845d955741@%3Ccommits.hbase.apache.org%3E
https://lists.apache.org/thread.html/rae95c2234b6644bfd666b2671a1b42a09f38514d0f27cca3c7d5d55a@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/raea1bb8cf2eb39c5e10543f547bdbbdbb563c2ac6377652f161d4e37@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/rb3574bc1036b577b265be510e6b208f0a5d5d84cd7198347dc8482df@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/rb44ec04e5a9b1f87fef97bb5f054010cbfaa3b8586472a3a38a16fca@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/rb51977d392b01434b0b5df5c19b9ad5b6178cfea59e676c14f24c053@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/rb91c32194eb5006f0b0c8bcdbd512c13495a1b277d4d51d45687f036@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/rbc5cad06a46d23253a3c819229efedecfc05f89ef53f5fdde77a86d6@%3Cuser.thrift.apache.org%3E
https://lists.apache.org/thread.html/rbfbb81e7fb5d5009caf25798f02f42a7bd064a316097303ba2f9ed76@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/rc48ab5455bdece9a4afab53ca0f1e4f742d5baacb241323454a87b4e@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/rc7a241e0af086b226ff9ccabc4a243d206f0f887037994bfd8fcaaeb@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/rc7a79b08822337c68705f16ee7ddcfd352313b836e78a4b86c7a7e3d@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/rc896ce7761999b088f3adabcb99dde2102b6a66130b8eec6c8265eab@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/rcace846f74ea9e2af2f7c30cef0796724aa74089f109c8029b850163@%3Cdev.hive.apache.org%3E
https://lists.apache.org/thread.html/rcae4c66f67e701db44d742156dee1f3e5e4e07ad7ce10c740a76b669@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/rcdf62ecd36e39e4ff9c61802eee4927ce9ecff1602eed1493977ef4c@%3Cuser.thrift.apache.org%3E
https://lists.apache.org/thread.html/rd0734d91f16d5b050f0bcff78b4719300042a34fadf5e52d0edf898e@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/rd370fdb419652c5219409b315a6349b07a7e479bd3f151e9a5671774@%3Ccommits.hbase.apache.org%3E
https://lists.apache.org/thread.html/rd49d53b146d94a7d3a135f6b505589655ffec24ea470e345d31351bb@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/rd78cdd87d84499a404202f015f55935db3658bd0983ecec81e6b18c6@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/rdc8e0f92d06decaee5db58de4ded16d80016a7db2240a8db17225c49@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/rdcf00186c34d69826d9c6b1f010136c98b00a586136de0061f7d267e@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/rf568168e7f83871969928c0379813da6d034485f8b20fa73884816d6@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/rf603d25213cfff81d6727c259328846b366fd32a43107637527c9768@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/rf65df763f630163a3f620887efec082080555cee1adb0b8eaf2c7ddb@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/rf741d08c7e0ab1542c81ea718467422bd01159ed284796a36ad88311@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/rf75979ae0ffd526f3afa935a8f0ee13c82808ea8b2bc0325eb9dcd90@%3Ccommits.camel.apache.org%3E
https://lists.apache.org/thread.html/rfbb01bb85cdc2022f3b96bdc416dbfcb49a2855b3a340aa88b2e1de9@%3Ccommits.druid.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2020-13949
https://security.gentoo.org/glsa/202107-32
https://www.cve.org/CVERecord?id=CVE-2020-13949
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpujan2022.html
|
| org.apache.thrift:libthrift |
CVE-2026-43869 |
HIGH |
0.13.0 |
0.23.0 |
http://www.openwall.com/lists/oss-security/2026/05/05/3
https://access.redhat.com/errata/RHSA-2026:21769
https://access.redhat.com/errata/RHSA-2026:22347
https://access.redhat.com/errata/RHSA-2026:22423
https://access.redhat.com/errata/RHSA-2026:23345
https://access.redhat.com/errata/RHSA-2026:24503
https://access.redhat.com/errata/RHSA-2026:24539
https://access.redhat.com/errata/RHSA-2026:25273
https://access.redhat.com/errata/RHSA-2026:26586
https://access.redhat.com/errata/RHSA-2026:27126
https://access.redhat.com/errata/RHSA-2026:28010
https://access.redhat.com/errata/RHSA-2026:30651
https://access.redhat.com/errata/RHSA-2026:36882
https://access.redhat.com/errata/RHSA-2026:42644
https://access.redhat.com/security/cve/CVE-2026-43869
https://advisory.echohq.com/cve/CVE-2026-43869
https://bugzilla.redhat.com/show_bug.cgi?id=2466660
https://github.com/apache/thrift
https://github.com/apache/thrift/commit/0919c3d5506151514e283a63e1fe1ce83e2449d8
https://github.com/apache/thrift/releases/tag/v0.23.0
https://lists.apache.org/thread/3hsgl1b69wzq3ry39scqbv2dhyl3j52r
https://nvd.nist.gov/vuln/detail/CVE-2026-43869
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43869.json
https://www.cve.org/CVERecord?id=CVE-2026-43869
|
| org.apache.thrift:libthrift |
CVE-2026-43871 |
HIGH |
0.13.0 |
0.24.0 |
http://www.openwall.com/lists/oss-security/2026/07/24/33
https://access.redhat.com/security/cve/CVE-2026-43871
https://advisory.echohq.com/cve/CVE-2026-43871
https://github.com/apache/thrift
https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9
https://lists.apache.org/thread/l4dwf14zbyqsmkc28c99ojj3t3gg9qby
https://nvd.nist.gov/vuln/detail/CVE-2026-43871
https://www.cve.org/CVERecord?id=CVE-2026-43871
|
| org.bitbucket.b_c:jose4j |
CVE-2023-31582 |
HIGH |
0.6.5 |
0.9.3 |
https://access.redhat.com/security/cve/CVE-2023-31582
https://bitbucket.org/b_c/jose4j
https://bitbucket.org/b_c/jose4j/commits/1929fe3
https://bitbucket.org/b_c/jose4j/issues/203/insecure-support-of-setting-pbe-less-then
https://github.com/KANIXB/JWTIssues/blob/main/jose4j%20issue.md
https://nvd.nist.gov/vuln/detail/CVE-2023-31582
https://www.cve.org/CVERecord?id=CVE-2023-31582
|
| org.bitbucket.b_c:jose4j |
CVE-2024-29371 |
HIGH |
0.6.5 |
0.9.6 |
https://access.redhat.com/security/cve/CVE-2024-29371
https://advisory.echohq.com/cve/CVE-2024-29371
https://bitbucket.org/b_c/jose4j/commits/19a90a64c47bb07c4aa5462f1316d5c293d81fcf
https://bitbucket.org/b_c/jose4j/issues/220/vuln-zip-bomb-attack
https://bitbucket.org/b_c/jose4j/wiki/Home
https://github.com/advisories/GHSA-3677-xxcr-wjqv
https://nvd.nist.gov/vuln/detail/CVE-2024-29371
https://www.cve.org/CVERecord?id=CVE-2024-29371
|
| org.bitbucket.b_c:jose4j |
CVE-2023-51775 |
MEDIUM |
0.6.5 |
0.9.4 |
https://access.redhat.com/security/cve/CVE-2023-51775
https://bitbucket.org/b_c/jose4j/commits/1afaa1e174b3
https://bitbucket.org/b_c/jose4j/issues/212
https://nvd.nist.gov/vuln/detail/CVE-2023-51775
https://security.netapp.com/advisory/ntap-20241108-0002
https://security.netapp.com/advisory/ntap-20241108-0002/
https://www.cve.org/CVERecord?id=CVE-2023-51775
|
| org.bitbucket.b_c:jose4j |
GHSA-jgvc-jfgh-rjvv |
MEDIUM |
0.6.5 |
0.9.3 |
https://bitbucket.org/b_c/jose4j/commits/14e62a8dee9decb4ff6e0625aedc5724601bfdb6
https://bitbucket.org/b_c/jose4j/commits/63b86581e7bfcc2d9d04ee15caea4b5bfb911f59
https://bitbucket.org/b_c/jose4j/commits/tag/jose4j-0.9.3
https://github.com/google/security-research
https://github.com/google/security-research/security/advisories/GHSA-jgvc-jfgh-rjvv
|
| org.bouncycastle:bcpkix-jdk15on |
CVE-2025-8916 |
MEDIUM |
1.62 |
1.79 |
https://access.redhat.com/security/cve/CVE-2025-8916
https://advisory.echohq.com/cve/CVE-2025-8916
https://cert-portal.siemens.com/productcert/html/ssa-032379.html
https://github.com/bcgit/bc-java
https://github.com/bcgit/bc-java/commit/310b30a4fbf36d13f6cc201ffa7771715641e67e
https://github.com/bcgit/bc-java/commit/ff444a479942d88de64004dc82c3ee32a9e9075a
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%908916
https://nvd.nist.gov/vuln/detail/CVE-2025-8916
https://ubuntu.com/security/notices/USN-8108-1
https://www.cve.org/CVERecord?id=CVE-2025-8916
|
| org.bouncycastle:bcpkix-jdk15on |
CVE-2026-5588 |
MEDIUM |
1.62 |
1.84 |
https://access.redhat.com/errata/RHSA-2026:11720
https://access.redhat.com/errata/RHSA-2026:11721
https://access.redhat.com/errata/RHSA-2026:13631
https://access.redhat.com/errata/RHSA-2026:14272
https://access.redhat.com/errata/RHSA-2026:14276
https://access.redhat.com/errata/RHSA-2026:17668
https://access.redhat.com/errata/RHSA-2026:18054
https://access.redhat.com/errata/RHSA-2026:18055
https://access.redhat.com/errata/RHSA-2026:18059
https://access.redhat.com/errata/RHSA-2026:21772
https://access.redhat.com/errata/RHSA-2026:53644
https://access.redhat.com/errata/RHSA-2026:53645
https://access.redhat.com/errata/RHSA-2026:53646
https://access.redhat.com/errata/RHSA-2026:60239
https://access.redhat.com/errata/RHSA-2026:60246
https://access.redhat.com/errata/RHSA-2026:60247
https://access.redhat.com/errata/RHSA-2026:60248
https://access.redhat.com/errata/RHSA-2026:60249
https://access.redhat.com/errata/RHSA-2026:60250
https://access.redhat.com/errata/RHSA-2026:60251
https://access.redhat.com/errata/RHSA-2026:60252
https://access.redhat.com/errata/RHSA-2026:60254
https://access.redhat.com/errata/RHSA-2026:60256
https://access.redhat.com/errata/RHSA-2026:60259
https://access.redhat.com/errata/RHSA-2026:66488
https://access.redhat.com/security/cve/CVE-2026-5588
https://advisory.echohq.com/cve/CVE-2026-5588
https://bugzilla.redhat.com/show_bug.cgi?id=2458634
https://github.com/advisories/GHSA-wg6q-6289-32hp
https://github.com/bcgit/bc-java
https://github.com/bcgit/bc-java/commit/656bae0dbd9b1521f840521ff786e78749fe3057
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905588
https://nvd.nist.gov/vuln/detail/CVE-2026-5588
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5588.json
https://www.cve.org/CVERecord?id=CVE-2026-5588
|
| org.bouncycastle:bcprov-jdk15on |
CVE-2020-15522 |
MEDIUM |
1.62 |
1.66 |
https://access.redhat.com/security/cve/CVE-2020-15522
https://github.com/bcgit/bc-csharp/wiki/CVE-2020-15522
https://github.com/bcgit/bc-java/wiki/CVE-2020-15522
https://nvd.nist.gov/vuln/detail/CVE-2020-15522
https://security.netapp.com/advisory/ntap-20210622-0007
https://security.netapp.com/advisory/ntap-20210622-0007/
https://www.bouncycastle.org/releasenotes.html
https://www.cve.org/CVERecord?id=CVE-2020-15522
|
| org.bouncycastle:bcprov-jdk15on |
CVE-2023-33201 |
MEDIUM |
1.62 |
|
https://access.redhat.com/security/cve/CVE-2023-33201
https://bouncycastle.org
https://bouncycastle.org/releasenotes.html#r1rv74
https://github.com/bcgit/bc-java
https://github.com/bcgit/bc-java/commit/ccf93ca736b89250ff4ce079a5aa56f5cbf0ebbd
https://github.com/bcgit/bc-java/commit/e8c409a8389c815ea3fda5e8b94c92fdfe583bcc
https://github.com/bcgit/bc-java/commits/main/prov/src/main/java/org/bouncycastle/jce/provider/X509LDAPCertStoreSpi.java
https://github.com/bcgit/bc-java/wiki/CVE-2023-33201
https://lists.debian.org/debian-lts-announce/2023/08/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2023-33201
https://security.netapp.com/advisory/ntap-20230824-0008
https://security.netapp.com/advisory/ntap-20230824-0008/
https://ubuntu.com/security/notices/USN-8108-1
https://www.cve.org/CVERecord?id=CVE-2023-33201
|
| org.bouncycastle:bcprov-jdk15on |
CVE-2023-33202 |
MEDIUM |
1.62 |
1.70 |
https://access.redhat.com/security/cve/CVE-2023-33202
https://bouncycastle.org
https://github.com/bcgit/bc-java
https://github.com/bcgit/bc-java/commit/0c576892862ed41894f49a8f639112e8d66d229c
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902023%E2%80%9033202
https://github.com/bcgit/bc-java/wiki/CVE-2023-33202
https://nvd.nist.gov/vuln/detail/CVE-2023-33202
https://security.netapp.com/advisory/ntap-20240125-0001
https://security.netapp.com/advisory/ntap-20240125-0001/
https://www.cve.org/CVERecord?id=CVE-2023-33202
|
| org.bouncycastle:bcprov-jdk15on |
CVE-2024-29857 |
MEDIUM |
1.62 |
1.78 |
https://access.redhat.com/security/cve/CVE-2024-29857
https://github.com/bcgit/bc-csharp/commit/56daa6eac526f165416d17f661422d60de0dfd63
https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9029857
https://github.com/bcgit/bc-java/commit/efc498ca4caa340ac2fe11f2efee06c1a294501f
https://github.com/bcgit/bc-java/commit/fee80dd230e7fba132d03a34f1dd1d6aae0d0281
https://github.com/bcgit/bc-java/issues/1635
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9029857
https://nvd.nist.gov/vuln/detail/CVE-2024-29857
https://security.netapp.com/advisory/ntap-20241206-0008
https://security.netapp.com/advisory/ntap-20241206-0008/
https://ubuntu.com/security/notices/USN-8108-1
https://www.bouncycastle.org/latest_releases.html
https://www.cve.org/CVERecord?id=CVE-2024-29857
|
| org.bouncycastle:bcprov-jdk15on |
CVE-2024-30171 |
MEDIUM |
1.62 |
1.78 |
https://access.redhat.com/security/cve/CVE-2024-30171
https://github.com/bcgit/bc-csharp/commit/c984b8bfd8544dfc55dba91a02cbbbb9c580c217
https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9030171
https://github.com/bcgit/bc-java/commit/d7d5e735abd64bf0f413f54fd9e495fc02400fb0
https://github.com/bcgit/bc-java/commit/e0569dcb1dea9d421d84fc4c5c5688fe101afa2d
https://github.com/bcgit/bc-java/issues/1528
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9030171
https://nvd.nist.gov/vuln/detail/CVE-2024-30171
https://people.redhat.com/~hkario/marvin/
https://security.netapp.com/advisory/ntap-20240614-0008
https://security.netapp.com/advisory/ntap-20240614-0008/
https://ubuntu.com/security/notices/USN-8108-1
https://www.bouncycastle.org/latest_releases.html
https://www.cve.org/CVERecord?id=CVE-2024-30171
|
| org.bouncycastle:bcprov-jdk15on |
CVE-2024-34447 |
MEDIUM |
1.62 |
1.78 |
http://security.netapp.com/advisory/ntap-20240614-0007
https://access.redhat.com/security/cve/CVE-2024-34447
https://github.com/bcgit/bc-java
https://github.com/bcgit/bc-java/issues/1656
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9034447
https://nvd.nist.gov/vuln/detail/CVE-2024-34447
https://security.netapp.com/advisory/ntap-20240614-0007/
https://ubuntu.com/security/notices/USN-8108-1
https://www.bouncycastle.org/latest_releases.html
https://www.cve.org/CVERecord?id=CVE-2024-34447
|
| org.codehaus.jettison:jettison |
CVE-2022-40150 |
HIGH |
1.4.0 |
1.5.2 |
https://access.redhat.com/security/cve/CVE-2022-40150
https://advisory.echohq.com/cve/CVE-2022-40150
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46549
https://github.com/advisories/GHSA-x27m-9w8j-5vcw
https://github.com/jettison-json/jettison
https://github.com/jettison-json/jettison/issues/45
https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.1
https://lists.debian.org/debian-lts-announce/2022/12/msg00045.html
https://nvd.nist.gov/vuln/detail/CVE-2022-40150
https://ubuntu.com/security/notices/USN-6177-1
https://www.cve.org/CVERecord?id=CVE-2022-40150
https://www.debian.org/security/2023/dsa-5312
|
| org.codehaus.jettison:jettison |
CVE-2022-45685 |
HIGH |
1.4.0 |
1.5.2 |
https://access.redhat.com/security/cve/CVE-2022-45685
https://advisory.echohq.com/cve/CVE-2022-45685
https://github.com/advisories/GHSA-7rf3-mqpx-h7xg
https://github.com/jettison-json/jettison
https://github.com/jettison-json/jettison/issues/54
https://lists.debian.org/debian-lts-announce/2022/12/msg00045.html
https://nvd.nist.gov/vuln/detail/CVE-2022-45685
https://ubuntu.com/security/notices/USN-6177-1
https://www.cve.org/CVERecord?id=CVE-2022-45685
https://www.debian.org/security/2023/dsa-5312
|
| org.codehaus.jettison:jettison |
CVE-2022-45693 |
HIGH |
1.4.0 |
1.5.2 |
https://access.redhat.com/security/cve/CVE-2022-45693
https://advisory.echohq.com/cve/CVE-2022-45693
https://github.com/advisories/GHSA-grr4-wv38-f68w
https://github.com/jettison-json/jettison
https://github.com/jettison-json/jettison/issues/52
https://lists.debian.org/debian-lts-announce/2022/12/msg00045.html
https://nvd.nist.gov/vuln/detail/CVE-2022-45693
https://ubuntu.com/security/notices/USN-6177-1
https://www.cve.org/CVERecord?id=CVE-2022-45693
https://www.debian.org/security/2023/dsa-5312
|
| org.codehaus.jettison:jettison |
CVE-2023-1436 |
HIGH |
1.4.0 |
1.5.4 |
https://access.redhat.com/security/cve/CVE-2023-1436
https://advisory.echohq.com/cve/CVE-2023-1436
https://github.com/advisories/GHSA-q6g2-g7f3-rr83
https://github.com/jettison-json/jettison
https://github.com/jettison-json/jettison/issues/60
https://github.com/jettison-json/jettison/pull/62
https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.4
https://nvd.nist.gov/vuln/detail/CVE-2023-1436
https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911
https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911/
https://ubuntu.com/security/notices/USN-6179-1
https://www.cve.org/CVERecord?id=CVE-2023-1436
|
| org.codehaus.jettison:jettison |
CVE-2022-40149 |
MEDIUM |
1.4.0 |
1.5.1 |
https://access.redhat.com/security/cve/CVE-2022-40149
https://advisory.echohq.com/cve/CVE-2022-40149
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46538
https://github.com/advisories/GHSA-56h3-78gp-v83r
https://github.com/jettison-json/jettison
https://github.com/jettison-json/jettison/issues/45
https://github.com/jettison-json/jettison/pull/49/files
https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.1
https://lists.debian.org/debian-lts-announce/2022/11/msg00011.html
https://nvd.nist.gov/vuln/detail/CVE-2022-40149
https://ubuntu.com/security/notices/USN-6177-1
https://www.cve.org/CVERecord?id=CVE-2022-40149
https://www.debian.org/security/2023/dsa-5312
|
| org.eclipse.jgit:org.eclipse.jgit |
CVE-2023-4759 |
HIGH |
5.0.2.201807311906-r |
6.6.1.202309021850-r, 5.13.3.202401111512-r |
https://access.redhat.com/security/cve/CVE-2023-4759
https://git.eclipse.org/c/jgit/jgit.git
https://git.eclipse.org/c/jgit/jgit.git/commit/?id=9072103f3b3cf64dd12ad2949836ab98f62dabf1
https://github.com/eclipse-jgit/jgit/issues/30
https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/11
https://nvd.nist.gov/vuln/detail/CVE-2023-4759
https://projects.eclipse.org/projects/technology.jgit/releases/5.13.3
https://projects.eclipse.org/projects/technology.jgit/releases/6.6.1
https://www.cve.org/CVERecord?id=CVE-2023-4759
|
| org.eclipse.jgit:org.eclipse.jgit |
CVE-2025-4949 |
MEDIUM |
5.0.2.201807311906-r |
7.2.1.202505142326-r, 7.1.1.202505221757-r, 7.0.1.202505221510-r, 6.10.1.202505221210-r, 6.0.0.202111291000-r, 5.13.4.202507202350-r |
https://access.redhat.com/security/cve/CVE-2025-4949
https://advisory.echohq.com/cve/CVE-2025-4949
https://github.com/advisories/GHSA-vrpq-qp53-qv56
https://github.com/eclipse-jgit/jgit
https://gitlab.eclipse.org/security/cve-assignement/-/issues/64
https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/281
https://nvd.nist.gov/vuln/detail/CVE-2025-4949
https://projects.eclipse.org/projects/technology.jgit/releases/5.13.4
https://projects.eclipse.org/projects/technology.jgit/releases/5.13.5
https://projects.eclipse.org/projects/technology.jgit/releases/6.10.1
https://projects.eclipse.org/projects/technology.jgit/releases/7.0.1
https://projects.eclipse.org/projects/technology.jgit/releases/7.1.1
https://projects.eclipse.org/projects/technology.jgit/releases/7.2.1
https://www.cve.org/CVERecord?id=CVE-2025-4949
|
| org.glassfish:jakarta.el |
CVE-2021-28170 |
MEDIUM |
3.0.3.jbossorg-2 |
3.0.4 |
https://access.redhat.com/security/cve/CVE-2021-28170
https://github.com/eclipse-ee4j/el-ri
https://github.com/eclipse-ee4j/el-ri/issues/155
https://github.com/eclipse-ee4j/el-ri/pull/160/commits/b6a3943ac5fba71cbc6719f092e319caa747855b
https://nvd.nist.gov/vuln/detail/CVE-2021-28170
https://security.snyk.io/vuln/SNYK-JAVA-ORGGLASSFISH-1297098
https://security.snyk.io/vuln/SNYK-JAVA-ORGGLASSFISH-2841368
https://securitylab.github.com/advisories/GHSL-2020-021-jakarta-el
https://securitylab.github.com/advisories/GHSL-2020-021-jakarta-el/
https://www.cve.org/CVERecord?id=CVE-2021-28170
https://www.oracle.com/security-alerts/cpuapr2022.html
|
| org.hibernate.validator:hibernate-validator |
CVE-2020-10693 |
MEDIUM |
6.0.18.Final |
6.1.5.Final, 6.0.20.Final |
https://access.redhat.com/security/cve/CVE-2020-10693
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10693
https://lists.apache.org/thread.html/rb8dca19a4e52b60dab0ab21e2ff9968d78f4b84e4033824db1dd24b4@%3Cpluto-scm.portals.apache.org%3E
https://lists.apache.org/thread.html/rd418deda6f0ebe658c2015f43a14d03acb8b8c2c093c5bf6b880cd7c@%3Cpluto-dev.portals.apache.org%3E
https://lists.apache.org/thread.html/rf9c17c3efc4a376a96e9e2777eee6acf0bec28e2200e4b35da62de4a@%3Cpluto-dev.portals.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2020-10693
https://www.cve.org/CVERecord?id=CVE-2020-10693
https://www.ibm.com/support/pages/node/6348216
https://www.oracle.com/security-alerts/cpuapr2022.html
|
| org.hibernate.validator:hibernate-validator |
CVE-2023-1932 |
MEDIUM |
6.0.18.Final |
6.2.0.Final |
https://access.redhat.com/security/cve/CVE-2023-1932
https://bugzilla.redhat.com/show_bug.cgi?id=1809444
https://github.com/hibernate/hibernate-validator
https://nvd.nist.gov/vuln/detail/CVE-2023-1932
https://www.cve.org/CVERecord?id=CVE-2023-1932
|
| org.hibernate.validator:hibernate-validator |
CVE-2025-35036 |
MEDIUM |
6.0.18.Final |
6.2.0.CR1, 7.0.0.CR1 |
https://access.redhat.com/security/cve/CVE-2025-35036
https://docs.jboss.org/hibernate/stable/validator/reference/en-US/html_single/#section-hibernateconstraintvalidatorcontext
https://github.com/hibernate/hibernate-validator
https://github.com/hibernate/hibernate-validator/commit/05f795bb7cf18856004f40e5042709e550ed0d6e
https://github.com/hibernate/hibernate-validator/commit/254858d9dcc4e7cd775d1b0f47f482218077c5e1
https://github.com/hibernate/hibernate-validator/commit/d2db40b9e7d22c7a0b44d7665242dfc7b4d14d78
https://github.com/hibernate/hibernate-validator/commit/e076293b0ee1bfa97b6e67d05ad9eee1ad77e893
https://github.com/hibernate/hibernate-validator/compare/6.1.7.Final...6.2.0.Final
https://github.com/hibernate/hibernate-validator/pull/1138
https://hibernate.atlassian.net/browse/HV-1816
https://hibernate.org/validator/documentation/migration-guide/#6-2-0-cr1
https://in.relation.to/2021/01/06/hibernate-validator-700-62-final-released/#expression-language
https://labs.watchtowr.com/expression-payloads-meet-mayhem-cve-2025-4427-and-cve-2025-4428
https://labs.watchtowr.com/expression-payloads-meet-mayhem-cve-2025-4427-and-cve-2025-4428/
https://nvd.nist.gov/vuln/detail/CVE-2025-35036
https://www.cve.org/CVERecord?id=CVE-2020-5245
https://www.cve.org/CVERecord?id=CVE-2025-35036
https://www.cve.org/CVERecord?id=CVE-2025-4428
|
| org.hibernate:hibernate-core |
CVE-2020-25638 |
HIGH |
5.3.15.Final |
5.4.24.Final, 5.3.20.Final |
https://access.redhat.com/security/cve/CVE-2020-25638
https://bugzilla.redhat.com/show_bug.cgi?id=1881353
https://github.com/hibernate/hibernate-orm
https://github.com/hibernate/hibernate-orm/commit/36ebf7d3836e83e99f2a91777b5389e1daf1f2b7
https://github.com/hibernate/hibernate-orm/commit/59fede7acaaa1579b561407aefa582311f7ebe78
https://github.com/hibernate/hibernate-orm/commit/d22bbb5c339c9df7712c3365bb1df97c91b35ec5
https://lists.apache.org/thread.html/r833c1276e41334fa675848a08daf0c61f39009f9f9a400d9f7006d44@%3Cdev.turbine.apache.org%3E
https://lists.apache.org/thread.html/rf2378209c676a28b71f9b604a3b3517c448540b85367160e558ef9df@%3Ccommits.turbine.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/01/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2020-25638
https://ubuntu.com/security/notices/USN-6845-1
https://www.cve.org/CVERecord?id=CVE-2020-25638
https://www.debian.org/security/2021/dsa-4908
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
|
| org.hibernate:hibernate-core |
CVE-2026-0603 |
HIGH |
5.3.15.Final |
5.3.38 |
https://access.redhat.com/errata/RHSA-2026:4915
https://access.redhat.com/errata/RHSA-2026:4916
https://access.redhat.com/errata/RHSA-2026:4917
https://access.redhat.com/errata/RHSA-2026:4924
https://access.redhat.com/errata/RHSA-2026:6011
https://access.redhat.com/errata/RHSA-2026:6012
https://access.redhat.com/errata/RHSA-2026:76128
https://access.redhat.com/errata/RHSA-2026:76129
https://access.redhat.com/errata/RHSA-2026:76130
https://access.redhat.com/errata/RHSA-2026:76132
https://access.redhat.com/errata/RHSA-2026:76134
https://access.redhat.com/security/cve/CVE-2026-0603
https://advisory.echohq.com/cve/CVE-2026-0603
https://bugzilla.redhat.com/show_bug.cgi?id=2427147
https://github.com/advisories/GHSA-2p5w-cvg5-gc5c
https://github.com/hibernate/hibernate-orm
https://github.com/hibernate/hibernate-orm/commit/3f820fdf16ee4d1f556bc73b259625416d703048
https://nvd.nist.gov/vuln/detail/CVE-2026-0603
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0603.json
https://www.cve.org/CVERecord?id=CVE-2026-0603
|
| org.hibernate:hibernate-core |
CVE-2019-14900 |
MEDIUM |
5.3.15.Final |
5.3.18, 5.4.18, 5.5.0.Beta1 |
https://access.redhat.com/security/cve/CVE-2019-14900
https://bugzilla.redhat.com/show_bug.cgi?id=1666499
https://github.com/hibernate/hibernate-orm
https://github.com/hibernate/hibernate-orm/commit/3f3c1ab50604ab9ba99e25d2016fb85f3ba9dcd4
https://github.com/hibernate/hibernate-orm/commit/646b383f959eff18d58081b1a574f0d777d353da
https://github.com/hibernate/hibernate-orm/commit/e0e22ea256c1906235d6a8e90b79c4ce33d0861f
https://github.com/hibernate/hibernate-orm/commit/eebf01fbf3c2550ee70cdc9c1b02b52e330c8c36
https://lists.apache.org/thread.html/r833c1276e41334fa675848a08daf0c61f39009f9f9a400d9f7006d44@%3Cdev.turbine.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2019-14900
https://security.netapp.com/advisory/ntap-20220210-0020
https://security.netapp.com/advisory/ntap-20220210-0020/
https://www.cve.org/CVERecord?id=CVE-2019-14900
|
| org.hornetq:hornetq-core-client |
CVE-2024-51127 |
HIGH |
2.4.7.Final |
|
http://hornetq.com
https://access.redhat.com/security/cve/CVE-2024-51127
https://github.com/JAckLosingHeart/CWE-378/blob/main/CVE-2024-51127.md
https://github.com/darranl/hornetq
https://github.com/hornetq/hornetq/blob/HornetQ_2_4_9_Final/hornetq-core-client/src/main/java/org/hornetq/core/client/impl/ClientConsumerImpl.java#L665C35-L665C49
https://nvd.nist.gov/vuln/detail/CVE-2024-51127
https://www.cve.org/CVERecord?id=CVE-2024-51127
|
| org.infinispan:infinispan-cachestore-jdbc |
CVE-2023-5384 |
MEDIUM |
9.4.18.Final |
15.0.0.Dev07, 14.0.25.Final |
https://access.redhat.com/errata/RHSA-2023:7676
https://access.redhat.com/security/cve/CVE-2023-5384
https://bugzilla.redhat.com/show_bug.cgi?id=2242156
https://github.com/infinispan/infinispan
https://github.com/infinispan/infinispan/commit/7140fc9b026ec55786c1aa78bb3cd8bf951fad47
https://github.com/infinispan/infinispan/commit/fd3e18ec3b1a4e7fcfd79392f5bf78792a2b8c61
https://github.com/infinispan/infinispan/pull/11555
https://github.com/infinispan/infinispan/pull/11995
https://issues.redhat.com/browse/ISPN-15202
https://nvd.nist.gov/vuln/detail/CVE-2023-5384
https://security.netapp.com/advisory/ntap-20240125-0004
https://security.netapp.com/advisory/ntap-20240125-0004/
https://www.cve.org/CVERecord?id=CVE-2023-5384
|
| org.infinispan:infinispan-cachestore-remote |
CVE-2023-5384 |
MEDIUM |
9.4.18.Final |
15.0.0.Dev07, 14.0.25.Final |
https://access.redhat.com/errata/RHSA-2023:7676
https://access.redhat.com/security/cve/CVE-2023-5384
https://bugzilla.redhat.com/show_bug.cgi?id=2242156
https://github.com/infinispan/infinispan
https://github.com/infinispan/infinispan/commit/7140fc9b026ec55786c1aa78bb3cd8bf951fad47
https://github.com/infinispan/infinispan/commit/fd3e18ec3b1a4e7fcfd79392f5bf78792a2b8c61
https://github.com/infinispan/infinispan/pull/11555
https://github.com/infinispan/infinispan/pull/11995
https://issues.redhat.com/browse/ISPN-15202
https://nvd.nist.gov/vuln/detail/CVE-2023-5384
https://security.netapp.com/advisory/ntap-20240125-0004
https://security.netapp.com/advisory/ntap-20240125-0004/
https://www.cve.org/CVERecord?id=CVE-2023-5384
|
| org.infinispan:infinispan-client-hotrod |
CVE-2023-5384 |
MEDIUM |
9.4.18.Final |
15.0.0.Dev07, 14.0.25.Final |
https://access.redhat.com/errata/RHSA-2023:7676
https://access.redhat.com/security/cve/CVE-2023-5384
https://bugzilla.redhat.com/show_bug.cgi?id=2242156
https://github.com/infinispan/infinispan
https://github.com/infinispan/infinispan/commit/7140fc9b026ec55786c1aa78bb3cd8bf951fad47
https://github.com/infinispan/infinispan/commit/fd3e18ec3b1a4e7fcfd79392f5bf78792a2b8c61
https://github.com/infinispan/infinispan/pull/11555
https://github.com/infinispan/infinispan/pull/11995
https://issues.redhat.com/browse/ISPN-15202
https://nvd.nist.gov/vuln/detail/CVE-2023-5384
https://security.netapp.com/advisory/ntap-20240125-0004
https://security.netapp.com/advisory/ntap-20240125-0004/
https://www.cve.org/CVERecord?id=CVE-2023-5384
|
| org.infinispan:infinispan-commons |
CVE-2023-5384 |
MEDIUM |
9.4.18.Final |
15.0.0.Dev07, 14.0.25.Final |
https://access.redhat.com/errata/RHSA-2023:7676
https://access.redhat.com/security/cve/CVE-2023-5384
https://bugzilla.redhat.com/show_bug.cgi?id=2242156
https://github.com/infinispan/infinispan
https://github.com/infinispan/infinispan/commit/7140fc9b026ec55786c1aa78bb3cd8bf951fad47
https://github.com/infinispan/infinispan/commit/fd3e18ec3b1a4e7fcfd79392f5bf78792a2b8c61
https://github.com/infinispan/infinispan/pull/11555
https://github.com/infinispan/infinispan/pull/11995
https://issues.redhat.com/browse/ISPN-15202
https://nvd.nist.gov/vuln/detail/CVE-2023-5384
https://security.netapp.com/advisory/ntap-20240125-0004
https://security.netapp.com/advisory/ntap-20240125-0004/
https://www.cve.org/CVERecord?id=CVE-2023-5384
|
| org.infinispan:infinispan-core |
CVE-2020-25711 |
MEDIUM |
9.4.18.Final |
11.0.6.Final |
https://access.redhat.com/security/cve/CVE-2020-25711
https://bugzilla.redhat.com/show_bug.cgi?id=1897618
https://nvd.nist.gov/vuln/detail/CVE-2020-25711
https://security.netapp.com/advisory/ntap-20220210-0023
https://security.netapp.com/advisory/ntap-20220210-0023/
https://www.cve.org/CVERecord?id=CVE-2020-25711
|
| org.infinispan:infinispan-core |
CVE-2023-5384 |
MEDIUM |
9.4.18.Final |
15.0.0.Dev07, 14.0.25.Final |
https://access.redhat.com/errata/RHSA-2023:7676
https://access.redhat.com/security/cve/CVE-2023-5384
https://bugzilla.redhat.com/show_bug.cgi?id=2242156
https://github.com/infinispan/infinispan
https://github.com/infinispan/infinispan/commit/7140fc9b026ec55786c1aa78bb3cd8bf951fad47
https://github.com/infinispan/infinispan/commit/fd3e18ec3b1a4e7fcfd79392f5bf78792a2b8c61
https://github.com/infinispan/infinispan/pull/11555
https://github.com/infinispan/infinispan/pull/11995
https://issues.redhat.com/browse/ISPN-15202
https://nvd.nist.gov/vuln/detail/CVE-2023-5384
https://security.netapp.com/advisory/ntap-20240125-0004
https://security.netapp.com/advisory/ntap-20240125-0004/
https://www.cve.org/CVERecord?id=CVE-2023-5384
|
| org.jberet:jberet-core |
CVE-2024-1102 |
MEDIUM |
1.3.5.Final |
2.2.1.Final |
https://access.redhat.com/errata/RHSA-2024:1677
https://access.redhat.com/errata/RHSA-2024:3580
https://access.redhat.com/errata/RHSA-2024:3581
https://access.redhat.com/errata/RHSA-2024:3583
https://access.redhat.com/security/cve/CVE-2024-1102
https://bugzilla.redhat.com/show_bug.cgi?id=2262060
https://github.com/jberet/jsr352
https://github.com/jberet/jsr352/commit/eeef999663d7da0e372aeeeac26ecf7201a3121d
https://github.com/jberet/jsr352/issues/452
https://nvd.nist.gov/vuln/detail/CVE-2024-1102
https://www.cve.org/CVERecord?id=CVE-2024-1102
|
| org.jboss.hal:hal-console |
CVE-2025-23366 |
MEDIUM |
3.2.7.Final |
3.7.7.Final |
https://access.redhat.com/errata/RHSA-2025:10924
https://access.redhat.com/errata/RHSA-2025:10925
https://access.redhat.com/errata/RHSA-2025:10926
https://access.redhat.com/errata/RHSA-2025:10931
https://access.redhat.com/security/cve/CVE-2025-23366
https://bugzilla.redhat.com/show_bug.cgi?id=2337619
https://github.com/hal/console
https://github.com/hal/console/releases/tag/v3.7.7
https://github.com/hal/console/security/advisories/GHSA-jhvj-f397-8w6q
https://nvd.nist.gov/vuln/detail/CVE-2025-23366
https://www.cve.org/CVERecord?id=CVE-2025-23366
|
| org.jboss.hal:hal-console |
GHSA-64gp-r758-8pfm |
MEDIUM |
3.2.7.Final |
3.7.7.Final |
https://github.com/hal/console
https://github.com/hal/console/releases/tag/v3.7.7
https://github.com/hal/console/security/advisories/GHSA-64gp-r758-8pfm
https://issues.redhat.com/browse/WFLY-19969
|
| org.jboss.remoting:jboss-remoting |
CVE-2020-35510 |
HIGH |
5.0.17.Final |
5.0.20.Final |
https://access.redhat.com/security/cve/CVE-2020-35510
https://bugzilla.redhat.com/show_bug.cgi?id=1905796
https://nvd.nist.gov/vuln/detail/CVE-2020-35510
https://www.cve.org/CVERecord?id=CVE-2020-35510
|
| org.jboss.remoting:jboss-remoting |
CVE-2020-35510 |
HIGH |
5.0.17.Final |
5.0.20.Final |
https://access.redhat.com/security/cve/CVE-2020-35510
https://bugzilla.redhat.com/show_bug.cgi?id=1905796
https://nvd.nist.gov/vuln/detail/CVE-2020-35510
https://www.cve.org/CVERecord?id=CVE-2020-35510
|
| org.jboss.remoting:jboss-remoting |
CVE-2020-35510 |
HIGH |
5.0.17.Final |
5.0.20.Final |
https://access.redhat.com/security/cve/CVE-2020-35510
https://bugzilla.redhat.com/show_bug.cgi?id=1905796
https://nvd.nist.gov/vuln/detail/CVE-2020-35510
https://www.cve.org/CVERecord?id=CVE-2020-35510
|
| org.jboss.resteasy:resteasy-client |
CVE-2020-1695 |
HIGH |
3.11.2.Final |
4.6.0, 3.12.0 |
https://access.redhat.com/security/cve/CVE-2020-1695
https://bugzilla.redhat.com/show_bug.cgi?id=1584550
https://bugzilla.redhat.com/show_bug.cgi?id=1590942
https://bugzilla.redhat.com/show_bug.cgi?id=1656772
https://bugzilla.redhat.com/show_bug.cgi?id=1664435
https://bugzilla.redhat.com/show_bug.cgi?id=1730462
https://bugzilla.redhat.com/show_bug.cgi?id=1787115
https://bugzilla.redhat.com/show_bug.cgi?id=1843416
https://bugzilla.redhat.com/show_bug.cgi?id=1868233
https://bugzilla.redhat.com/show_bug.cgi?id=1875563
https://bugzilla.redhat.com/show_bug.cgi?id=1883656
https://bugzilla.redhat.com/show_bug.cgi?id=1883996
https://bugzilla.redhat.com/show_bug.cgi?id=1889691
https://bugzilla.redhat.com/show_bug.cgi?id=1890639
https://bugzilla.redhat.com/show_bug.cgi?id=1891577
https://bugzilla.redhat.com/show_bug.cgi?id=1897120
https://bugzilla.redhat.com/show_bug.cgi?id=1908541
https://bugzilla.redhat.com/show_bug.cgi?id=1912418
https://bugzilla.redhat.com/show_bug.cgi?id=1912493
https://bugzilla.redhat.com/show_bug.cgi?id=1916686
https://bugzilla.redhat.com/show_bug.cgi?id=1919282
https://bugzilla.redhat.com/show_bug.cgi?id=1929067
https://bugzilla.redhat.com/show_bug.cgi?id=1932803
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1695
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1695
https://errata.rockylinux.org/RLSA-2021:1775
https://github.com/resteasy/Resteasy/commit/88ba8537f2e8d465c7031d352bf9bb25526ce475
https://linux.oracle.com/cve/CVE-2020-1695.html
https://linux.oracle.com/errata/ELSA-2021-1775.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IJDMT443YZWCBS5NS76XZ7TL3GK7BXHL
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IJDMT443YZWCBS5NS76XZ7TL3GK7BXHL/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RX22C6I56BJUER76IIPYHGZIWBQIU3CQ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RX22C6I56BJUER76IIPYHGZIWBQIU3CQ/
https://nvd.nist.gov/vuln/detail/CVE-2020-1695
https://ubuntu.com/security/notices/USN-7351-1
https://ubuntu.com/security/notices/USN-7630-1
https://www.cve.org/CVERecord?id=CVE-2020-1695
|
| org.jboss.resteasy:resteasy-client |
CVE-2020-25633 |
MEDIUM |
3.11.2.Final |
4.5.7.Final, 3.14.0.Final |
https://access.redhat.com/security/cve/CVE-2020-25633
https://bugzilla.redhat.com/show_bug.cgi?id=1879042
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25633
https://github.com/resteasy/Resteasy/pull/2665/commits/13c808b5967242eec1e877edbc0014a84dcd6eb0
https://issues.redhat.com/browse/RESTEASY-2820
https://nvd.nist.gov/vuln/detail/CVE-2020-25633
https://ubuntu.com/security/notices/USN-7351-1
https://ubuntu.com/security/notices/USN-7630-1
https://www.cve.org/CVERecord?id=CVE-2020-25633
|
| org.jboss.resteasy:resteasy-client-microprofile |
CVE-2020-25633 |
MEDIUM |
3.11.2.Final |
4.5.7.Final, 3.14.0.Final |
https://access.redhat.com/security/cve/CVE-2020-25633
https://bugzilla.redhat.com/show_bug.cgi?id=1879042
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25633
https://github.com/resteasy/Resteasy/pull/2665/commits/13c808b5967242eec1e877edbc0014a84dcd6eb0
https://issues.redhat.com/browse/RESTEASY-2820
https://nvd.nist.gov/vuln/detail/CVE-2020-25633
https://ubuntu.com/security/notices/USN-7351-1
https://ubuntu.com/security/notices/USN-7630-1
https://www.cve.org/CVERecord?id=CVE-2020-25633
|
| org.jboss.resteasy:resteasy-multipart-provider |
CVE-2023-0482 |
MEDIUM |
3.11.2.Final |
6.2.3.Final, 5.0.6.Final, 4.7.8.Final, 3.15.5.Final |
https://access.redhat.com/security/cve/CVE-2023-0482
https://bugzilla.redhat.com/show_bug.cgi?id=2166004
https://github.com/orgs/resteasy/discussions/3415
https://github.com/orgs/resteasy/discussions/3504
https://github.com/orgs/resteasy/discussions/3506
https://github.com/resteasy/resteasy
https://github.com/resteasy/resteasy/commit/3d8a551d80b98f185edaff6f895188ec8211366b
https://github.com/resteasy/resteasy/pull/3409
https://github.com/resteasy/resteasy/pull/3409/
https://github.com/resteasy/resteasy/pull/3409/commits/807d7456f2137cde8ef7c316707211bf4e542d56
https://github.com/resteasy/resteasy/pull/3410
https://github.com/resteasy/resteasy/pull/3412
https://github.com/resteasy/resteasy/pull/3413
https://github.com/resteasy/resteasy/pull/3423
https://github.com/resteasy/resteasy/security/advisories/GHSA-2c6g-pfx3-w7h8
https://issues.redhat.com/browse/RESTEASY-3286
https://nvd.nist.gov/vuln/detail/CVE-2023-0482
https://security.netapp.com/advisory/ntap-20230427-0001
https://security.netapp.com/advisory/ntap-20230427-0001/
https://ubuntu.com/security/notices/USN-7351-1
https://ubuntu.com/security/notices/USN-7630-1
https://www.cve.org/CVERecord?id=CVE-2023-0482
|
| org.jboss.xnio:xnio-api |
CVE-2023-5685 |
HIGH |
3.7.7.Final |
3.8.14.Final |
https://access.redhat.com/errata/RHSA-2023:7637
https://access.redhat.com/errata/RHSA-2023:7638
https://access.redhat.com/errata/RHSA-2023:7639
https://access.redhat.com/errata/RHSA-2023:7641
https://access.redhat.com/errata/RHSA-2024:10207
https://access.redhat.com/errata/RHSA-2024:10208
https://access.redhat.com/errata/RHSA-2024:2707
https://access.redhat.com/security/cve/CVE-2023-5685
https://bugzilla.redhat.com/show_bug.cgi?id=2241822
https://github.com/xnio/xnio
https://github.com/xnio/xnio/blob/3.8.13.Final/api/src/main/java/org/xnio/AbstractIoFuture.java#L249
https://github.com/xnio/xnio/commit/ffabdcdda508ef87aeadad5ca3f854e274d60ec1
https://issues.redhat.com/browse/XNIO-423
https://nvd.nist.gov/vuln/detail/CVE-2023-5685
https://www.cve.org/CVERecord?id=CVE-2023-5685
|
| org.jboss.xnio:xnio-api |
CVE-2023-5685 |
HIGH |
3.7.7.Final |
3.8.14.Final |
https://access.redhat.com/errata/RHSA-2023:7637
https://access.redhat.com/errata/RHSA-2023:7638
https://access.redhat.com/errata/RHSA-2023:7639
https://access.redhat.com/errata/RHSA-2023:7641
https://access.redhat.com/errata/RHSA-2024:10207
https://access.redhat.com/errata/RHSA-2024:10208
https://access.redhat.com/errata/RHSA-2024:2707
https://access.redhat.com/security/cve/CVE-2023-5685
https://bugzilla.redhat.com/show_bug.cgi?id=2241822
https://github.com/xnio/xnio
https://github.com/xnio/xnio/blob/3.8.13.Final/api/src/main/java/org/xnio/AbstractIoFuture.java#L249
https://github.com/xnio/xnio/commit/ffabdcdda508ef87aeadad5ca3f854e274d60ec1
https://issues.redhat.com/browse/XNIO-423
https://nvd.nist.gov/vuln/detail/CVE-2023-5685
https://www.cve.org/CVERecord?id=CVE-2023-5685
|
| org.jboss.xnio:xnio-api |
CVE-2023-5685 |
HIGH |
3.7.7.Final |
3.8.14.Final |
https://access.redhat.com/errata/RHSA-2023:7637
https://access.redhat.com/errata/RHSA-2023:7638
https://access.redhat.com/errata/RHSA-2023:7639
https://access.redhat.com/errata/RHSA-2023:7641
https://access.redhat.com/errata/RHSA-2024:10207
https://access.redhat.com/errata/RHSA-2024:10208
https://access.redhat.com/errata/RHSA-2024:2707
https://access.redhat.com/security/cve/CVE-2023-5685
https://bugzilla.redhat.com/show_bug.cgi?id=2241822
https://github.com/xnio/xnio
https://github.com/xnio/xnio/blob/3.8.13.Final/api/src/main/java/org/xnio/AbstractIoFuture.java#L249
https://github.com/xnio/xnio/commit/ffabdcdda508ef87aeadad5ca3f854e274d60ec1
https://issues.redhat.com/browse/XNIO-423
https://nvd.nist.gov/vuln/detail/CVE-2023-5685
https://www.cve.org/CVERecord?id=CVE-2023-5685
|
| org.jboss.xnio:xnio-nio |
CVE-2020-14340 |
MEDIUM |
3.7.7.Final |
3.8.2.Final, 3.7.9.Final |
https://access.redhat.com/security/cve/CVE-2020-14340
https://bugzilla.redhat.com/show_bug.cgi?id=1860218
https://nvd.nist.gov/vuln/detail/CVE-2020-14340
https://www.cve.org/CVERecord?id=CVE-2020-14340
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
|
| org.jboss.xnio:xnio-nio |
CVE-2020-14340 |
MEDIUM |
3.7.7.Final |
3.8.2.Final, 3.7.9.Final |
https://access.redhat.com/security/cve/CVE-2020-14340
https://bugzilla.redhat.com/show_bug.cgi?id=1860218
https://nvd.nist.gov/vuln/detail/CVE-2020-14340
https://www.cve.org/CVERecord?id=CVE-2020-14340
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
|
| org.jboss.xnio:xnio-nio |
CVE-2020-14340 |
MEDIUM |
3.7.7.Final |
3.8.2.Final, 3.7.9.Final |
https://access.redhat.com/security/cve/CVE-2020-14340
https://bugzilla.redhat.com/show_bug.cgi?id=1860218
https://nvd.nist.gov/vuln/detail/CVE-2020-14340
https://www.cve.org/CVERecord?id=CVE-2020-14340
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
|
| org.jboss:jboss-ejb-client |
CVE-2020-14297 |
MEDIUM |
4.0.30.Final |
4.0.34.Final |
https://access.redhat.com/errata/RHSA-2020:3141
https://access.redhat.com/errata/RHSA-2020:3142
https://access.redhat.com/errata/RHSA-2020:3143
https://access.redhat.com/errata/RHSA-2020:3144
https://access.redhat.com/errata/RHSA-2020:3461
https://access.redhat.com/errata/RHSA-2020:3462
https://access.redhat.com/errata/RHSA-2020:3463
https://access.redhat.com/errata/RHSA-2020:3464
https://access.redhat.com/errata/RHSA-2020:3501
https://access.redhat.com/errata/RHSA-2020:3539
https://access.redhat.com/errata/RHSA-2020:3637
https://access.redhat.com/errata/RHSA-2020:3638
https://access.redhat.com/errata/RHSA-2020:3639
https://access.redhat.com/errata/RHSA-2020:3642
https://access.redhat.com/errata/RHSA-2020:3817
https://access.redhat.com/errata/RHSA-2021:3140
https://access.redhat.com/security/cve/CVE-2020-14297
https://access.redhat.com/solutions/21906
https://bugzilla.redhat.com/show_bug.cgi?id=1853595
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14297
https://github.com/wildfly/jboss-ejb-client
https://github.com/wildfly/jboss-ejb-client/commit/e5f8e4b591f1698a53adc7e430584ca2a8fc9f1b
https://github.com/wildfly/jboss-ejb-client/commits/4.0.34.Final
https://nvd.nist.gov/vuln/detail/CVE-2020-14297
https://www.cve.org/CVERecord?id=CVE-2020-14297
|
| org.jboss:jboss-ejb-client |
CVE-2020-14297 |
MEDIUM |
4.0.30.Final |
4.0.34.Final |
https://access.redhat.com/errata/RHSA-2020:3141
https://access.redhat.com/errata/RHSA-2020:3142
https://access.redhat.com/errata/RHSA-2020:3143
https://access.redhat.com/errata/RHSA-2020:3144
https://access.redhat.com/errata/RHSA-2020:3461
https://access.redhat.com/errata/RHSA-2020:3462
https://access.redhat.com/errata/RHSA-2020:3463
https://access.redhat.com/errata/RHSA-2020:3464
https://access.redhat.com/errata/RHSA-2020:3501
https://access.redhat.com/errata/RHSA-2020:3539
https://access.redhat.com/errata/RHSA-2020:3637
https://access.redhat.com/errata/RHSA-2020:3638
https://access.redhat.com/errata/RHSA-2020:3639
https://access.redhat.com/errata/RHSA-2020:3642
https://access.redhat.com/errata/RHSA-2020:3817
https://access.redhat.com/errata/RHSA-2021:3140
https://access.redhat.com/security/cve/CVE-2020-14297
https://access.redhat.com/solutions/21906
https://bugzilla.redhat.com/show_bug.cgi?id=1853595
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14297
https://github.com/wildfly/jboss-ejb-client
https://github.com/wildfly/jboss-ejb-client/commit/e5f8e4b591f1698a53adc7e430584ca2a8fc9f1b
https://github.com/wildfly/jboss-ejb-client/commits/4.0.34.Final
https://nvd.nist.gov/vuln/detail/CVE-2020-14297
https://www.cve.org/CVERecord?id=CVE-2020-14297
|
| org.jboss:jboss-ejb-client |
CVE-2021-20250 |
MEDIUM |
4.0.30.Final |
4.0.39 |
https://access.redhat.com/security/cve/CVE-2021-20250
https://bugzilla.redhat.com/show_bug.cgi?id=1929479
https://nvd.nist.gov/vuln/detail/CVE-2021-20250
https://www.cve.org/CVERecord?id=CVE-2021-20250
|
| org.jboss:jboss-ejb-client |
CVE-2021-20250 |
MEDIUM |
4.0.30.Final |
4.0.39 |
https://access.redhat.com/security/cve/CVE-2021-20250
https://bugzilla.redhat.com/show_bug.cgi?id=1929479
https://nvd.nist.gov/vuln/detail/CVE-2021-20250
https://www.cve.org/CVERecord?id=CVE-2021-20250
|
| org.jsoup:jsoup |
CVE-2021-37714 |
HIGH |
1.8.3 |
1.14.2 |
https://access.redhat.com/security/cve/CVE-2021-37714
https://github.com/jhy/jsoup
https://github.com/jhy/jsoup/security/advisories/GHSA-m72m-mhq2-9p6c
https://jsoup.org/news/release-1.14.1
https://jsoup.org/news/release-1.14.2
https://lists.apache.org/thread.html/r215009dbf7467a9f6506d0c0024cb36cad30071010e62c9352cfaaf0@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/r377b93d79817ce649e9e68b3456e6f499747ef1643fa987b342e082e@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/r3d71f18adb78e50f626dde689161ca63d3b7491bd9718fcddfaecba7@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/r50e9c9466c592ca9d707a5dea549524d19e3287da08d8392f643960e@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/r685c5235235ad0c26e86d0ee987fb802c9675de6081dbf0516464e0b@%3Cnotifications.james.apache.org%3E
https://lists.apache.org/thread.html/r97404676a5cf591988faedb887d64e278f522adcaa823d89ca69defe@%3Cnotifications.james.apache.org%3E
https://lists.apache.org/thread.html/rc3354080fc67fb50b45b3c2d12dc4ca2a3c1c78dad3d3ba012c038aa@%3Cnotifications.james.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2021-37714
https://security.netapp.com/advisory/ntap-20220210-0022
https://security.netapp.com/advisory/ntap-20220210-0022/
https://www.cve.org/CVERecord?id=CVE-2021-37714
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
|
| org.jsoup:jsoup |
CVE-2026-75140 |
HIGH |
1.8.3 |
1.23.2 |
https://access.redhat.com/security/cve/CVE-2026-75140
https://advisory.echohq.com/cve/CVE-2026-75140
https://github.com/jhy/jsoup
https://github.com/jhy/jsoup/commit/862ba2f1d48ee95609183dbcfc848c9fd7afc76a
https://github.com/jhy/jsoup/pull/2556
https://github.com/jhy/jsoup/releases/tag/jsoup-1.23.2
https://nvd.nist.gov/vuln/detail/CVE-2026-75140
https://www.cve.org/CVERecord?id=CVE-2026-75140
https://www.vulncheck.com/advisories/jsoup-uncontrolled-resource-consumption-in-xmltreebuilder
|
| org.jsoup:jsoup |
CVE-2022-36033 |
MEDIUM |
1.8.3 |
1.15.3 |
https://access.redhat.com/security/cve/CVE-2022-36033
https://github.com/jhy/jsoup
https://github.com/jhy/jsoup/releases/tag/jsoup-1.15.3
https://github.com/jhy/jsoup/security/advisories/GHSA-gp7f-rwcx-9369
https://jsoup.org/news/release-1.15.3
https://nvd.nist.gov/vuln/detail/CVE-2022-36033
https://security.netapp.com/advisory/ntap-20221104-0006
https://security.netapp.com/advisory/ntap-20221104-0006/
https://www.cve.org/CVERecord?id=CVE-2022-36033
|
| org.keycloak:keycloak-adapter-core |
CVE-2026-1180 |
MEDIUM |
11.0.3 |
|
https://access.redhat.com/errata/RHSA-2026:6477
https://access.redhat.com/errata/RHSA-2026:6478
https://access.redhat.com/security/cve/CVE-2026-1180
https://bugzilla.redhat.com/show_bug.cgi?id=2430781
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/issues/45645
https://nvd.nist.gov/vuln/detail/CVE-2026-1180
https://www.cve.org/CVERecord?id=CVE-2026-1180
|
| org.keycloak:keycloak-core |
CVE-2021-20195 |
CRITICAL |
11.0.3 |
13.0.0 |
https://access.redhat.com/security/cve/CVE-2021-20195
https://bugzilla.redhat.com/show_bug.cgi?id=1919143
https://github.com/keycloak/keycloak/commit/717d9515fa131e3d8c8936e41b2e52270fdec976
https://nvd.nist.gov/vuln/detail/CVE-2021-20195
https://www.cve.org/CVERecord?id=CVE-2021-20195
|
| org.keycloak:keycloak-core |
CVE-2020-14389 |
HIGH |
11.0.3 |
12.0.0 |
https://access.redhat.com/security/cve/CVE-2020-14389
https://access.redhat.com/security/cve/cve-2020-14389
https://bugzilla.redhat.com/show_bug.cgi?id=1875843%2C
https://nvd.nist.gov/vuln/detail/CVE-2020-14389
https://www.cve.org/CVERecord?id=CVE-2020-14389
|
| org.keycloak:keycloak-core |
CVE-2020-27826 |
HIGH |
11.0.3 |
12.0.0 |
https://access.redhat.com/security/cve/CVE-2020-27826
https://access.redhat.com/security/cve/cve-2020-27826
https://bugzilla.redhat.com/show_bug.cgi?id=1905089
https://github.com/keycloak/keycloak/commit/dae4a3eaf26590b8d441b8e4bec3b700ee303b72
https://nvd.nist.gov/vuln/detail/CVE-2020-27826
https://www.cve.org/CVERecord?id=CVE-2020-27826
|
| org.keycloak:keycloak-core |
CVE-2021-20202 |
HIGH |
11.0.3 |
13.0.0 |
https://access.redhat.com/security/cve/CVE-2021-20202
https://bugzilla.redhat.com/show_bug.cgi?id=1922128
https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-7gf3-89f6-823j
https://issues.redhat.com/browse/KEYCLOAK-17000
https://nvd.nist.gov/vuln/detail/CVE-2021-20202
https://www.cve.org/CVERecord?id=CVE-2021-20202
|
| org.keycloak:keycloak-core |
CVE-2021-3632 |
HIGH |
11.0.3 |
15.1.0 |
https://access.redhat.com/security/cve/CVE-2021-3632
https://bugzilla.redhat.com/show_bug.cgi?id=1978196
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/commit/65480cb5a11630909c086f79d396004499fbd1e4
https://github.com/keycloak/keycloak/pull/8203
https://issues.redhat.com/browse/KEYCLOAK-18500
https://nvd.nist.gov/vuln/detail/CVE-2021-3632
https://www.cve.org/CVERecord?id=CVE-2021-3632
|
| org.keycloak:keycloak-core |
CVE-2023-6841 |
HIGH |
11.0.3 |
24.0.0 |
https://access.redhat.com/security/cve/CVE-2023-6841
https://bugzilla.redhat.com/show_bug.cgi?id=2254714
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/issues/32837
https://github.com/keycloak/keycloak/releases/tag/24.0.0
https://nvd.nist.gov/vuln/detail/CVE-2023-6841
https://www.cve.org/CVERecord?id=CVE-2023-6841
|
| org.keycloak:keycloak-core |
CVE-2024-10039 |
HIGH |
11.0.3 |
26.0.6 |
https://access.redhat.com/security/cve/CVE-2024-10039
https://advisory.echohq.com/cve/CVE-2024-10039
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/issues/35217
https://github.com/keycloak/keycloak/security/advisories/GHSA-93ww-43rr-79v3
https://nvd.nist.gov/vuln/detail/CVE-2024-10039
https://www.cve.org/CVERecord?id=CVE-2024-10039
|
| org.keycloak:keycloak-core |
CVE-2020-10770 |
MEDIUM |
11.0.3 |
13.0.0 |
http://packetstormsecurity.com/files/164499/Keycloak-12.0.1-Server-Side-Request-Forgery.html
https://access.redhat.com/security/cve/CVE-2020-10770
https://bugzilla.redhat.com/show_bug.cgi?id=1846270
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak-documentation/pull/1086
https://github.com/keycloak/keycloak/pull/7714
https://issues.redhat.com/browse/KEYCLOAK-14019
https://issues.redhat.com/browse/KEYCLOAK-3426
https://nvd.nist.gov/vuln/detail/CVE-2020-10770
https://www.cve.org/CVERecord?id=CVE-2020-10770
|
| org.keycloak:keycloak-core |
CVE-2020-27838 |
MEDIUM |
11.0.3 |
13.0.0 |
https://access.redhat.com/security/cve/CVE-2020-27838
https://bugzilla.redhat.com/show_bug.cgi?id=1906797
https://github.com/keycloak/keycloak/commit/9356843c6c3d7097d010b3bb6f91e25fcaba378c
https://github.com/keycloak/keycloak/pull/7790
https://nvd.nist.gov/vuln/detail/CVE-2020-27838
https://www.cve.org/CVERecord?id=CVE-2020-27838
|
| org.keycloak:keycloak-core |
CVE-2020-35509 |
MEDIUM |
11.0.3 |
14.0.0 |
https://access.redhat.com/security/cve/CVE-2020-35509
https://access.redhat.com/security/cve/cve-2020-35509
https://bugzilla.redhat.com/show_bug.cgi?id=1912427
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/blob/4f330f4a57cbfcf6202b60546518261c66e59a35/services/src/main/java/org/keycloak/authentication/authenticators/x509/ValidateX509CertificateUsername.java#L74-L76
https://github.com/keycloak/keycloak/commit/478319348bdfdb9b6d39122f41edf2af79f679bb
https://github.com/keycloak/keycloak/pull/6330
https://github.com/keycloak/keycloak/pull/8067
https://nvd.nist.gov/vuln/detail/CVE-2020-35509
https://www.cve.org/CVERecord?id=CVE-2020-35509
|
| org.keycloak:keycloak-core |
CVE-2021-20262 |
MEDIUM |
11.0.3 |
|
https://access.redhat.com/security/cve/CVE-2021-20262
https://bugzilla.redhat.com/show_bug.cgi?id=1933639
https://github.com/keycloak/keycloak/security/advisories/GHSA-ff8c-cgcp-p9gm
https://nvd.nist.gov/vuln/detail/CVE-2021-20262
https://www.cve.org/CVERecord?id=CVE-2021-20262
|
| org.keycloak:keycloak-core |
CVE-2021-3856 |
MEDIUM |
11.0.3 |
15.1.0 |
https://access.redhat.com/security/cve/CVE-2021-3856
https://bugzilla.redhat.com/show_bug.cgi?id=2010164
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/commit/73f0474008e1bebd0733e62a22aceda9e5de6743
https://github.com/keycloak/keycloak/pull/8588
https://issues.redhat.com/browse/KEYCLOAK-19422
https://nvd.nist.gov/vuln/detail/CVE-2021-3856
https://www.cve.org/CVERecord?id=CVE-2021-3856
|
| org.keycloak:keycloak-core |
CVE-2022-0225 |
MEDIUM |
11.0.3 |
|
https://access.redhat.com/security/cve/CVE-2022-0225
https://bugzilla.redhat.com/show_bug.cgi?id=2040268
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/security/advisories/GHSA-755v-r4x4-qf7m
https://nvd.nist.gov/vuln/detail/CVE-2022-0225
https://www.cve.org/CVERecord?id=CVE-2022-0225
|
| org.keycloak:keycloak-core |
CVE-2022-1466 |
MEDIUM |
11.0.3 |
17.0.1 |
https://access.redhat.com/security/cve/CVE-2022-1466
https://bugzilla.redhat.com/show_bug.cgi?id=2050228
https://github.com/keycloak/keycloak
https://nvd.nist.gov/vuln/detail/CVE-2022-1466
https://www.cve.org/CVERecord?id=CVE-2022-1466
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-076.txt
https://www.syss.de/pentest-blog/fehlerhafte-autorisierung-bei-red-hat-single-sign-on-750ga-syss-2021-076
|
| org.keycloak:keycloak-core |
CVE-2023-0091 |
MEDIUM |
11.0.3 |
20.0.3 |
https://access.redhat.com/security/cve/CVE-2023-0091
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/security/advisories/GHSA-v436-q368-hvgg
https://github.com/keycloak/security/issues/27
https://nvd.nist.gov/vuln/detail/CVE-2023-0091
https://www.cve.org/CVERecord?id=CVE-2023-0091
|
| org.keycloak:keycloak-core |
CVE-2023-0105 |
MEDIUM |
11.0.3 |
22.0.1 |
https://access.redhat.com/security/cve/CVE-2023-0105
https://bugzilla.redhat.com/show_bug.cgi?id=2158910
https://github.com/advisories/GHSA-c7xw-p58w-h6fj
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/commit/87a50d3ba790b049e436c9925874f9b418af7988
https://github.com/keycloak/keycloak/security/advisories/GHSA-c7xw-p58w-h6fj
https://nvd.nist.gov/vuln/detail/CVE-2023-0105
https://www.cve.org/CVERecord?id=CVE-2023-0105
|
| org.keycloak:keycloak-core |
CVE-2023-1664 |
MEDIUM |
11.0.3 |
21.1.2 |
https://access.redhat.com/security/cve/CVE-2023-1664
https://bugzilla.redhat.com/show_bug.cgi?id=2182196&comment#0
https://github.com/advisories/GHSA-5cc8-pgp5-7mpm
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/security/advisories/GHSA-5cc8-pgp5-7mpm
https://nvd.nist.gov/vuln/detail/CVE-2023-1664
https://www.cve.org/CVERecord?id=CVE-2023-1664
|
| org.keycloak:keycloak-core |
CVE-2023-6927 |
MEDIUM |
11.0.3 |
23.0.4 |
https://access.redhat.com/errata/RHSA-2024:0094
https://access.redhat.com/errata/RHSA-2024:0095
https://access.redhat.com/errata/RHSA-2024:0096
https://access.redhat.com/errata/RHSA-2024:0097
https://access.redhat.com/errata/RHSA-2024:0098
https://access.redhat.com/errata/RHSA-2024:0100
https://access.redhat.com/errata/RHSA-2024:0101
https://access.redhat.com/errata/RHSA-2024:0798
https://access.redhat.com/errata/RHSA-2024:0799
https://access.redhat.com/errata/RHSA-2024:0800
https://access.redhat.com/errata/RHSA-2024:0801
https://access.redhat.com/errata/RHSA-2024:0804
https://access.redhat.com/security/cve/CVE-2023-6927
https://bugzilla.redhat.com/show_bug.cgi?id=2255027
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/security/advisories/GHSA-9vm7-v8wj-3fqw
https://nvd.nist.gov/vuln/detail/CVE-2023-6927
https://www.cve.org/CVERecord?id=CVE-2023-6927
|
| org.keycloak:keycloak-core |
CVE-2024-7260 |
MEDIUM |
11.0.3 |
24.0.7 |
https://access.redhat.com/errata/RHSA-2024:6502
https://access.redhat.com/errata/RHSA-2024:6503
https://access.redhat.com/security/cve/CVE-2024-7260
https://bugzilla.redhat.com/show_bug.cgi?id=2301875
https://github.com/keycloak/keycloak
https://nvd.nist.gov/vuln/detail/CVE-2024-7260
https://www.cve.org/CVERecord?id=CVE-2024-7260
|
| org.keycloak:keycloak-core |
CVE-2024-7318 |
MEDIUM |
11.0.3 |
24.0.7, 25.0.4 |
https://access.redhat.com/errata/RHSA-2024:6502
https://access.redhat.com/errata/RHSA-2024:6503
https://access.redhat.com/security/cve/CVE-2024-7318
https://bugzilla.redhat.com/show_bug.cgi?id=2301876
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/security/advisories/GHSA-xmmm-jw76-q7vg
https://nvd.nist.gov/vuln/detail/CVE-2024-7318
https://www.cve.org/CVERecord?id=CVE-2024-7318
|
| org.keycloak:keycloak-core |
GHSA-755v-r4x4-qf7m |
MEDIUM |
11.0.3 |
20.0.0 |
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/security/advisories/GHSA-755v-r4x4-qf7m
|
| org.keycloak:keycloak-core |
CVE-2024-4028 |
LOW |
11.0.3 |
|
https://access.redhat.com/security/cve/CVE-2024-4028
https://advisory.echohq.com/cve/CVE-2024-4028
https://bugzilla.redhat.com/show_bug.cgi?id=2276418
https://github.com/keycloak/keycloak
https://nvd.nist.gov/vuln/detail/CVE-2024-4028
https://www.cve.org/CVERecord?id=CVE-2024-4028
|
| org.keycloak:keycloak-saml-adapter-core |
CVE-2026-2575 |
MEDIUM |
11.0.3 |
26.5.4 |
https://access.redhat.com/errata/RHSA-2026:3947
https://access.redhat.com/errata/RHSA-2026:3948
https://access.redhat.com/errata/RHSA-2026:76128
https://access.redhat.com/errata/RHSA-2026:76129
https://access.redhat.com/errata/RHSA-2026:76130
https://access.redhat.com/errata/RHSA-2026:76132
https://access.redhat.com/errata/RHSA-2026:76134
https://access.redhat.com/security/cve/CVE-2026-2575
https://advisory.echohq.com/cve/CVE-2026-2575
https://bugzilla.redhat.com/show_bug.cgi?id=2440149
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/commit/4f90ef67f698dfb45df0d2f4981271a7c8b47f04
https://github.com/keycloak/keycloak/issues/46372
https://nvd.nist.gov/vuln/detail/CVE-2026-2575
https://www.cve.org/CVERecord?id=CVE-2026-2575
|
| org.keycloak:keycloak-saml-core |
CVE-2021-3827 |
HIGH |
11.0.3 |
18.0.0 |
https://access.redhat.com/security/cve/CVE-2021-3827
https://bugzilla.redhat.com/show_bug.cgi?id=2007512
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/commit/44000caaf5051d7f218d1ad79573bd3d175cad0d
https://github.com/keycloak/keycloak/security/advisories/GHSA-4pc7-vqv5-5r3v
https://nvd.nist.gov/vuln/detail/CVE-2021-3827
https://www.cve.org/CVERecord?id=CVE-2021-3827
|
| org.keycloak:keycloak-saml-core |
CVE-2024-8698 |
HIGH |
11.0.3 |
22.0.13, 24.0.8, 25.0.6 |
https://access.redhat.com/errata/RHSA-2024:6878
https://access.redhat.com/errata/RHSA-2024:6879
https://access.redhat.com/errata/RHSA-2024:6880
https://access.redhat.com/errata/RHSA-2024:6882
https://access.redhat.com/errata/RHSA-2024:6886
https://access.redhat.com/errata/RHSA-2024:6887
https://access.redhat.com/errata/RHSA-2024:6888
https://access.redhat.com/errata/RHSA-2024:6889
https://access.redhat.com/errata/RHSA-2024:6890
https://access.redhat.com/errata/RHSA-2024:8823
https://access.redhat.com/errata/RHSA-2024:8824
https://access.redhat.com/errata/RHSA-2024:8826
https://access.redhat.com/security/cve/CVE-2024-8698
https://bugzilla.redhat.com/show_bug.cgi?id=2311641
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/releases/tag/25.0.6
https://github.com/keycloak/keycloak/security/advisories/GHSA-xgfv-xpx8-qhcr
https://nvd.nist.gov/vuln/detail/CVE-2024-8698
https://www.cve.org/CVERecord?id=CVE-2024-8698
|
| org.keycloak:keycloak-saml-core |
CVE-2026-7307 |
HIGH |
11.0.3 |
26.6.2 |
https://access.redhat.com/errata/RHSA-2026:19594
https://access.redhat.com/errata/RHSA-2026:19595
https://access.redhat.com/errata/RHSA-2026:19596
https://access.redhat.com/errata/RHSA-2026:19597
https://access.redhat.com/errata/RHSA-2026:76128
https://access.redhat.com/errata/RHSA-2026:76129
https://access.redhat.com/errata/RHSA-2026:76130
https://access.redhat.com/errata/RHSA-2026:76132
https://access.redhat.com/errata/RHSA-2026:76134
https://access.redhat.com/security/cve/CVE-2026-7307
https://advisory.echohq.com/cve/CVE-2026-7307
https://bugzilla.redhat.com/show_bug.cgi?id=2476526
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/commit/be84d28ce4c69c038d542f11405d5ede1d61f4a9
https://github.com/keycloak/keycloak/pull/49119
https://github.com/keycloak/keycloak/releases/tag/26.6.2
https://nvd.nist.gov/vuln/detail/CVE-2026-7307
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-7307.json
https://www.cve.org/CVERecord?id=CVE-2026-7307
|
| org.keycloak:keycloak-saml-core |
CVE-2026-2575 |
MEDIUM |
11.0.3 |
26.5.4 |
https://access.redhat.com/errata/RHSA-2026:3947
https://access.redhat.com/errata/RHSA-2026:3948
https://access.redhat.com/errata/RHSA-2026:76128
https://access.redhat.com/errata/RHSA-2026:76129
https://access.redhat.com/errata/RHSA-2026:76130
https://access.redhat.com/errata/RHSA-2026:76132
https://access.redhat.com/errata/RHSA-2026:76134
https://access.redhat.com/security/cve/CVE-2026-2575
https://advisory.echohq.com/cve/CVE-2026-2575
https://bugzilla.redhat.com/show_bug.cgi?id=2440149
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/commit/4f90ef67f698dfb45df0d2f4981271a7c8b47f04
https://github.com/keycloak/keycloak/issues/46372
https://nvd.nist.gov/vuln/detail/CVE-2026-2575
https://www.cve.org/CVERecord?id=CVE-2026-2575
|
| org.mariadb.jdbc:mariadb-java-client |
CVE-2026-55856 |
MEDIUM |
2.3.0 |
2.7.14, 3.3.5, 3.4.3, 3.5.9 |
https://access.redhat.com/security/cve/CVE-2026-55856
https://advisory.echohq.com/cve/CVE-2026-55856
https://github.com/mariadb-corporation/mariadb-connector-j
https://github.com/mariadb-corporation/mariadb-connector-j/commit/149ec6a626376214966c01f42d48be1b80d06056
https://github.com/mariadb-corporation/mariadb-connector-j/commit/d90b9872322c76b05a48219be66bff1d33102f8a
https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.4.3
https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.5.9
https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-g9jj-cgmh-9f38
https://hackerone.com/reports/3777370
https://jira.mariadb.org/browse/CONJ-1325
https://nvd.nist.gov/vuln/detail/CVE-2026-55856
https://www.cve.org/CVERecord?id=CVE-2026-55856
|
| org.mariadb.jdbc:mariadb-java-client |
CVE-2026-55857 |
MEDIUM |
2.3.0 |
2.7.14, 3.3.5, 3.4.3, 3.5.9 |
https://access.redhat.com/security/cve/CVE-2026-55857
https://advisory.echohq.com/cve/CVE-2026-55857
https://github.com/mariadb-corporation/mariadb-connector-j
https://github.com/mariadb-corporation/mariadb-connector-j/commit/a8599ab1cbe4b8818ea945bf56a4e012c302b388
https://github.com/mariadb-corporation/mariadb-connector-j/commit/f4a727c764d1cf48fd0c3d5e301dfa92503e0a58
https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.4.3
https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.5.9
https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-qxvw-fvwx-5cp7
https://jira.mariadb.org/browse/CONJ-1320
https://nvd.nist.gov/vuln/detail/CVE-2026-55857
https://www.cve.org/CVERecord?id=CVE-2026-55857
|
| org.mariadb.jdbc:mariadb-java-client |
CVE-2026-55858 |
MEDIUM |
2.3.0 |
2.7.14, 3.3.5, 3.4.3, 3.5.9 |
https://access.redhat.com/security/cve/CVE-2026-55858
https://advisory.echohq.com/cve/CVE-2026-55858
https://github.com/mariadb-corporation/mariadb-connector-j
https://github.com/mariadb-corporation/mariadb-connector-j/commit/300716bef1e1d0370a41be7863b88aa2d55fbb69
https://github.com/mariadb-corporation/mariadb-connector-j/commit/7b3c69221b5463ee03472654040b3f6b9e5329c7
https://github.com/mariadb-corporation/mariadb-connector-j/commit/8cfd9df697372ad4ed09fe87a34b34babb6d43d6
https://github.com/mariadb-corporation/mariadb-connector-j/commit/c555c9b477521be0c35c3a5461f9f46681553607
https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/2.7.14
https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.3.5
https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.4.3
https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.5.9
https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-xvr9-35cr-46v9
https://jira.mariadb.org/browse/CONJ-1317
https://nvd.nist.gov/vuln/detail/CVE-2026-55858
https://www.cve.org/CVERecord?id=CVE-2026-55858
|
| org.mariadb.jdbc:mariadb-java-client |
CVE-2026-61700 |
LOW |
2.3.0 |
2.7.14, 3.3.5, 3.4.3, 3.5.9 |
https://access.redhat.com/security/cve/CVE-2026-61700
https://advisory.echohq.com/cve/CVE-2026-61700
https://github.com/mariadb-corporation/mariadb-connector-j
https://github.com/mariadb-corporation/mariadb-connector-j/commit/0205d8be947918566cd9ce5a9db149541bbc8dee
https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.5.9
https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-wxmm-q36w-r9xj
https://nvd.nist.gov/vuln/detail/CVE-2026-61700
https://www.cve.org/CVERecord?id=CVE-2026-61700
|
| org.picketlink:picketlink-common |
CVE-2014-3530 |
HIGH |
2.5.5.SP12-redhat-00006 |
2.7.0.Final |
http://rhn.redhat.com/errata/RHSA-2014-0883.html
http://rhn.redhat.com/errata/RHSA-2014-0884.html
http://rhn.redhat.com/errata/RHSA-2014-0885.html
http://rhn.redhat.com/errata/RHSA-2014-0886.html
http://rhn.redhat.com/errata/RHSA-2015-0091.html
http://rhn.redhat.com/errata/RHSA-2015-0675.html
http://rhn.redhat.com/errata/RHSA-2015-0720.html
http://rhn.redhat.com/errata/RHSA-2015-0765.html
http://rhn.redhat.com/errata/RHSA-2015-1888.html
http://secunia.com/advisories/60047
http://secunia.com/advisories/60124
http://www.securitytracker.com/id/1030607
https://access.redhat.com/security/cve/CVE-2014-3530
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1112987
https://exchange.xforce.ibmcloud.com/vulnerabilities/94700
https://github.com/picketlink/picketlink
https://github.com/picketlink/picketlink/commit/8c78668e4f08cf3c4ed14d8a36d402dcf02cb057
https://issues.jboss.org/browse/PLINK-509
https://nvd.nist.gov/vuln/detail/CVE-2014-3530
https://www.cve.org/CVERecord?id=CVE-2014-3530
|
| org.postgresql:postgresql |
CVE-2024-1597 |
CRITICAL |
42.2.10 |
42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2 |
http://www.openwall.com/lists/oss-security/2024/04/02/6
https://access.redhat.com/errata/RHSA-2024:1436
https://access.redhat.com/security/cve/CVE-2024-1597
https://bugzilla.redhat.com/2266523
https://bugzilla.redhat.com/show_bug.cgi?id=2266523
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1597
https://errata.almalinux.org/9/ALSA-2024-1436.html
https://errata.rockylinux.org/RLSA-2024:1436
https://github.com/pgjdbc/pgjdbc
https://github.com/pgjdbc/pgjdbc/commit/06abfb78a627277a580d4df825f210e96a4e14ee
https://github.com/pgjdbc/pgjdbc/commit/06abfb78a627277a580d4df825f210e96a4e14ee%20%28REL42.7.2%29
https://github.com/pgjdbc/pgjdbc/commit/1b1d6b53eca90409af0069d5327d4fdf8d40a255%20%28REL42.5.5%29
https://github.com/pgjdbc/pgjdbc/commit/475e3e2af3033c666fc1c0015159b35455118ae5%20%28REL42.5.5%29
https://github.com/pgjdbc/pgjdbc/commit/93b0fcb2711d9c1e3a2a03134369738a02a58b40
https://github.com/pgjdbc/pgjdbc/commit/93b0fcb2711d9c1e3a2a03134369738a02a58b40%20%28REL42.7.2%29
https://github.com/pgjdbc/pgjdbc/commit/990d63f6be401ab40de5eb303a75924c9e71903c%20%28REL42.2.28%29
https://github.com/pgjdbc/pgjdbc/commit/b9b3777671c8a5cc580e1985f61337d39d47c730%20%28REL42.2.28%29
https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-24rp-q3w6-vc56
https://linux.oracle.com/cve/CVE-2024-1597.html
https://linux.oracle.com/errata/ELSA-2024-1436.html
https://lists.debian.org/debian-lts-announce/2024/05/msg00007.html
https://lists.debian.org/debian-lts-announce/2024/12/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TZQTSMESZD2RJ5XBPSXH3TIQVUW5DIUU/
https://nvd.nist.gov/vuln/detail/CVE-2024-1597
https://security.netapp.com/advisory/ntap-20240419-0008/
https://www.cve.org/CVERecord?id=CVE-2024-1597
https://www.enterprisedb.com/docs/jdbc_connector/latest/01_jdbc_rel_notes/
https://www.enterprisedb.com/docs/security/assessments/cve-2024-1597/
https://www.sonarsource.com/blog/double-dash-double-trouble-a-subtle-sql-injection-flaw/
|
| org.postgresql:postgresql |
CVE-2020-13692 |
HIGH |
42.2.10 |
42.2.13 |
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13692.json
https://access.redhat.com/security/cve/CVE-2020-13692
https://errata.almalinux.org/8/ALSA-2020-3176.html
https://github.com/pgjdbc/pgjdbc/commit/14b62aca4764d496813f55a43d050b017e01eb65
https://jdbc.postgresql.org/documentation/changelog.html#version_42.2.13
https://linux.oracle.com/cve/CVE-2020-13692.html
https://linux.oracle.com/errata/ELSA-2020-3285.html
https://lists.apache.org/thread.html/r00bcc6b2da972e0d6332a4ebc7807e17305d8b8e7fb2ae63d2a3cbfb@%3Ccommits.camel.apache.org%3E
https://lists.apache.org/thread.html/r01ae1b3d981cf2e563e9b5b0a6ea54fb3cac8e9a0512ee5269e3420e@%3Ccommits.camel.apache.org%3E
https://lists.apache.org/thread.html/r0478a1aa9ae0dbd79d8f7b38d0d93fa933ac232e2b430b6f31a103c0@%3Ccommits.camel.apache.org%3E
https://lists.apache.org/thread.html/r1aae77706aab7d89b4fe19be468fc3c73e9cc84ff79cc2c3bd07c05a@%3Ccommits.camel.apache.org%3E
https://lists.apache.org/thread.html/r4bdea189c9991aae7a929d28f575ec46e49ed3d68fa5235825f38a4f@%3Cnotifications.netbeans.apache.org%3E
https://lists.apache.org/thread.html/r631f967db6260d6178740a3314a35d9421facd8212e62320275fa78e@%3Ccommits.camel.apache.org%3E
https://lists.apache.org/thread.html/r7f6d019839df17646ffd0046a99146cacf40492a6c92078f65fd32e0@%3Ccommits.camel.apache.org%3E
https://lists.apache.org/thread.html/rb89f92aba44f524d5c270e0c44ca7aec4704691c37fe106cf73ec977@%3Cnotifications.netbeans.apache.org%3E
https://lists.apache.org/thread.html/rfe363bf3a46d440ad57fd05c0e313025c7218364bbdc5fd8622ea7ae@%3Ccommits.camel.apache.org%3E
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCCAPM6FSNOC272DLSNQ6YHXS3OMHGJC
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCCAPM6FSNOC272DLSNQ6YHXS3OMHGJC/
https://nvd.nist.gov/vuln/detail/CVE-2020-13692
https://security.netapp.com/advisory/ntap-20200619-0005
https://security.netapp.com/advisory/ntap-20200619-0005/
https://ubuntu.com/security/notices/USN-5238-1
https://www.cve.org/CVERecord?id=CVE-2020-13692
https://www.debian.org/security/2022/dsa-5196
|
| org.postgresql:postgresql |
CVE-2022-21724 |
HIGH |
42.2.10 |
42.2.25, 42.3.2 |
https://access.redhat.com/security/cve/CVE-2022-21724
https://github.com/advisories/GHSA-v7wg-cpwc-24m4
https://github.com/pgjdbc/pgjdbc
https://github.com/pgjdbc/pgjdbc/commit/f4d0ed69c0b3aae8531d83d6af4c57f22312c813
https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-v7wg-cpwc-24m4
https://lists.debian.org/debian-lts-announce/2022/05/msg00027.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BVEO7BEFXPBVHSPYL3YKQWZI6DYXQLFS
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BVEO7BEFXPBVHSPYL3YKQWZI6DYXQLFS/
https://nvd.nist.gov/vuln/detail/CVE-2022-21724
https://security.netapp.com/advisory/ntap-20220311-0005
https://security.netapp.com/advisory/ntap-20220311-0005/
https://www.cve.org/CVERecord?id=CVE-2022-21724
https://www.debian.org/security/2022/dsa-5196
|
| org.postgresql:postgresql |
CVE-2022-31197 |
HIGH |
42.2.10 |
42.2.26, 42.4.1, 42.3.7 |
https://access.redhat.com/errata/RHSA-2023:0318
https://access.redhat.com/security/cve/CVE-2022-31197
https://bugzilla.redhat.com/2129428
https://bugzilla.redhat.com/show_bug.cgi?id=2129428
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31197
https://errata.almalinux.org/9/ALSA-2023-0318.html
https://errata.rockylinux.org/RLSA-2023:0318
https://github.com/pgjdbc/pgjdbc
https://github.com/pgjdbc/pgjdbc/commit/739e599d52ad80f8dcd6efedc6157859b1a9d637
https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-r38f-c4h4-hqq2
https://linux.oracle.com/cve/CVE-2022-31197.html
https://linux.oracle.com/errata/ELSA-2023-0318.html
https://lists.debian.org/debian-lts-announce/2022/10/msg00009.html
https://lists.debian.org/debian-lts-announce/2024/12/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I6WHUADTZBBQLVHO4YG4XCWDGWBT4LRP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I6WHUADTZBBQLVHO4YG4XCWDGWBT4LRP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTFE6SV33P5YYU2GNTQZQKQRVR3GYE4S
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTFE6SV33P5YYU2GNTQZQKQRVR3GYE4S/
https://nvd.nist.gov/vuln/detail/CVE-2022-31197
https://www.cve.org/CVERecord?id=CVE-2022-31197
|
| org.postgresql:postgresql |
CVE-2026-42198 |
HIGH |
42.2.10 |
42.7.11 |
https://access.redhat.com/errata/RHSA-2026:19098
https://access.redhat.com/errata/RHSA-2026:22304
https://access.redhat.com/errata/RHSA-2026:24348
https://access.redhat.com/errata/RHSA-2026:25030
https://access.redhat.com/errata/RHSA-2026:52928
https://access.redhat.com/errata/RHSA-2026:52929
https://access.redhat.com/errata/RHSA-2026:52930
https://access.redhat.com/errata/RHSA-2026:52978
https://access.redhat.com/errata/RHSA-2026:54532
https://access.redhat.com/errata/RHSA-2026:59277
https://access.redhat.com/errata/RHSA-2026:59278
https://access.redhat.com/errata/RHSA-2026:66488
https://access.redhat.com/errata/RHSA-2026:66545
https://access.redhat.com/security/cve/CVE-2026-42198
https://advisory.echohq.com/cve/CVE-2026-42198
https://bugzilla.redhat.com/2463857
https://bugzilla.redhat.com/show_bug.cgi?id=2463857
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42198
https://errata.almalinux.org/9/ALSA-2026-22304.html
https://errata.rockylinux.org/RLSA-2026:22304
https://github.com/pgjdbc/pgjdbc
https://github.com/pgjdbc/pgjdbc/releases/tag/REL42.7.11
https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-98qh-xjc8-98pq
https://linux.oracle.com/cve/CVE-2026-42198.html
https://linux.oracle.com/errata/ELSA-2026-25030.html
https://nvd.nist.gov/vuln/detail/CVE-2026-42198
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42198.json
https://www.cve.org/CVERecord?id=CVE-2026-42198
|
| org.postgresql:postgresql |
CVE-2022-41946 |
MEDIUM |
42.2.10 |
42.2.27, 42.3.8, 42.4.3, 42.5.1 |
https://access.redhat.com/errata/RHSA-2023:2378
https://access.redhat.com/security/cve/CVE-2022-41946
https://bugzilla.redhat.com/2153399
https://errata.almalinux.org/9/ALSA-2023-2378.html
https://github.com/pgjdbc/pgjdbc
https://github.com/pgjdbc/pgjdbc/commit/9008dc9aade6dbfe4efafcd6872ebc55f4699cf5
https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-562r-vg33-8x8h
https://linux.oracle.com/cve/CVE-2022-41946.html
https://linux.oracle.com/errata/ELSA-2023-2867.html
https://lists.debian.org/debian-lts-announce/2022/12/msg00003.html
https://lists.debian.org/debian-lts-announce/2024/12/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/25TY2L3RMVNOC7VAHJEAO7PTT6M6JJAD
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/25TY2L3RMVNOC7VAHJEAO7PTT6M6JJAD/
https://nvd.nist.gov/vuln/detail/CVE-2022-41946
https://security.netapp.com/advisory/ntap-20240329-0003
https://security.netapp.com/advisory/ntap-20240329-0003/
https://www.cve.org/CVERecord?id=CVE-2022-41946
|
| org.postgresql:postgresql |
GHSA-673j-qm5f-xpv8 |
MEDIUM |
42.2.10 |
42.3.3 |
https://github.com/pgjdbc/pgjdbc
https://github.com/pgjdbc/pgjdbc/commit/f6d47034a4ce292e1a659fa00963f6f713117064
https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-673j-qm5f-xpv8
|
| org.postgresql:postgresql |
CVE-2022-26520 |
LOW |
42.2.10 |
42.3.3 |
https://access.redhat.com/security/cve/CVE-2022-26520
https://github.com/pgjdbc/pgjdbc
https://github.com/pgjdbc/pgjdbc/pull/2454/commits/017b929977b4f85795f9ad2fa5de6e80978b8ccc
https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-673j-qm5f-xpv8
https://jdbc.postgresql.org/documentation/changelog.html#version_42.3.3
https://jdbc.postgresql.org/documentation/head/tomcat.html
https://nvd.nist.gov/vuln/detail/CVE-2022-26520
https://www.cve.org/CVERecord?id=CVE-2022-26520
https://www.debian.org/security/2022/dsa-5196
|
| org.slf4j:slf4j-ext |
CVE-2018-8088 |
CRITICAL |
1.7.22.jbossorg-1 |
1.7.26, 1.8.0-beta4 |
http://www.securityfocus.com/bid/103737
http://www.securitytracker.com/id/1040627
https://access.redhat.com/errata/RHSA-2018:0582
https://access.redhat.com/errata/RHSA-2018:0592
https://access.redhat.com/errata/RHSA-2018:0627
https://access.redhat.com/errata/RHSA-2018:0628
https://access.redhat.com/errata/RHSA-2018:0629
https://access.redhat.com/errata/RHSA-2018:0630
https://access.redhat.com/errata/RHSA-2018:1247
https://access.redhat.com/errata/RHSA-2018:1248
https://access.redhat.com/errata/RHSA-2018:1249
https://access.redhat.com/errata/RHSA-2018:1251
https://access.redhat.com/errata/RHSA-2018:1323
https://access.redhat.com/errata/RHSA-2018:1447
https://access.redhat.com/errata/RHSA-2018:1448
https://access.redhat.com/errata/RHSA-2018:1449
https://access.redhat.com/errata/RHSA-2018:1450
https://access.redhat.com/errata/RHSA-2018:1451
https://access.redhat.com/errata/RHSA-2018:1525
https://access.redhat.com/errata/RHSA-2018:1575
https://access.redhat.com/errata/RHSA-2018:2143
https://access.redhat.com/errata/RHSA-2018:2419
https://access.redhat.com/errata/RHSA-2018:2420
https://access.redhat.com/errata/RHSA-2018:2669
https://access.redhat.com/errata/RHSA-2018:2930
https://access.redhat.com/errata/RHSA-2019:2413
https://access.redhat.com/errata/RHSA-2019:3140
https://access.redhat.com/security/cve/CVE-2018-8088
https://github.com/qos-ch/slf4j/commit/d2b27fba88e983f921558da27fc29b5f5d269405
https://jira.qos.ch/browse/SLF4J-430
https://jira.qos.ch/browse/SLF4J-431
https://linux.oracle.com/cve/CVE-2018-8088.html
https://linux.oracle.com/errata/ELSA-2018-0592.html
https://lists.apache.org/thread.html/956ba8e76b6793a6670b2eb0129a5e3003ce2124ca3130fd57d48d0f@%3Cdevnull.infra.apache.org%3E
https://lists.apache.org/thread.html/95ce76613c869dbccf1d3d29327099ccc71aeec156f76c30853044fa@%3Cdevnull.infra.apache.org%3E
https://lists.apache.org/thread.html/r0f376559fd39cf1a53ac3afbc1fc5d62649dcac9916d4697445a94fa@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r1660c72a660f0522947ca6ce329dcc74e1ee20c58bbe208472754489@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r17e7e6abc53d29c0e269153517d36f4bec2755b95900596e6df15cbe@%3Cnotifications.iotdb.apache.org%3E
https://lists.apache.org/thread.html/r2d05924f903403927a2f4e78d9b1249a42f0bd09f69a7c1954d74a42@%3Creviews.iotdb.apache.org%3E
https://lists.apache.org/thread.html/r32be21da011479df41468a62bc09d12f0d3b4e3a71679d33cb0e8c56@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r37644f0a00aca9fbcbc21c0f9a91f927b63153ec3607be469cd515e5@%3Creviews.iotdb.apache.org%3E
https://lists.apache.org/thread.html/r48247c12cf652e95a01fc94ee5aa8641f3ec481235774790e53eb55e@%3Creviews.iotdb.apache.org%3E
https://lists.apache.org/thread.html/r573eb577a67503e72181eee637d9b0ac042197e632bcdfce76af06a3@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r5cf87a035b297c19f4043a37b73c341576dd92f819bd3e4aa27de541@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r767861f053c15f9e9201b939a0d508dd58475a072e76135eaaca17f0@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r81711cde77c2c5742b7b8533c978e79771b700af0ef4d3149d70df25@%3Cnotifications.logging.apache.org%3E
https://lists.apache.org/thread.html/r891761d5014f9ffd79d9737482de832462de538b6c4bdcef21aad729@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r9584c4304c888f651d214341a939bd264ed30c9e3d0d30fe85097ecf@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r99a6552e45ca6ba1082031421f51799a4a665eda905ab2c2aa9d6ffa@%3Cdev.flink.apache.org%3E
https://lists.apache.org/thread.html/r9e25496608036573736cee484d8d03dae400f09e443b0000b6adc042@%3Ccommits.iotdb.apache.org%3E
https://lists.apache.org/thread.html/raabf1a00b2652575fca9fcb44166a828a0cab97a7d1594001eabc991@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rc378b97d52856f9f3c5ced14771fed8357e4187a3a0f9a2f0515931a@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rc7de83170d3402af15bfed3d59f80aea20f250535bdce30e4cad24db@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/rd86db9679150e9297b5c0fcb6f0e80a8b81b54fcf423de5a914bca78@%3Ccommon-commits.hadoop.apache.org%3E
https://lists.apache.org/thread.html/re6fb6b0de9d679310437ff87fc94e39da5a14dce9c73864a41837462@%3Ccommon-commits.hadoop.apache.org%3E
https://lists.apache.org/thread.html/reb3eeb985afdead17fadb7c33d5d472c1015a85ea5c9b038ec77f378@%3Ccommon-dev.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rf58e1bee31d66665437dde9acd9abed53f8483034b69fa9ca7cde09c@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rfb45527bad7220ada9e30957762e1da254ce405e67cc3ddf6f3558d9@%3Creviews.iotdb.apache.org%3E
https://lists.apache.org/thread.html/rfe52b7cbba4dcba521e13130e5d28d5818b78d70db0af1b470fa0264@%3Ccommon-issues.hadoop.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2018-8088
https://security.netapp.com/advisory/ntap-20231227-0010
https://security.netapp.com/advisory/ntap-20231227-0010/
https://www.cve.org/CVERecord?id=CVE-2018-8088
https://www.oracle.com/security-alerts/cpujul2020.html
https://www.oracle.com/security-alerts/cpuoct2020.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
https://www.slf4j.org/news.html
|
| org.wildfly.core:wildfly-controller |
CVE-2023-4061 |
MEDIUM |
11.1.1.Final |
22.0.0.Final |
https://access.redhat.com/errata/RHSA-2023:5484
https://access.redhat.com/errata/RHSA-2023:5485
https://access.redhat.com/errata/RHSA-2023:5486
https://access.redhat.com/errata/RHSA-2023:5488
https://access.redhat.com/security/cve/CVE-2023-4061
https://bugzilla.redhat.com/show_bug.cgi?id=2228608
https://github.com/wildfly/wildfly-core
https://github.com/wildfly/wildfly-core/commit/25728f370c2e90969854717ba4bb5182727f3f49
https://github.com/wildfly/wildfly-core/pull/5703
https://nvd.nist.gov/vuln/detail/CVE-2023-4061
https://www.cve.org/CVERecord?id=CVE-2023-4061
|
| org.wildfly.core:wildfly-elytron-integration |
CVE-2025-23368 |
HIGH |
11.1.1.Final |
32.0.0.Beta3, 31.0.3.Final |
https://access.redhat.com/errata/RHSA-2026:18054
https://access.redhat.com/errata/RHSA-2026:18055
https://access.redhat.com/errata/RHSA-2026:18059
https://access.redhat.com/errata/RHSA-2026:33371
https://access.redhat.com/security/cve/CVE-2025-23368
https://bugzilla.redhat.com/show_bug.cgi?id=2337621
https://github.com/wildfly/wildfly-core
https://github.com/wildfly/wildfly-core/commit/11e873031c522a0b36afb59880ce4dd59efd0bc0
https://github.com/wildfly/wildfly-core/commit/a6f9d7534aa44de741337756f8377ad3a81f7695
https://github.com/wildfly/wildfly-core/pull/6634
https://github.com/wildfly/wildfly-core/pull/6635
https://github.com/wildfly/wildfly-core/security/advisories/GHSA-qhp6-6p8p-2rqh
https://nvd.nist.gov/vuln/detail/CVE-2025-23368
https://www.cve.org/CVERecord?id=CVE-2025-23368
https://www.gruppotim.it/it/footer/red-team.html
|
| org.wildfly.core:wildfly-server |
CVE-2025-23367 |
MEDIUM |
11.1.1.Final |
27.0.1.Final, 28.0.0.Beta2 |
https://access.redhat.com/errata/RHSA-2025:3465
https://access.redhat.com/errata/RHSA-2025:3467
https://access.redhat.com/errata/RHSA-2025:3989
https://access.redhat.com/errata/RHSA-2025:3990
https://access.redhat.com/errata/RHSA-2025:3992
https://access.redhat.com/errata/RHSA-2025:4548
https://access.redhat.com/errata/RHSA-2025:4549
https://access.redhat.com/errata/RHSA-2025:4550
https://access.redhat.com/errata/RHSA-2025:4552
https://access.redhat.com/security/cve/CVE-2025-23367
https://bugzilla.redhat.com/show_bug.cgi?id=2337620
https://github.com/advisories/GHSA-qr6x-62gq-4ccp
https://github.com/wildfly/wildfly-core
https://github.com/wildfly/wildfly-core/security/advisories/GHSA-qr6x-62gq-4ccp
https://nvd.nist.gov/vuln/detail/CVE-2025-23367
https://www.cve.org/CVERecord?id=CVE-2025-23367
|
| org.wildfly.core:wildfly-server |
CVE-2021-3644 |
LOW |
11.1.1.Final |
16.0.1.Final, 17.0.0.Beta3 |
https://access.redhat.com/security/cve/CVE-2021-3644
https://bugzilla.redhat.com/show_bug.cgi?id=1976052
https://github.com/wildfly/wildfly-core
https://github.com/wildfly/wildfly-core/commit/06dd9884f6ba50470b1fb5a35198a8784f037714
https://github.com/wildfly/wildfly-core/commit/6d8db43cd43b5994b7a14003db978064e086090b
https://github.com/wildfly/wildfly-core/pull/4668
https://issues.redhat.com/browse/WFCORE-5511
https://nvd.nist.gov/vuln/detail/CVE-2021-3644
https://www.cve.org/CVERecord?id=CVE-2021-3644
|
| org.wildfly.security:wildfly-elytron |
CVE-2022-3143 |
HIGH |
1.11.4.Final |
1.15.15.Final, 1.20.3.Final |
https://access.redhat.com/security/cve/CVE-2022-3143
https://bugzilla.redhat.com/show_bug.cgi?id=2124682
https://github.com/wildfly-security/wildfly-elytron
https://nvd.nist.gov/vuln/detail/CVE-2022-3143
https://www.cve.org/CVERecord?id=CVE-2022-3143
|
| org.wildfly.security:wildfly-elytron |
CVE-2022-3143 |
HIGH |
1.11.4.Final |
1.15.15.Final, 1.20.3.Final |
https://access.redhat.com/security/cve/CVE-2022-3143
https://bugzilla.redhat.com/show_bug.cgi?id=2124682
https://github.com/wildfly-security/wildfly-elytron
https://nvd.nist.gov/vuln/detail/CVE-2022-3143
https://www.cve.org/CVERecord?id=CVE-2022-3143
|
| org.wildfly.security:wildfly-elytron |
CVE-2021-3642 |
MEDIUM |
1.11.4.Final |
1.10.14, 1.15.5, 1.16.1 |
https://access.redhat.com/security/cve/CVE-2021-3642
https://bugzilla.redhat.com/show_bug.cgi?id=1981407
https://nvd.nist.gov/vuln/detail/CVE-2021-3642
https://www.cve.org/CVERecord?id=CVE-2021-3642
|
| org.wildfly.security:wildfly-elytron |
CVE-2021-3642 |
MEDIUM |
1.11.4.Final |
1.10.14, 1.15.5, 1.16.1 |
https://access.redhat.com/security/cve/CVE-2021-3642
https://bugzilla.redhat.com/show_bug.cgi?id=1981407
https://nvd.nist.gov/vuln/detail/CVE-2021-3642
https://www.cve.org/CVERecord?id=CVE-2021-3642
|
| org.wildfly.security:wildfly-elytron-realm-token |
CVE-2024-1233 |
HIGH |
1.11.4.Final |
|
https://access.redhat.com/errata/RHSA-2024:3559
https://access.redhat.com/errata/RHSA-2024:3560
https://access.redhat.com/errata/RHSA-2024:3561
https://access.redhat.com/errata/RHSA-2024:3563
https://access.redhat.com/errata/RHSA-2024:3580
https://access.redhat.com/errata/RHSA-2024:3581
https://access.redhat.com/errata/RHSA-2024:3583
https://access.redhat.com/errata/RHSA-2025:9582
https://access.redhat.com/errata/RHSA-2025:9583
https://access.redhat.com/security/cve/CVE-2024-1233
https://bugzilla.redhat.com/show_bug.cgi?id=2262849
https://github.com/advisories/GHSA-v4mm-q8fv-r2w5
https://github.com/wildfly-security/wildfly-elytron
https://github.com/wildfly/wildfly/commit/aa151a00d75d6dbc4a1bf1b68d58b9de3087bb62
https://github.com/wildfly/wildfly/pull/17812/commits/0c02350bc0d84287bed46e7c32f90b36e50d3523
https://issues.redhat.com/browse/WFLY-19226
https://nvd.nist.gov/vuln/detail/CVE-2024-1233
https://www.cve.org/CVERecord?id=CVE-2024-1233
|
| org.wildfly.security:wildfly-elytron-realm-token |
CVE-2024-1233 |
HIGH |
1.11.4.Final |
|
https://access.redhat.com/errata/RHSA-2024:3559
https://access.redhat.com/errata/RHSA-2024:3560
https://access.redhat.com/errata/RHSA-2024:3561
https://access.redhat.com/errata/RHSA-2024:3563
https://access.redhat.com/errata/RHSA-2024:3580
https://access.redhat.com/errata/RHSA-2024:3581
https://access.redhat.com/errata/RHSA-2024:3583
https://access.redhat.com/errata/RHSA-2025:9582
https://access.redhat.com/errata/RHSA-2025:9583
https://access.redhat.com/security/cve/CVE-2024-1233
https://bugzilla.redhat.com/show_bug.cgi?id=2262849
https://github.com/advisories/GHSA-v4mm-q8fv-r2w5
https://github.com/wildfly-security/wildfly-elytron
https://github.com/wildfly/wildfly/commit/aa151a00d75d6dbc4a1bf1b68d58b9de3087bb62
https://github.com/wildfly/wildfly/pull/17812/commits/0c02350bc0d84287bed46e7c32f90b36e50d3523
https://issues.redhat.com/browse/WFLY-19226
https://nvd.nist.gov/vuln/detail/CVE-2024-1233
https://www.cve.org/CVERecord?id=CVE-2024-1233
|
| org.wildfly.security:wildfly-elytron-realm-token |
CVE-2024-1233 |
HIGH |
1.11.4.Final |
|
https://access.redhat.com/errata/RHSA-2024:3559
https://access.redhat.com/errata/RHSA-2024:3560
https://access.redhat.com/errata/RHSA-2024:3561
https://access.redhat.com/errata/RHSA-2024:3563
https://access.redhat.com/errata/RHSA-2024:3580
https://access.redhat.com/errata/RHSA-2024:3581
https://access.redhat.com/errata/RHSA-2024:3583
https://access.redhat.com/errata/RHSA-2025:9582
https://access.redhat.com/errata/RHSA-2025:9583
https://access.redhat.com/security/cve/CVE-2024-1233
https://bugzilla.redhat.com/show_bug.cgi?id=2262849
https://github.com/advisories/GHSA-v4mm-q8fv-r2w5
https://github.com/wildfly-security/wildfly-elytron
https://github.com/wildfly/wildfly/commit/aa151a00d75d6dbc4a1bf1b68d58b9de3087bb62
https://github.com/wildfly/wildfly/pull/17812/commits/0c02350bc0d84287bed46e7c32f90b36e50d3523
https://issues.redhat.com/browse/WFLY-19226
https://nvd.nist.gov/vuln/detail/CVE-2024-1233
https://www.cve.org/CVERecord?id=CVE-2024-1233
|
| org.yaml:snakeyaml |
CVE-2022-1471 |
HIGH |
1.26 |
2.0 |
http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html
http://www.openwall.com/lists/oss-security/2023/11/19/1
https://access.redhat.com/errata/RHSA-2022:9058
https://access.redhat.com/security/cve/CVE-2022-1471
https://advisory.echohq.com/cve/CVE-2022-1471
https://bitbucket.org/snakeyaml/snakeyaml
https://bitbucket.org/snakeyaml/snakeyaml/commits/5014df1a36f50aca54405bb8433bc99a8847f758
https://bitbucket.org/snakeyaml/snakeyaml/commits/acc44099f5f4af26ff86b4e4e4cc1c874e2dc5c4
https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479
https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64634374
https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64876314
https://bitbucket.org/snakeyaml/snakeyaml/wiki/CVE-2022-1471
https://bugzilla.redhat.com/2150009
https://bugzilla.redhat.com/show_bug.cgi?id=2150009
https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1471
https://errata.almalinux.org/8/ALSA-2022-9058.html
https://errata.rockylinux.org/RLSA-2022:9058
https://github.com/advisories/GHSA-mjmj-j48q-9wg2
https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2
https://github.com/mbechler/marshalsec
https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc
https://infosecwriteups.com/%EF%B8%8F-inside-the-160-comment-fight-to-fix-snakeyamls-rce-default-1a20c5ca4d4c
https://linux.oracle.com/cve/CVE-2022-1471.html
https://linux.oracle.com/errata/ELSA-2022-9058-1.html
https://nvd.nist.gov/vuln/detail/CVE-2022-1471
https://security.netapp.com/advisory/ntap-20230818-0015
https://security.netapp.com/advisory/ntap-20230818-0015/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://snyk.io/blog/unsafe-deserialization-snakeyaml-java-cve-2022-1471
https://www.cve.org/CVERecord?id=CVE-2022-1471
https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true
|
| org.yaml:snakeyaml |
CVE-2022-25857 |
HIGH |
1.26 |
1.31 |
https://access.redhat.com/errata/RHSA-2022:6820
https://access.redhat.com/security/cve/CVE-2022-25857
https://advisory.echohq.com/cve/CVE-2022-25857
https://bitbucket.org/snakeyaml/snakeyaml/commits/fc300780da21f4bb92c148bc90257201220cf174
https://bitbucket.org/snakeyaml/snakeyaml/issues/525
https://bugzilla.redhat.com/2126789
https://bugzilla.redhat.com/show_bug.cgi?id=2126789
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25857
https://errata.almalinux.org/8/ALSA-2022-6820.html
https://errata.rockylinux.org/RLSA-2022:6820
https://github.com/advisories/GHSA-3mc7-4q67-w48m
https://github.com/snakeyaml/snakeyaml
https://github.com/snakeyaml/snakeyaml/commit/fc300780da21f4bb92c148bc90257201220cf174
https://linux.oracle.com/cve/CVE-2022-25857.html
https://linux.oracle.com/errata/ELSA-2022-6820.html
https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html
https://nvd.nist.gov/vuln/detail/CVE-2022-25857
https://security.netapp.com/advisory/ntap-20240315-0010
https://security.netapp.com/advisory/ntap-20240315-0010/
https://security.snyk.io/vuln/SNYK-JAVA-ORGYAML-2806360
https://ubuntu.com/security/notices/USN-5944-1
https://www.cve.org/CVERecord?id=CVE-2022-25857
|
| org.yaml:snakeyaml |
CVE-2022-38749 |
MEDIUM |
1.26 |
1.31 |
https://access.redhat.com/security/cve/CVE-2022-38749
https://advisory.echohq.com/cve/CVE-2022-38749
https://arxiv.org/pdf/2306.05534.pdf
https://bitbucket.org/snakeyaml/snakeyaml
https://bitbucket.org/snakeyaml/snakeyaml/issues/525/got-stackoverflowerror-for-many-open
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47024
https://github.com/advisories/GHSA-c4r9-r8fh-9vj2
https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html
https://nvd.nist.gov/vuln/detail/CVE-2022-38749
https://security.gentoo.org/glsa/202305-28
https://security.netapp.com/advisory/ntap-20240315-0010
https://security.netapp.com/advisory/ntap-20240315-0010/
https://ubuntu.com/security/notices/USN-5944-1
https://www.cve.org/CVERecord?id=CVE-2022-38749
|
| org.yaml:snakeyaml |
CVE-2022-38750 |
MEDIUM |
1.26 |
1.31 |
https://access.redhat.com/security/cve/CVE-2022-38750
https://advisory.echohq.com/cve/CVE-2022-38750
https://bitbucket.org/snakeyaml/snakeyaml
https://bitbucket.org/snakeyaml/snakeyaml/issues/526/stackoverflow-oss-fuzz-47027
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47027
https://github.com/advisories/GHSA-hhhw-99gj-p3c3
https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html
https://nvd.nist.gov/vuln/detail/CVE-2022-38750
https://security.gentoo.org/glsa/202305-28
https://security.netapp.com/advisory/ntap-20240315-0010
https://security.netapp.com/advisory/ntap-20240315-0010/
https://ubuntu.com/security/notices/USN-5944-1
https://www.cve.org/CVERecord?id=CVE-2022-38750
|
| org.yaml:snakeyaml |
CVE-2022-38751 |
MEDIUM |
1.26 |
1.31 |
https://access.redhat.com/security/cve/CVE-2022-38751
https://advisory.echohq.com/cve/CVE-2022-38751
https://bitbucket.org/snakeyaml/snakeyaml
https://bitbucket.org/snakeyaml/snakeyaml/issues/530/stackoverflow-oss-fuzz-47039
https://bitbucket.org/snakeyaml/snakeyaml/src/master/src/test/java/org/yaml/snakeyaml/issues/issue530/Fuzzy47039Test.java
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47039
https://github.com/advisories/GHSA-98wm-3w3q-mw94
https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html
https://nvd.nist.gov/vuln/detail/CVE-2022-38751
https://security.gentoo.org/glsa/202305-28
https://security.netapp.com/advisory/ntap-20240315-0010
https://security.netapp.com/advisory/ntap-20240315-0010/
https://ubuntu.com/security/notices/USN-5944-1
https://www.cve.org/CVERecord?id=CVE-2022-38751
|
| org.yaml:snakeyaml |
CVE-2022-38752 |
MEDIUM |
1.26 |
1.32 |
https://access.redhat.com/security/cve/CVE-2022-38752
https://advisory.echohq.com/cve/CVE-2022-38752
https://bitbucket.org/snakeyaml/snakeyaml
https://bitbucket.org/snakeyaml/snakeyaml/issues/531/stackoverflow-oss-fuzz-47081
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47081
https://github.com/advisories/GHSA-9w3m-gqgf-c4p9
https://nvd.nist.gov/vuln/detail/CVE-2022-38752
https://security.gentoo.org/glsa/202305-28
https://security.netapp.com/advisory/ntap-20240315-0009
https://security.netapp.com/advisory/ntap-20240315-0009/
https://www.cve.org/CVERecord?id=CVE-2022-38752
|
| org.yaml:snakeyaml |
CVE-2022-41854 |
MEDIUM |
1.26 |
1.32 |
https://access.redhat.com/security/cve/CVE-2022-41854
https://advisory.echohq.com/cve/CVE-2022-41854
https://bitbucket.org/snakeyaml/snakeyaml
https://bitbucket.org/snakeyaml/snakeyaml/commits/e230a1758842beec93d28eddfde568c21774780a
https://bitbucket.org/snakeyaml/snakeyaml/issues/531
https://bitbucket.org/snakeyaml/snakeyaml/issues/543/stackoverflow-oss-fuzz-50355
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50355
https://github.com/advisories/GHSA-w37g-rhq8-7m4j
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3DDXEXXWAZGF5AVHIPGFPXIWL6TSMKJE
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3DDXEXXWAZGF5AVHIPGFPXIWL6TSMKJE/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MKE4XWRXTH32757H7QJU4ACS67DYDCR
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MKE4XWRXTH32757H7QJU4ACS67DYDCR/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSPAJ5Y45A4ZDION2KN5RDWLHK4XKY2J
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSPAJ5Y45A4ZDION2KN5RDWLHK4XKY2J/
https://nvd.nist.gov/vuln/detail/CVE-2022-41854
https://security.netapp.com/advisory/ntap-20240315-0009
https://security.netapp.com/advisory/ntap-20240315-0009/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://www.cve.org/CVERecord?id=CVE-2022-41854
|
| xerces:xercesImpl |
CVE-2020-14338 |
MEDIUM |
2.12.0.SP02 |
2.12.0.sp3 |
https://access.redhat.com/security/cve/CVE-2020-14338
https://bugzilla.redhat.com/show_bug.cgi?id=1860054
https://lists.apache.org/thread.html/rf96c5afb26b596b4b97883aa90b6c0b0fc4c26aaeea7123c21912103@%3Cj-users.xerces.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2020-14338
https://www.cve.org/CVERecord?id=CVE-2020-14338
|
| xerces:xercesImpl |
CVE-2022-23437 |
MEDIUM |
2.12.0.SP02 |
2.12.2 |
http://www.openwall.com/lists/oss-security/2022/01/24/3
https://access.redhat.com/security/cve/CVE-2022-23437
https://github.com/jboss/xerces
https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4
https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-xxx9-3xcr-gjj3
https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ
https://lists.apache.org/thread/6pjwm10bb69kq955fzr1n0nflnjd27dl
https://nvd.nist.gov/vuln/detail/CVE-2022-23437
https://security.netapp.com/advisory/ntap-20221028-0005
https://security.netapp.com/advisory/ntap-20221028-0005/
https://www.cve.org/CVERecord?id=CVE-2022-23437
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
|
| No Misconfigurations found |
|---|