Java - Trivy Report - 2026-10-29 00:53:08.991496311 +0000 UTC m=+34.634585907

jar
Package Vulnerability ID Severity Installed Version Fixed Version Links
ch.qos.logback:logback-classic CVE-2023-6378 HIGH 1.2.3 1.3.12, 1.4.12, 1.2.13 https://access.redhat.com/security/cve/CVE-2023-6378 https://advisory.echohq.com/cve/CVE-2023-6378 https://github.com/advisories/GHSA-vmq6-5m68-f53m https://github.com/qos-ch/logback https://github.com/qos-ch/logback/commit/9c782b45be4abdafb7e17481e24e7354c2acd1eb https://github.com/qos-ch/logback/commit/b8eac23a9de9e05fb6d51160b3f46acd91af9731 https://github.com/qos-ch/logback/commit/bb095154be011267b64e37a1d401546e7cc2b7c3 https://github.com/qos-ch/logback/issues/745#issuecomment-1836227158 https://logback.qos.ch/manual/receivers.html https://logback.qos.ch/news.html#1.2.13 https://logback.qos.ch/news.html#1.3.12 https://nvd.nist.gov/vuln/detail/CVE-2023-6378 https://security.netapp.com/advisory/ntap-20241129-0012 https://security.netapp.com/advisory/ntap-20241129-0012/ https://ubuntu.com/security/notices/USN-7616-1 https://www.cve.org/CVERecord?id=CVE-2023-6378
ch.qos.logback:logback-core CVE-2023-6378 HIGH 1.2.3 1.3.12, 1.4.12, 1.2.13 https://access.redhat.com/security/cve/CVE-2023-6378 https://advisory.echohq.com/cve/CVE-2023-6378 https://github.com/advisories/GHSA-vmq6-5m68-f53m https://github.com/qos-ch/logback https://github.com/qos-ch/logback/commit/9c782b45be4abdafb7e17481e24e7354c2acd1eb https://github.com/qos-ch/logback/commit/b8eac23a9de9e05fb6d51160b3f46acd91af9731 https://github.com/qos-ch/logback/commit/bb095154be011267b64e37a1d401546e7cc2b7c3 https://github.com/qos-ch/logback/issues/745#issuecomment-1836227158 https://logback.qos.ch/manual/receivers.html https://logback.qos.ch/news.html#1.2.13 https://logback.qos.ch/news.html#1.3.12 https://nvd.nist.gov/vuln/detail/CVE-2023-6378 https://security.netapp.com/advisory/ntap-20241129-0012 https://security.netapp.com/advisory/ntap-20241129-0012/ https://ubuntu.com/security/notices/USN-7616-1 https://www.cve.org/CVERecord?id=CVE-2023-6378
ch.qos.logback:logback-core CVE-2021-42550 MEDIUM 1.2.3 1.2.9 http://logback.qos.ch/news.html http://packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html http://seclists.org/fulldisclosure/2022/Jul/11 https://access.redhat.com/security/cve/CVE-2021-42550 https://cert-portal.siemens.com/productcert/pdf/ssa-371761.pdf https://cve.report/CVE-2021-42550 https://github.com/cn-panda/logbackRceDemo https://github.com/qos-ch/logback https://github.com/qos-ch/logback/blob/1502cba4c1dfd135b2e715bc0cf80c0045d4d128/logback-site/src/site/pages/news.html https://github.com/qos-ch/logback/commit/21d772f2bc2ed780b01b4fe108df7e29707763f1%20%28v_1.2.8%29 https://github.com/qos-ch/logback/commit/87291079a1de9369ac67e20dc70a8fdc7cc4359c https://github.com/qos-ch/logback/commit/ef4fc4186b74b45ce80d86833820106ff27edd42 https://jira.qos.ch/browse/LOGBACK-1591 https://nvd.nist.gov/vuln/detail/CVE-2021-42550 https://security.netapp.com/advisory/ntap-20211229-0001 https://security.netapp.com/advisory/ntap-20211229-0001/ https://ubuntu.com/security/notices/USN-7616-1 https://www.cve.org/CVERecord?id=CVE-2021-42550
ch.qos.logback:logback-core CVE-2024-12798 MEDIUM 1.2.3 1.5.13, 1.3.15 https://access.redhat.com/security/cve/CVE-2024-12798 https://advisory.echohq.com/cve/CVE-2024-12798 https://github.com/advisories/GHSA-pr98-23f8-jwxv https://github.com/qos-ch/logback https://github.com/qos-ch/logback/commit/2cb6d520df7592ef1c3a198f1b5df3c10c93e183 https://logback.qos.ch/news.html#1.3.15 https://logback.qos.ch/news.html#1.5.13 https://nvd.nist.gov/vuln/detail/CVE-2024-12798 https://www.cve.org/CVERecord?id=CVE-2024-12798
ch.qos.logback:logback-core CVE-2025-11226 MEDIUM 1.2.3 1.5.19, 1.3.16 https://access.redhat.com/security/cve/CVE-2025-11226 https://advisory.echohq.com/cve/CVE-2025-11226 https://github.com/advisories/GHSA-25qh-j22f-pwp8 https://github.com/qos-ch/logback https://github.com/qos-ch/logback/commit/61f6a2544f36b3016e0efd434ee21f19269f1df7 https://github.com/qos-ch/logback/issues/974 https://github.com/qos-ch/logback/releases/tag/v_1.5.19 https://logback.qos.ch/news.html#1.3.16 https://logback.qos.ch/news.html#1.5.19 https://nvd.nist.gov/vuln/detail/CVE-2025-11226 https://www.cve.org/CVERecord?id=CVE-2025-11226
ch.qos.logback:logback-core CVE-2024-12801 LOW 1.2.3 1.5.13, 1.3.15 https://access.redhat.com/security/cve/CVE-2024-12801 https://advisory.echohq.com/cve/CVE-2024-12801 https://github.com/advisories/GHSA-6v67-2wr5-gvf4 https://github.com/qos-ch/logback https://github.com/qos-ch/logback/commit/5f05041cba4c4ac0a62748c5c527a2da48999f2d https://logback.qos.ch/news.html#1.3.15 https://logback.qos.ch/news.html#1.5.13 https://nvd.nist.gov/vuln/detail/CVE-2024-12801 https://www.cve.org/CVERecord?id=CVE-2024-12801
ch.qos.logback:logback-core CVE-2026-10532 LOW 1.2.3 1.5.34 https://advisory.echohq.com/cve/CVE-2026-10532 https://github.com/qos-ch/logback https://github.com/qos-ch/logback/releases/tag/v_1.5.34 https://logback.qos.ch/news.html#1.5.34 https://nvd.nist.gov/vuln/detail/CVE-2026-10532
ch.qos.logback:logback-core CVE-2026-1225 LOW 1.2.3 1.5.25 https://access.redhat.com/security/cve/CVE-2026-1225 https://advisory.echohq.com/cve/CVE-2026-1225 https://github.com/advisories/GHSA-qqpg-mvqg-649v https://github.com/qos-ch/logback https://github.com/qos-ch/logback/commit/1f97ae1844b1be8486e4e9cade98d7123d3eded5 https://github.com/qos-ch/logback/issues/997 https://logback.qos.ch/news.html#1.5.25 https://nvd.nist.gov/vuln/detail/CVE-2026-1225 https://www.cve.org/CVERecord?id=CVE-2026-1225
ch.qos.logback:logback-core CVE-2026-9828 LOW 1.2.3 1.5.33 https://advisory.echohq.com/cve/CVE-2026-9828 https://github.com/qos-ch/logback https://logback.qos.ch/news.html#1.5.33 https://nvd.nist.gov/vuln/detail/CVE-2026-9828
com.esotericsoftware.yamlbeans:yamlbeans CVE-2023-24621 HIGH 1.11 https://contrastsecurity.com https://github.com/Contrast-Security-OSS/yamlbeans/blob/main/SECURITY.md https://github.com/EsotericSoftware https://github.com/EsotericSoftware/yamlbeans https://nvd.nist.gov/vuln/detail/CVE-2023-24621
com.esotericsoftware.yamlbeans:yamlbeans CVE-2023-24620 MEDIUM 1.11 https://contrastsecurity.com https://github.com/Contrast-Security-OSS/yamlbeans/blob/main/SECURITY.md https://github.com/EsotericSoftware https://github.com/EsotericSoftware/yamlbeans https://nvd.nist.gov/vuln/detail/CVE-2023-24620
com.fasterxml.jackson.core:jackson-databind CVE-2020-25649 HIGH 2.10.2 2.6.7.4, 2.9.10.7, 2.10.5.1 https://access.redhat.com/security/cve/CVE-2020-25649 https://bugzilla.redhat.com/show_bug.cgi?id=1887664 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/3d932709abd0b5390efe67451653fc9efa9db677 https://github.com/FasterXML/jackson-databind/commit/612f971b78c60202e9cd75a299050c8f2d724a59 https://github.com/FasterXML/jackson-databind/commit/612f971b78c60202e9cd75a299050c8f2d724a59%20%28jackson-databind-2.11.0.rc1%29 https://github.com/FasterXML/jackson-databind/issues/2589 https://lists.apache.org/thread.html/r011d1430e8f40dff9550c3bc5d0f48b14c01ba8aecabd91d5e495386@%3Ccommits.turbine.apache.org%3E https://lists.apache.org/thread.html/r024b7bda9c43c5560d81238748775c5ecfe01b57280f90df1f773949@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r04529cedaca40c2ff90af4880493f9c88a8ebf4d1d6c861d23108a5a@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r0881e23bd9034c8f51fdccdc8f4d085ba985dcd738f8520569ca5c3d@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r0b8dc3acd4503e4ecb6fbd6ea7d95f59941168d8452ac0ab1d1d96bb@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r1b7ed0c4b6c4301d4dfd6fdbc5581b0a789d3240cab55d766f33c6c6@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r2882fc1f3032cd7be66e28787f04ec6f1874ac68d47e310e30ff7eb1@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r2b6ddb3a4f4cd11d8f6305011e1b7438ba813511f2e3ab3180c7ffda@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/r2eb66c182853c69ecfb52f63d3dec09495e9b65be829fd889a081ae1@%3Cdev.hive.apache.org%3E https://lists.apache.org/thread.html/r2f5c5479f99398ef344b7ebd4d90bc3316236c45d0f3bc42090efcd7@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r31f4ee7d561d56a0c2c2c6eb1d6ce3e05917ff9654fdbfec05dc2b83@%3Ccommits.servicecomb.apache.org%3E https://lists.apache.org/thread.html/r3e6ae311842de4e64c5d560a475b7f9cc7e0a9a8649363c6cf7537eb@%3Ccommits.karaf.apache.org%3E https://lists.apache.org/thread.html/r407538adec3185dd35a05c9a26ae2f74425b15132470cf540f41d85b@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r45e7350dfc92bb192f3f88e9971c11ab2be0953cc375be3dda5170bd@%3Cissues.flink.apache.org%3E https://lists.apache.org/thread.html/r5b130fe668503c4b7e2caf1b16f86b7f2070fd1b7ef8f26195a2ffbd@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r5f8a1608d758936bd6bbc5eed980777437b611537bf6fff40663fc71@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r605764e05e201db33b3e9c2e66ff620658f07ad74f296abe483f7042@%3Creviews.iotdb.apache.org%3E https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc@%3Cdev.kafka.apache.org%3E https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc@%3Cusers.kafka.apache.org%3E https://lists.apache.org/thread.html/r63c87aab97155f3f3cbe11d030c4a184ea0de440ee714977db02e956@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r68d029ee74ab0f3b0569d0c05f5688cb45dd3abe96a6534735252805@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r6a4f3ef6edfed2e0884269d84798f766779bbbc1005f7884e0800d61@%3Cdev.knox.apache.org%3E https://lists.apache.org/thread.html/r6a6df5647583541e3cb71c75141008802f7025cee1c430d4ed78f4cc@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r6b11eca1d646f45eb0d35d174e6b1e47cfae5295b92000856bfb6304@%3Cdev.kafka.apache.org%3E https://lists.apache.org/thread.html/r6b11eca1d646f45eb0d35d174e6b1e47cfae5295b92000856bfb6304@%3Cusers.kafka.apache.org%3E https://lists.apache.org/thread.html/r6cbd599b80e787f02ff7a1391d9278a03f37d6a6f4f943f0f01a62fb@%3Creviews.iotdb.apache.org%3E https://lists.apache.org/thread.html/r6e3d4f7991542119a4ca6330271d7fbf7b9fb3abab24ada82ddf1ee4@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r73bef1bb601a9f093f915f8075eb49fcca51efade57b817afd5def07@%3Ccommits.iotdb.apache.org%3E https://lists.apache.org/thread.html/r765283e145049df9b8998f14dcd444345555aae02b1610cfb3188bf8@%3Cnotifications.iotdb.apache.org%3E https://lists.apache.org/thread.html/r78d53a0a269c18394daf5940105dc8c7f9a2399503c2e78be20abe7e@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r7cb5b4b3e4bd41a8042e5725b7285877a17bcbf07f4eb3f7b316af60@%3Creviews.iotdb.apache.org%3E https://lists.apache.org/thread.html/r86c78bf7656fdb2dab69cbf17f3d7492300f771025f1a3a65d5e5ce5@%3Ccommits.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r8764bb835bcb8e311c882ff91dd3949c9824e905e880930be56f6ba3@%3Cuser.spark.apache.org%3E https://lists.apache.org/thread.html/r8937a7160717fe8b2221767163c4de4f65bc5466405cb1c5310f9080@%3Cdev.kafka.apache.org%3E https://lists.apache.org/thread.html/r8937a7160717fe8b2221767163c4de4f65bc5466405cb1c5310f9080@%3Cusers.kafka.apache.org%3E https://lists.apache.org/thread.html/r8ae961c80930e2717c75025414ce48a432cea1137c02f648b1fb9524@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r900d4408c4189b376d1ec580ea7740ea6f8710dc2f0b7e9c9eeb5ae0@%3Cdev.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r90d1e97b0a743cf697d89a792a9b669909cc5a1692d1e0083a22e66c@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r91722ecfba688b0c565675f8bf380269fde8ec62b54d6161db544c22@%3Ccommits.karaf.apache.org%3E https://lists.apache.org/thread.html/r94c7e86e546120f157264ba5ba61fd29b3a8d530ed325a9b4fa334d7@%3Ccommits.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r95a297eb5fd1f2d3a2281f15340e2413f952e9d5503296c3adc7201a@%3Ccommits.tomee.apache.org%3E https://lists.apache.org/thread.html/r98bfe3b90ea9408f12c4b447edcb5638703d80bc782430aa0c210a54@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/ra1157e57a01d25e36b0dc17959ace758fc21ba36746de29ba1d8b130@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/ra409f798a1e5a6652b7097429b388650ccd65fd958cee0b6f69bba00@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/ra95faf968f3463acb3f31a6fbec31453fc5045325f99f396961886d3@%3Cissues.flink.apache.org%3E https://lists.apache.org/thread.html/raf13235de6df1d47a717199e1ecd700dff3236632f5c9a1488d9845b@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/rb674520b9f6c808c1bf263b1369e14048ec3243615f35cfd24e33604@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7@%3Cdev.kafka.apache.org%3E https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7@%3Cusers.kafka.apache.org%3E https://lists.apache.org/thread.html/rc15e90bbef196a5c6c01659e015249d6c9a73581ca9afb8aeecf00d2@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/rc82ff47853289e9cd17f5cfbb053c04cafc75ee32e3d7223963f83bb@%3Cdev.knox.apache.org%3E https://lists.apache.org/thread.html/rc88f2fa2b7bd6443921727aeee7704a1fb02433e722e2abf677e0d3d@%3Ccommits.zookeeper.apache.org%3E https://lists.apache.org/thread.html/rc959cdb57c4fe198316130ff4a5ecbf9d680e356032ff2e9f4f05d54@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/rd317f15a675d114dbf5b488d27eeb2467b4424356b16116eb18a652d@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/rd57c7582adc90e233f23f3727db3df9115b27a823b92374f11453f34@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/rd6f6bf848c2d47fa4a85c27d011d948778b8f7e58ba495968435a0b3@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/rdca8711bb7aa5d47a44682606cd0ea3497e2e922f22b7ee83e81e6c1@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/rdf9a34726482222c90d50ae1b9847881de67dde8cfde4999633d2cdc@%3Ccommits.zookeeper.apache.org%3E https://lists.apache.org/thread.html/re16f81d3ad49a93dd2f0cba9f8fc88e5fb89f30bf9a2ad7b6f3e69c1@%3Ccommits.karaf.apache.org%3E https://lists.apache.org/thread.html/re96dc7a13e13e56190a5d80f9e5440a0d0c83aeec6467b562fbf2dca@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/rf1809a1374041a969d77afab21fc38925de066bc97e86157d3ac3402@%3Ccommits.karaf.apache.org%3E https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6X2UT4X6M7DLQYBOOHMXBWGYJ65RL2CT https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6X2UT4X6M7DLQYBOOHMXBWGYJ65RL2CT/ https://nvd.nist.gov/vuln/detail/CVE-2020-25649 https://security.netapp.com/advisory/ntap-20210108-0007 https://security.netapp.com/advisory/ntap-20210108-0007/ https://www.cve.org/CVERecord?id=CVE-2020-25649 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
com.fasterxml.jackson.core:jackson-databind CVE-2020-36518 HIGH 2.10.2 2.13.2.1, 2.12.6.1 https://access.redhat.com/errata/RHSA-2023:2312 https://access.redhat.com/errata/RHSA-2024:3061 https://access.redhat.com/security/cve/CVE-2020-36518 https://bugzilla.redhat.com/2064698 https://bugzilla.redhat.com/show_bug.cgi?id=2064698 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36518 https://errata.almalinux.org/9/ALSA-2023-2312.html https://errata.rockylinux.org/RLSA-2024:3061 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/0a8157c6ca478b1bc7be4ba7dccdb3863275f0de https://github.com/FasterXML/jackson-databind/commit/3cc52f82ecf943e06c1d7c3b078e405fb3923d2b https://github.com/FasterXML/jackson-databind/commit/8238ab41d0350fb915797c89d46777b4496b74fd https://github.com/FasterXML/jackson-databind/commit/b3587924ee5d8695942f364d0d404d48d0ea6126 https://github.com/FasterXML/jackson-databind/commit/fcfc4998ec23f0b1f7f8a9521c2b317b6c25892b https://github.com/FasterXML/jackson-databind/issues/2816 https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12 https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.13 https://github.com/advisories/GHSA-57j2-w4cx-62h2 https://linux.oracle.com/cve/CVE-2020-36518.html https://linux.oracle.com/errata/ELSA-2024-3061.html https://lists.debian.org/debian-lts-announce/2022/05/msg00001.html https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html https://nvd.nist.gov/vuln/detail/CVE-2020-36518 https://security.netapp.com/advisory/ntap-20220506-0004 https://security.netapp.com/advisory/ntap-20220506-0004/ https://www.cve.org/CVERecord?id=CVE-2020-36518 https://www.debian.org/security/2022/dsa-5283 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujul2022.html
com.fasterxml.jackson.core:jackson-databind CVE-2021-46877 HIGH 2.10.2 2.12.6, 2.13.1 https://access.redhat.com/security/cve/CVE-2021-46877 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/3ccde7d938fea547e598fdefe9a82cff37fed5cb https://github.com/FasterXML/jackson-databind/commit/3ccde7d938fea547e598fdefe9a82cff37fed5cb%20%28jackson-databind-2.12.6%29 https://github.com/FasterXML/jackson-databind/commit/3ccde7d938fea547e598fdefe9a82cff37fed5cb%20%28jackson-databind-3.13.1%29 https://github.com/FasterXML/jackson-databind/issues/3328 https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12.6 https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.13.1 https://groups.google.com/g/jackson-user/c/OsBsirPM_Vw https://nvd.nist.gov/vuln/detail/CVE-2021-46877 https://www.cve.org/CVERecord?id=CVE-2021-46877
com.fasterxml.jackson.core:jackson-databind CVE-2022-42003 HIGH 2.10.2 2.12.7.1, 2.13.4.2 https://access.redhat.com/security/cve/CVE-2022-42003 https://advisory.echohq.com/cve/CVE-2022-42003 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51020 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/blob/2.13/release-notes/VERSION-2.x https://github.com/FasterXML/jackson-databind/commit/0e37a39502439ecbaa1a5b5188387c01bf7f7fa1 https://github.com/FasterXML/jackson-databind/commit/2c4a601c626f7790cad9d3c322d244e182838288 https://github.com/FasterXML/jackson-databind/commit/7ba9ac5b87a9d6ac0d2815158ecbeb315ad4dcdc https://github.com/FasterXML/jackson-databind/commit/cd090979b7ea78c75e4de8a4aed04f7e9fa8deea https://github.com/FasterXML/jackson-databind/commit/d499f2e7bbc5ebd63af11e1f5cf1989fa323aa45 https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33 https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33%20%28jackson-databind-2.14.0-rc1%29 https://github.com/FasterXML/jackson-databind/commits/jackson-databind-2.4.0-rc1?after=75b97b8519f0d50c62523ad85170d80a197a2c86+174&branch=jackson-databind-2.4.0-rc1&qualified_name=refs%2Ftags%2Fjackson-databind-2.4.0-rc1 https://github.com/FasterXML/jackson-databind/compare/jackson-databind-2.13.4.1...jackson-databind-2.13.4.2 https://github.com/FasterXML/jackson-databind/issues/3590 https://github.com/FasterXML/jackson-databind/issues/3627 https://github.com/advisories/GHSA-jjjh-jjxp-wpff https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html https://nvd.nist.gov/vuln/detail/CVE-2022-42003 https://security.gentoo.org/glsa/202210-21 https://security.netapp.com/advisory/ntap-20221124-0004 https://security.netapp.com/advisory/ntap-20221124-0004/ https://www.cve.org/CVERecord?id=CVE-2022-42003 https://www.debian.org/security/2022/dsa-5283
com.fasterxml.jackson.core:jackson-databind CVE-2022-42004 HIGH 2.10.2 2.12.7.1, 2.13.4 https://access.redhat.com/security/cve/CVE-2022-42004 https://advisory.echohq.com/cve/CVE-2022-42004 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50490 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/063183589218fec19a9293ed2f17ec53ea80ba88 https://github.com/FasterXML/jackson-databind/commit/063183589218fec19a9293ed2f17ec53ea80ba88%20%28jackson-databind-2.13.4%29 https://github.com/FasterXML/jackson-databind/commit/0e37a39502439ecbaa1a5b5188387c01bf7f7fa1 https://github.com/FasterXML/jackson-databind/commit/35de19e7144c4df8ab178b800ba86e80c3d84252 https://github.com/FasterXML/jackson-databind/commit/cd090979b7ea78c75e4de8a4aed04f7e9fa8deea https://github.com/FasterXML/jackson-databind/issues/3582 https://github.com/advisories/GHSA-rgv9-q543-rqg4 https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html https://nvd.nist.gov/vuln/detail/CVE-2022-42004 https://security.gentoo.org/glsa/202210-21 https://security.netapp.com/advisory/ntap-20221118-0008 https://security.netapp.com/advisory/ntap-20221118-0008/ https://www.cve.org/CVERecord?id=CVE-2022-42004 https://www.debian.org/security/2022/dsa-5283
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 HIGH 2.10.2 2.18.8, 3.1.4, 2.21.4 https://access.redhat.com/errata/RHSA-2026:40895 https://access.redhat.com/security/cve/CVE-2026-54512 https://advisory.echohq.com/cve/CVE-2026-54512 https://bugzilla.redhat.com/2492010 https://bugzilla.redhat.com/2492015 https://bugzilla.redhat.com/show_bug.cgi?id=2492010 https://bugzilla.redhat.com/show_bug.cgi?id=2492015 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54512 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54513 https://errata.almalinux.org/9/ALSA-2026-40895.html https://errata.rockylinux.org/RLSA-2026:40895 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5 https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5%20%28jackson-databind-2.18.8%29 https://github.com/FasterXML/jackson-databind/issues/5988 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm https://linux.oracle.com/cve/CVE-2026-54512.html https://linux.oracle.com/errata/ELSA-2026-43400.html https://nvd.nist.gov/vuln/detail/CVE-2026-54512 https://www.cve.org/CVERecord?id=CVE-2026-54512
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 HIGH 2.10.2 2.18.8, 2.21.4, 3.1.4 https://access.redhat.com/errata/RHSA-2026:36839 https://access.redhat.com/errata/RHSA-2026:40895 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:43218 https://access.redhat.com/errata/RHSA-2026:43400 https://access.redhat.com/errata/RHSA-2026:44061 https://access.redhat.com/errata/RHSA-2026:44062 https://access.redhat.com/errata/RHSA-2026:44063 https://access.redhat.com/errata/RHSA-2026:44064 https://access.redhat.com/errata/RHSA-2026:44065 https://access.redhat.com/errata/RHSA-2026:44066 https://access.redhat.com/errata/RHSA-2026:44271 https://access.redhat.com/errata/RHSA-2026:48095 https://access.redhat.com/errata/RHSA-2026:48151 https://access.redhat.com/errata/RHSA-2026:50846 https://access.redhat.com/errata/RHSA-2026:50847 https://access.redhat.com/errata/RHSA-2026:50848 https://access.redhat.com/errata/RHSA-2026:50849 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:54622 https://access.redhat.com/errata/RHSA-2026:62260 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-54513 https://advisory.echohq.com/cve/CVE-2026-54513 https://bugzilla.redhat.com/2492010 https://bugzilla.redhat.com/2492015 https://bugzilla.redhat.com/show_bug.cgi?id=2492010 https://bugzilla.redhat.com/show_bug.cgi?id=2492015 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54512 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54513 https://errata.almalinux.org/9/ALSA-2026-40895.html https://errata.rockylinux.org/RLSA-2026:40895 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5 https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e https://github.com/FasterXML/jackson-databind/issues/5981 https://github.com/FasterXML/jackson-databind/issues/5983 https://github.com/FasterXML/jackson-databind/pull/5984 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f https://linux.oracle.com/cve/CVE-2026-54513.html https://linux.oracle.com/errata/ELSA-2026-43400.html https://nvd.nist.gov/vuln/detail/CVE-2026-54513 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54513.json https://www.cve.org/CVERecord?id=CVE-2026-54513
com.fasterxml.jackson.core:jackson-databind CVE-2026-91776 HIGH 2.10.2 2.18.11, 2.21.7, 2.22.3 https://access.redhat.com/security/cve/CVE-2026-91776 https://advisory.echohq.com/cve/CVE-2026-91776 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/2870d1d6dc1b7e1c07ee11dd5b04ab71cddbb577 https://github.com/FasterXML/jackson-databind/issues/6203 https://github.com/FasterXML/jackson-databind/pull/6203 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54 https://nvd.nist.gov/vuln/detail/CVE-2026-91776 https://www.cve.org/CVERecord?id=CVE-2026-91776
com.fasterxml.jackson.core:jackson-databind CVE-2026-91777 HIGH 2.10.2 2.21.7, 2.18.11, 2.22.3 https://access.redhat.com/errata/RHSA-2026:85231 https://access.redhat.com/security/cve/CVE-2026-91777 https://advisory.echohq.com/cve/CVE-2026-91777 https://bugzilla.redhat.com/2539085 https://bugzilla.redhat.com/show_bug.cgi?id=2539085 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91777 https://errata.almalinux.org/9/ALSA-2026-85231.html https://errata.rockylinux.org/RLSA-2026:85231 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/37ad9b81712cbb9fb62c2d2c1813593252a24b67 https://github.com/FasterXML/jackson-databind/issues/6204 https://github.com/FasterXML/jackson-databind/pull/6204 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24 https://linux.oracle.com/cve/CVE-2026-91777.html https://linux.oracle.com/errata/ELSA-2026-85231.html https://nvd.nist.gov/vuln/detail/CVE-2026-91777 https://www.cve.org/CVERecord?id=CVE-2026-91777
com.fasterxml.jackson.core:jackson-databind CVE-2026-19032 MEDIUM 2.10.2 2.18.10, 2.21.6, 2.22.2 https://access.redhat.com/security/cve/CVE-2026-19032 https://advisory.echohq.com/cve/CVE-2026-19032 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551 https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166 https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d https://github.com/FasterXML/jackson-databind/pull/6129 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf https://nvd.nist.gov/vuln/detail/CVE-2026-19032 https://www.cve.org/CVERecord?id=CVE-2026-19032
com.fasterxml.jackson.core:jackson-databind CVE-2026-50193 MEDIUM 2.10.2 2.14.0 https://access.redhat.com/security/cve/CVE-2026-50193 https://advisory.echohq.com/cve/CVE-2026-50193 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/a1fa4ae4ecf5cee16da465985f135f3e81816f8c https://github.com/FasterXML/jackson-databind/issues/3447 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3wrr-7qpf-2prh https://nvd.nist.gov/vuln/detail/CVE-2026-50193 https://www.cve.org/CVERecord?id=CVE-2026-50193
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 MEDIUM 2.10.2 2.18.8, 2.21.4, 3.1.4 https://access.redhat.com/security/cve/CVE-2026-54514 https://advisory.echohq.com/cve/CVE-2026-54514 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/1f5a1037b1e9e05920e755cb35f198bcd46667e4 https://github.com/FasterXML/jackson-databind/pull/5951 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-hgj6-7826-r7m5 https://nvd.nist.gov/vuln/detail/CVE-2026-54514 https://www.cve.org/CVERecord?id=CVE-2026-54514
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 MEDIUM 2.10.2 3.1.4, 2.18.9, 2.21.5, 2.22.1 https://access.redhat.com/security/cve/CVE-2026-54515 https://advisory.echohq.com/cve/CVE-2026-54515 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/0e1b0b211f7a53baa62ba2f4c9bd006c7bf4d5fa https://github.com/FasterXML/jackson-databind/issues/5962 https://github.com/FasterXML/jackson-databind/issues/5964 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5jmj-h7xm-6q6v https://nvd.nist.gov/vuln/detail/CVE-2026-54515 https://www.cve.org/CVERecord?id=CVE-2026-54515
com.fasterxml.jackson.core:jackson-databind CVE-2026-59889 MEDIUM 2.10.2 2.21.5, 2.18.9, 2.22.1 https://access.redhat.com/security/cve/CVE-2026-59889 https://advisory.echohq.com/cve/CVE-2026-59889 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/d627a8a86fcb062429282f79f3f256f181ed2c7b https://github.com/FasterXML/jackson-databind/issues/6060 https://github.com/FasterXML/jackson-databind/pull/6056 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5gvw-p9qm-jgwh https://nvd.nist.gov/vuln/detail/CVE-2026-59889 https://www.cve.org/CVERecord?id=CVE-2026-59889
com.fasterxml.jackson.core:jackson-databind CVE-2026-77310 MEDIUM 2.10.2 2.18.9, 2.21.5, 2.22.1 https://access.redhat.com/security/cve/CVE-2026-77310 https://advisory.echohq.com/cve/CVE-2026-77310 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/2fc7bd9057dd051d7dea0e5fcad89822d0fa5ebd https://github.com/FasterXML/jackson-databind/pull/6058 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.9 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.5 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.1 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.5 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.1 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-vvgp-rfg2-7rr6 https://nvd.nist.gov/vuln/detail/CVE-2026-77310 https://www.cve.org/CVERecord?id=CVE-2026-77310
com.fasterxml.jackson.dataformat:jackson-dataformat-cbor CVE-2020-28491 HIGH 2.10.2 2.11.4, 2.12.1 https://access.redhat.com/security/cve/CVE-2020-28491 https://github.com/FasterXML/jackson-dataformats-binary https://github.com/FasterXML/jackson-dataformats-binary/commit/3d7de83423f8f68f8e9a0c8250084e11818544c7 https://github.com/FasterXML/jackson-dataformats-binary/commit/de072d314af8f5f269c8abec6930652af67bc8e6 https://github.com/FasterXML/jackson-dataformats-binary/issues/186 https://nvd.nist.gov/vuln/detail/CVE-2020-28491 https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONDATAFORMAT-1047329 https://www.cve.org/CVERecord?id=CVE-2020-28491 https://www.oracle.com/security-alerts/cpujul2022.html
com.google.code.gson:gson CVE-2022-25647 HIGH 2.8.0 2.8.9 https://access.redhat.com/security/cve/CVE-2022-25647 https://github.com/google/gson https://github.com/google/gson/pull/1991 https://github.com/google/gson/pull/1991/commits https://linux.oracle.com/cve/CVE-2022-25647.html https://linux.oracle.com/errata/ELSA-2022-9656.html https://lists.debian.org/debian-lts-announce/2022/05/msg00015.html https://lists.debian.org/debian-lts-announce/2022/09/msg00009.html https://nvd.nist.gov/vuln/detail/CVE-2022-25647 https://security.netapp.com/advisory/ntap-20220901-0009 https://security.netapp.com/advisory/ntap-20220901-0009/ https://snyk.io/vuln/SNYK-JAVA-COMGOOGLECODEGSON-1730327 https://ubuntu.com/security/notices/USN-6692-1 https://www.cve.org/CVERecord?id=CVE-2022-25647 https://www.debian.org/security/2022/dsa-5227 https://www.oracle.com/security-alerts/cpujul2022.html
com.google.guava:guava CVE-2026-102554 HIGH 23.0 33.7.2 https://access.redhat.com/security/cve/CVE-2026-102554 https://advisory.echohq.com/cve/CVE-2026-102554 https://github.com/advisories/GHSA-xxph-c9ww-hj94 https://github.com/google/guava https://github.com/google/guava/commit/b931fe9d6d5cf00bc55714ad3308d086f71850fe https://github.com/google/guava/releases/tag/v33.7.2 https://github.com/google/guava/security/advisories/GHSA-xxph-c9ww-hj94 https://nvd.nist.gov/vuln/detail/CVE-2026-102554 https://www.cve.org/CVERecord?id=CVE-2026-102554
com.google.guava:guava CVE-2018-10237 MEDIUM 23.0 24.1.1-android http://www.securitytracker.com/id/1041707 https://access.redhat.com/errata/RHSA-2018:2423 https://access.redhat.com/errata/RHSA-2018:2424 https://access.redhat.com/errata/RHSA-2018:2425 https://access.redhat.com/errata/RHSA-2018:2428 https://access.redhat.com/errata/RHSA-2018:2598 https://access.redhat.com/errata/RHSA-2018:2643 https://access.redhat.com/errata/RHSA-2018:2740 https://access.redhat.com/errata/RHSA-2018:2741 https://access.redhat.com/errata/RHSA-2018:2742 https://access.redhat.com/errata/RHSA-2018:2743 https://access.redhat.com/errata/RHSA-2018:2927 https://access.redhat.com/errata/RHSA-2019:2858 https://access.redhat.com/errata/RHSA-2019:3149 https://access.redhat.com/security/cve/CVE-2018-10237 https://advisory.echohq.com/cve/CVE-2018-10237 https://github.com/advisories/GHSA-mvr2-9pj6-7w5j https://github.com/google/guava https://github.com/google/guava/wiki/CVE-2018-10237 https://groups.google.com/d/topic/guava-announce/xqWALw4W1vs/discussion https://groups.google.com/forum/#!topic/guava-announce/xqWALw4W1vs/discussion https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272@%3Cissues.activemq.apache.org%3E https://lists.apache.org/thread.html/19fa48533bc7ea1accf6b12746a74ed888ae6e49a5cf81ae4f807495@%3Ccommon-dev.hadoop.apache.org%3E https://lists.apache.org/thread.html/33c6bccfeb7adf644d4d79894ca8f09370be6ed4b20632c2e228d085@%3Ccommits.cassandra.apache.org%3E https://lists.apache.org/thread.html/3d5dbdd92ac9ceaef90e40f78599f9109f2f345252e0ac9d98e7e084@%3Cgitbox.activemq.apache.org%3E https://lists.apache.org/thread.html/3ddd79c801edd99c0978e83dbe2168ebd36fd42acfa5dac38fb03dd6@%3Cissues.activemq.apache.org%3E https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/cc48fe770c45a74dc3b37ed0817393e0c96701fc49bc431ed922f3cc@%3Chdfs-dev.hadoop.apache.org%3E https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8@%3Ccommits.pulsar.apache.org%3E https://lists.apache.org/thread.html/r02e39d7beb32eebcdbb4b516e95f67d71c90d5d462b26f4078d21eeb@%3Cdev.flink.apache.org%3E https://lists.apache.org/thread.html/r02e39d7beb32eebcdbb4b516e95f67d71c90d5d462b26f4078d21eeb@%3Cuser.flink.apache.org%3E https://lists.apache.org/thread.html/r223bc776a077d0795786c38cbc6e7dd808fce1a9161b00ba9c0a5d55@%3Cissues.lucene.apache.org%3E https://lists.apache.org/thread.html/r22c8173b804cd4a420c43064ba4e363d0022aa421008b1989f7354d4@%3Cissues.flink.apache.org%3E https://lists.apache.org/thread.html/r27eb79a87a760335226dbfa6a7b7bffea539a535f8e80c41e482106d@%3Cdev.cxf.apache.org%3E https://lists.apache.org/thread.html/r2ea4e5e5aa8ad73b001a466c582899620961f47d77a40af712c1fdf9@%3Cdev.cxf.apache.org%3E https://lists.apache.org/thread.html/r30e7d7b6bfa630dacc41649a0e96dad75165d50474c1241068aa0f94@%3Cissues.storm.apache.org%3E https://lists.apache.org/thread.html/r352e40ca9874d1beb4ad95403792adca7eb295e6bc3bd7b65fabcc21@%3Ccommits.samza.apache.org%3E https://lists.apache.org/thread.html/r38e2ab87528d3c904e7fac496e8fd766b9277656ff95b97d6b6b6dcd@%3Cdev.cxf.apache.org%3E https://lists.apache.org/thread.html/r3c3b33ee5bef0c67391d27a97cbfd89d44f328cf072b601b58d4e748@%3Ccommits.pulsar.apache.org%3E https://lists.apache.org/thread.html/r43491b25b2e5c368c34b106a82eff910a5cea3e90de82ad75cc16540@%3Cdev.syncope.apache.org%3E https://lists.apache.org/thread.html/r50fc0bcc734dd82e691d36d209258683141bfc0083739a77e56ad92d@%3Cdev.flink.apache.org%3E https://lists.apache.org/thread.html/r841c5e14e1b55281523ebcde661ece00b38a0569e00ef5e12bd5f6ba@%3Cissues.maven.apache.org%3E https://lists.apache.org/thread.html/r95799427b335807a4c54776908125c3e66597b65845ae50096d9278a@%3Cdev.cxf.apache.org%3E https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b@%3Cusers.kafka.apache.org%3E https://lists.apache.org/thread.html/ra4f44016926dcb034b3b230280a18102062f94ae55b8a31bb92fed84@%3Cissues.lucene.apache.org%3E https://lists.apache.org/thread.html/ra8906723927aef2a599398c238eacfc845b74d812e0093ec2fc70a7d@%3Cissues.flink.apache.org%3E https://lists.apache.org/thread.html/rb3da574c34bc6bd37972d2266af3093b90d7e437460423c24f477919@%3Cissues.lucene.apache.org%3E https://lists.apache.org/thread.html/rc78f6e84f82cc662860e96526d8ab969f34dbe12dc560e22d9d147a3@%3Cdev.cxf.apache.org%3E https://lists.apache.org/thread.html/rc8467f357b943ceaa86f289f8bc1a5d1c7955b75d3bac1426f2d4ac1@%3Ccommon-dev.hadoop.apache.org%3E https://lists.apache.org/thread.html/rd01f5ff0164c468ec7abc96ff7646cea3cce6378da2e4aa29c6bcb95@%3Cgithub.arrow.apache.org%3E https://lists.apache.org/thread.html/rd0c8ec6e044aa2958dd0549ebf8ecead7f5968c9474ba73a504161b2@%3Cdev.cxf.apache.org%3E https://lists.apache.org/thread.html/rdc56c15693c236e31e1e95f847b8e5e74fc0a05741d47488e7fc8c45@%3Cissues.flink.apache.org%3E https://nvd.nist.gov/vuln/detail/CVE-2018-10237 https://security.netapp.com/advisory/ntap-20220629-0008 https://security.netapp.com/advisory/ntap-20220629-0008/ https://www.cve.org/CVERecord?id=CVE-2018-10237 https://www.oracle.com/security-alerts/cpuapr2020.html https://www.oracle.com/security-alerts/cpujan2021.html https://www.oracle.com/security-alerts/cpujul2020.html https://www.oracle.com/security-alerts/cpuoct2021.html
com.google.guava:guava CVE-2023-2976 MEDIUM 23.0 32.0.0-android https://access.redhat.com/security/cve/CVE-2023-2976 https://advisory.echohq.com/cve/CVE-2023-2976 https://github.com/advisories/GHSA-7g45-4rm6-3mm3 https://github.com/google/guava https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284 https://github.com/google/guava/issues/2575 https://github.com/google/guava/issues/6532 https://github.com/google/guava/releases/tag/v32.0.0 https://nvd.nist.gov/vuln/detail/CVE-2023-2976 https://security.netapp.com/advisory/ntap-20230818-0008 https://security.netapp.com/advisory/ntap-20230818-0008/ https://security.netapp.com/advisory/ntap-20241108-0002 https://security.netapp.com/advisory/ntap-20241108-0002/ https://www.cve.org/CVERecord?id=CVE-2023-2976 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01006.html
com.google.guava:guava CVE-2020-8908 LOW 23.0 32.0.0-android https://access.redhat.com/security/cve/CVE-2020-8908 https://advisory.echohq.com/cve/CVE-2020-8908 https://github.com/advisories/GHSA-5mg8-w23w-74h3 https://github.com/google/guava https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284 https://github.com/google/guava/commit/fec0dbc4634006a6162cfd4d0d09c962073ddf40 https://github.com/google/guava/issues/2575 https://github.com/google/guava/issues/4011 https://github.com/google/guava/issues/4011#issuecomment-1573923586 https://github.com/google/guava/issues/4011#issuecomment-1578991974 https://github.com/google/guava/releases/tag/v32.0.0 https://lists.apache.org/thread.html/r007add131977f4f576c232b25e024249a3d16f66aad14a4b52819d21@%3Ccommon-issues.hadoop.apache.org%3E https://lists.apache.org/thread.html/r037fed1d0ebde50c9caf8d99815db3093c344c3f651c5a49a09824ce@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/r07ed3e4417ad043a27bee7bb33322e9bfc7d7e6d1719b8e3dfd95c14@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/r161b87f8037bbaff400194a63cd2016c9a69f5949f06dcc79beeab54@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/r215b3d50f56faeb2f9383505f3e62faa9f549bb23e8a9848b78a968e@%3Ccommits.ws.apache.org%3E https://lists.apache.org/thread.html/r294be9d31c0312d2c0837087204b5d4bf49d0552890e6eec716fa6a6@%3Cyarn-issues.hadoop.apache.org%3E https://lists.apache.org/thread.html/r2fe45d96eea8434b91592ca08109118f6308d60f6d0e21d52438cfb4@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/r3c3b33ee5bef0c67391d27a97cbfd89d44f328cf072b601b58d4e748@%3Ccommits.pulsar.apache.org%3E https://lists.apache.org/thread.html/r3dd8881de891598d622227e9840dd7c2ef1d08abbb49e9690c7ae1bc@%3Cissues.geode.apache.org%3E https://lists.apache.org/thread.html/r4776f62dfae4a0006658542f43034a7fc199350e35a66d4e18164ee6@%3Ccommits.cxf.apache.org%3E https://lists.apache.org/thread.html/r49549a8322f62cd3acfa4490d25bfba0be04f3f9ff4d14fe36199d27@%3Cyarn-dev.hadoop.apache.org%3E https://lists.apache.org/thread.html/r58a8775205ab1839dba43054b09a9ab3b25b423a4170b2413c4067ac@%3Ccommon-issues.hadoop.apache.org%3E https://lists.apache.org/thread.html/r5b3d93dfdfb7708e796e8762ab40edbde8ff8add48aba53e5ea26f44@%3Cissues.geode.apache.org%3E https://lists.apache.org/thread.html/r5d61b98ceb7bba939a651de5900dbd67be3817db6bfcc41c6e04e199@%3Cyarn-issues.hadoop.apache.org%3E https://lists.apache.org/thread.html/r6874dfe26eefc41b7c9a5e4a0487846fc4accf8c78ff948b24a1104a@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/r68d86f4b06c808204f62bcb254fcb5b0432528ee8d37a07ef4bc8222@%3Ccommits.ws.apache.org%3E https://lists.apache.org/thread.html/r79e47ed555bdb1180e528420a7a2bb898541367a29a3bc6bbf0baf2c@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r7b0e81d8367264d6cad98766a469d64d11248eb654417809bfdacf09@%3Cyarn-issues.hadoop.apache.org%3E https://lists.apache.org/thread.html/r841c5e14e1b55281523ebcde661ece00b38a0569e00ef5e12bd5f6ba@%3Cissues.maven.apache.org%3E https://lists.apache.org/thread.html/ra7ab308481ee729f998691e8e3e02e93b1dedfc98f6b1cd3d86923b3@%3Cyarn-issues.hadoop.apache.org%3E https://lists.apache.org/thread.html/rb2364f4cf4d274eab5a7ecfaf64bf575cedf8b0173551997c749d322@%3Cgitbox.hive.apache.org%3E https://lists.apache.org/thread.html/rb8c0f1b7589864396690fe42a91a71dea9412e86eec66dc85bbacaaf@%3Ccommits.cxf.apache.org%3E https://lists.apache.org/thread.html/rbc7642b9800249553f13457e46b813bea1aec99d2bc9106510e00ff3@%3Ctorque-dev.db.apache.org%3E https://lists.apache.org/thread.html/rc2dbc4633a6eea1fcbce6831876cfa17b73759a98c65326d1896cb1a@%3Ctorque-dev.db.apache.org%3E https://lists.apache.org/thread.html/rc607bc52f3507b8b9c28c6a747c3122f51ac24afe80af2a670785b97@%3Cissues.geode.apache.org%3E https://lists.apache.org/thread.html/rcafc3a637d82bdc9a24036b2ddcad1e519dd0e6f848fcc3d606fd78f@%3Cdev.hive.apache.org%3E https://lists.apache.org/thread.html/rd01f5ff0164c468ec7abc96ff7646cea3cce6378da2e4aa29c6bcb95@%3Cgithub.arrow.apache.org%3E https://lists.apache.org/thread.html/rd2704306ec729ccac726e50339b8a8f079515cc29ccb77713b16e7c5@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/rd5d58088812cf8e677d99b07f73c654014c524c94e7fedbdee047604@%3Ctorque-dev.db.apache.org%3E https://lists.apache.org/thread.html/rd7e12d56d49d73e2b8549694974b07561b79b05455f7f781954231bf@%3Cdev.pig.apache.org%3E https://lists.apache.org/thread.html/re120f6b3d2f8222121080342c5801fdafca2f5188ceeb3b49c8a1d27@%3Cyarn-issues.hadoop.apache.org%3E https://lists.apache.org/thread.html/reebbd63c25bc1a946caa419cec2be78079f8449d1af48e52d47c9e85@%3Cissues.geode.apache.org%3E https://lists.apache.org/thread.html/rf00b688ffa620c990597f829ff85fdbba8bf73ee7bfb34783e1f0d4e@%3Cyarn-dev.hadoop.apache.org%3E https://lists.apache.org/thread.html/rf9f0fa84b8ae1a285f0210bafec6de2a9eba083007d04640b82aa625@%3Cissues.geode.apache.org%3E https://lists.apache.org/thread.html/rfc27e2727a20a574f39273e0432aa97486a332f9b3068f6ac1346594@%3Cdev.myfaces.apache.org%3E https://nvd.nist.gov/vuln/detail/CVE-2020-8908 https://security.netapp.com/advisory/ntap-20220210-0003 https://security.netapp.com/advisory/ntap-20220210-0003/ https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEGUAVA-1015415 https://www.cve.org/CVERecord?id=CVE-2020-8908 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
com.thoughtworks.xstream:xstream CVE-2020-26217 HIGH 1.4.11.1 1.4.14-java7 https://access.redhat.com/security/cve/CVE-2020-26217 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/commit/0fec095d534126931c99fd38e9c6d41f5c685c1a https://github.com/x-stream/xstream/security/advisories/GHSA-mw36-7c6c-q4q2 https://linux.oracle.com/cve/CVE-2020-26217.html https://linux.oracle.com/errata/ELSA-2021-0162.html https://lists.apache.org/thread.html/r2de526726e7f4db4a7cb91b7355070779f51a84fd985c6529c2f4e9e@%3Cissues.activemq.apache.org%3E https://lists.apache.org/thread.html/r7c9fc255edc0b9cd9567093d131f6d33fde4c662aaf912460ef630e9@%3Ccommits.camel.apache.org%3E https://lists.apache.org/thread.html/r826a006fda71cc96fc87b6eca4b5d195f19a292ad36cea501682c38c@%3Cissues.activemq.apache.org%3E https://lists.apache.org/thread.html/redde3609b89b2a4ff18b536a06ef9a77deb93d47fda8ed28086fa8c3@%3Cissues.activemq.apache.org%3E https://lists.debian.org/debian-lts-announce/2020/12/msg00001.html https://nvd.nist.gov/vuln/detail/CVE-2020-26217 https://security.netapp.com/advisory/ntap-20210409-0004 https://security.netapp.com/advisory/ntap-20210409-0004/ https://ubuntu.com/security/notices/USN-4714-1 https://ubuntu.com/security/notices/USN-4943-1 https://ubuntu.com/security/notices/USN-6978-1 https://www.cve.org/CVERecord?id=CVE-2020-26217 https://www.debian.org/security/2020/dsa-4811 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpuoct2021.html https://x-stream.github.io/CVE-2020-26217.html
com.thoughtworks.xstream:xstream CVE-2021-21341 HIGH 1.4.11.1 1.4.16 http://x-stream.github.io/changes.html#1.4.16 https://access.redhat.com/security/cve/CVE-2021-21341 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-2p3x-qw9c-25hh https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd@%3Cusers.activemq.apache.org%3E https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0@%3Cdev.jmeter.apache.org%3E https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-21341 https://security.netapp.com/advisory/ntap-20210430-0002 https://security.netapp.com/advisory/ntap-20210430-0002/ https://ubuntu.com/security/notices/USN-4943-1 https://ubuntu.com/security/notices/USN-6978-1 https://www.cve.org/CVERecord?id=CVE-2021-21341 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpuoct2021.html https://x-stream.github.io/CVE-2021-21341.html https://x-stream.github.io/security.html#workaround
com.thoughtworks.xstream:xstream CVE-2021-29505 HIGH 1.4.11.1 1.4.17 https://access.redhat.com/security/cve/CVE-2021-29505 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/commit/24fac82191292c6ae25f94508d28b9823f83624f https://github.com/x-stream/xstream/commit/f0c4a8d861b68ffc3119cfbbbd632deee624e227 https://github.com/x-stream/xstream/security/advisories/GHSA-7chv-rrw6-w6fc https://linux.oracle.com/cve/CVE-2021-29505.html https://linux.oracle.com/errata/ELSA-2021-2683.html https://lists.apache.org/thread.html/r8ee51debf7fd184b6a6b020dc31df25118b0aa612885f12fbe77f04f@%3Cdev.jmeter.apache.org%3E https://lists.debian.org/debian-lts-announce/2021/07/msg00004.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-29505 https://security.netapp.com/advisory/ntap-20210708-0007 https://security.netapp.com/advisory/ntap-20210708-0007/ https://www.cve.org/CVERecord?id=CVE-2021-29505 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpuoct2021.html https://x-stream.github.io/CVE-2021-29505.html
com.thoughtworks.xstream:xstream CVE-2021-39139 HIGH 1.4.11.1 1.4.18 https://access.redhat.com/security/cve/CVE-2021-39139 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-64xx-cq4q-mf44 https://linux.oracle.com/cve/CVE-2021-39139.html https://linux.oracle.com/errata/ELSA-2021-3956.html https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-39139 https://security.netapp.com/advisory/ntap-20210923-0003 https://security.netapp.com/advisory/ntap-20210923-0003/ https://ubuntu.com/security/notices/USN-5946-1 https://www.cve.org/CVERecord?id=CVE-2021-39139 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://x-stream.github.io/CVE-2021-39139.html
com.thoughtworks.xstream:xstream CVE-2021-39141 HIGH 1.4.11.1 1.4.18 https://access.redhat.com/security/cve/CVE-2021-39141 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-g5w6-mrj7-75h2 https://linux.oracle.com/cve/CVE-2021-39141.html https://linux.oracle.com/errata/ELSA-2021-3956.html https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-39141 https://security.netapp.com/advisory/ntap-20210923-0003 https://security.netapp.com/advisory/ntap-20210923-0003/ https://ubuntu.com/security/notices/USN-5946-1 https://www.cve.org/CVERecord?id=CVE-2021-39141 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://x-stream.github.io/CVE-2021-39141.html
com.thoughtworks.xstream:xstream CVE-2021-39144 HIGH 1.4.11.1 1.4.18 http://packetstormsecurity.com/files/169859/VMware-NSX-Manager-XStream-Unauthenticated-Remote-Code-Execution.html https://access.redhat.com/security/cve/CVE-2021-39144 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-j9h8-phrw-h4fh https://linux.oracle.com/cve/CVE-2021-39144.html https://linux.oracle.com/errata/ELSA-2021-3956.html https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-39144 https://security.netapp.com/advisory/ntap-20210923-0003 https://security.netapp.com/advisory/ntap-20210923-0003/ https://ubuntu.com/security/notices/USN-5946-1 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-39144 https://www.cve.org/CVERecord?id=CVE-2021-39144 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://x-stream.github.io/CVE-2021-39144.html
com.thoughtworks.xstream:xstream CVE-2021-39145 HIGH 1.4.11.1 1.4.18 https://access.redhat.com/security/cve/CVE-2021-39145 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-8jrj-525p-826v https://linux.oracle.com/cve/CVE-2021-39145.html https://linux.oracle.com/errata/ELSA-2021-3956.html https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-39145 https://security.netapp.com/advisory/ntap-20210923-0003 https://security.netapp.com/advisory/ntap-20210923-0003/ https://ubuntu.com/security/notices/USN-5946-1 https://www.cve.org/CVERecord?id=CVE-2021-39145 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://x-stream.github.io/CVE-2021-39145.html
com.thoughtworks.xstream:xstream CVE-2021-39146 HIGH 1.4.11.1 1.4.18 https://access.redhat.com/security/cve/CVE-2021-39146 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-p8pq-r894-fm8f https://linux.oracle.com/cve/CVE-2021-39146.html https://linux.oracle.com/errata/ELSA-2021-3956.html https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-39146 https://security.netapp.com/advisory/ntap-20210923-0003 https://security.netapp.com/advisory/ntap-20210923-0003/ https://ubuntu.com/security/notices/USN-5946-1 https://www.cve.org/CVERecord?id=CVE-2021-39146 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://x-stream.github.io/CVE-2021-39146.html
com.thoughtworks.xstream:xstream CVE-2021-39147 HIGH 1.4.11.1 1.4.18 https://access.redhat.com/security/cve/CVE-2021-39147 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-h7v4-7xg3-hxcc https://linux.oracle.com/cve/CVE-2021-39147.html https://linux.oracle.com/errata/ELSA-2021-3956.html https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-39147 https://security.netapp.com/advisory/ntap-20210923-0003 https://security.netapp.com/advisory/ntap-20210923-0003/ https://ubuntu.com/security/notices/USN-5946-1 https://www.cve.org/CVERecord?id=CVE-2021-39147 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://x-stream.github.io/CVE-2021-39147.html
com.thoughtworks.xstream:xstream CVE-2021-39148 HIGH 1.4.11.1 1.4.18 https://access.redhat.com/security/cve/CVE-2021-39148 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-qrx8-8545-4wg2 https://linux.oracle.com/cve/CVE-2021-39148.html https://linux.oracle.com/errata/ELSA-2021-3956.html https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-39148 https://security.netapp.com/advisory/ntap-20210923-0003 https://security.netapp.com/advisory/ntap-20210923-0003/ https://ubuntu.com/security/notices/USN-5946-1 https://www.cve.org/CVERecord?id=CVE-2021-39148 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://x-stream.github.io/CVE-2021-39148.html
com.thoughtworks.xstream:xstream CVE-2021-39149 HIGH 1.4.11.1 1.4.18 https://access.redhat.com/security/cve/CVE-2021-39149 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-3ccq-5vw3-2p6x https://linux.oracle.com/cve/CVE-2021-39149.html https://linux.oracle.com/errata/ELSA-2021-3956.html https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-39149 https://security.netapp.com/advisory/ntap-20210923-0003 https://security.netapp.com/advisory/ntap-20210923-0003/ https://ubuntu.com/security/notices/USN-5946-1 https://www.cve.org/CVERecord?id=CVE-2021-39149 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://x-stream.github.io/CVE-2021-39149.html
com.thoughtworks.xstream:xstream CVE-2021-39150 HIGH 1.4.11.1 1.4.18 https://access.redhat.com/security/cve/CVE-2021-39150 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-cxfm-5m4g-x7xp https://linux.oracle.com/cve/CVE-2021-39150.html https://linux.oracle.com/errata/ELSA-2021-3956.html https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-39150 https://security.netapp.com/advisory/ntap-20210923-0003 https://security.netapp.com/advisory/ntap-20210923-0003/ https://ubuntu.com/security/notices/USN-5946-1 https://www.cve.org/CVERecord?id=CVE-2021-39150 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://x-stream.github.io/CVE-2021-39150.html
com.thoughtworks.xstream:xstream CVE-2021-39151 HIGH 1.4.11.1 1.4.18 https://access.redhat.com/security/cve/CVE-2021-39151 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-hph2-m3g5-xxv4 https://linux.oracle.com/cve/CVE-2021-39151.html https://linux.oracle.com/errata/ELSA-2021-3956.html https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-39151 https://security.netapp.com/advisory/ntap-20210923-0003 https://security.netapp.com/advisory/ntap-20210923-0003/ https://ubuntu.com/security/notices/USN-5946-1 https://www.cve.org/CVERecord?id=CVE-2021-39151 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://x-stream.github.io/CVE-2021-39151.html
com.thoughtworks.xstream:xstream CVE-2021-39152 HIGH 1.4.11.1 1.4.18 https://access.redhat.com/security/cve/CVE-2021-39152 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-xw4p-crpj-vjx2 https://linux.oracle.com/cve/CVE-2021-39152.html https://linux.oracle.com/errata/ELSA-2021-3956.html https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-39152 https://security.netapp.com/advisory/ntap-20210923-0003 https://security.netapp.com/advisory/ntap-20210923-0003/ https://ubuntu.com/security/notices/USN-5946-1 https://www.cve.org/CVERecord?id=CVE-2021-39152 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://x-stream.github.io/CVE-2021-39152.html
com.thoughtworks.xstream:xstream CVE-2021-39153 HIGH 1.4.11.1 1.4.18 https://access.redhat.com/security/cve/CVE-2021-39153 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-2q8x-2p7f-574v https://linux.oracle.com/cve/CVE-2021-39153.html https://linux.oracle.com/errata/ELSA-2021-3956.html https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-39153 https://security.netapp.com/advisory/ntap-20210923-0003 https://security.netapp.com/advisory/ntap-20210923-0003/ https://ubuntu.com/security/notices/USN-5946-1 https://www.cve.org/CVERecord?id=CVE-2021-39153 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://x-stream.github.io/CVE-2021-39153.html
com.thoughtworks.xstream:xstream CVE-2021-39154 HIGH 1.4.11.1 1.4.18 https://access.redhat.com/security/cve/CVE-2021-39154 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-6w62-hx7r-mw68 https://linux.oracle.com/cve/CVE-2021-39154.html https://linux.oracle.com/errata/ELSA-2021-3956.html https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-39154 https://security.netapp.com/advisory/ntap-20210923-0003 https://security.netapp.com/advisory/ntap-20210923-0003/ https://ubuntu.com/security/notices/USN-5946-1 https://www.cve.org/CVERecord?id=CVE-2021-39154 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://x-stream.github.io/CVE-2021-39154.html
com.thoughtworks.xstream:xstream CVE-2021-43859 HIGH 1.4.11.1 1.4.19 http://www.openwall.com/lists/oss-security/2022/02/09/1 https://access.redhat.com/security/cve/CVE-2021-43859 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/commit/e8e88621ba1c85ac3b8620337dd672e0c0c3a846 https://github.com/x-stream/xstream/security/advisories/GHSA-rmr5-cpv2-vgjf https://lists.debian.org/debian-lts-announce/2022/02/msg00018.html https://lists.debian.org/debian-lts-announce/2024/12/msg00023.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VACQYG356OHUTD5WQGAQ4L2TTFTAV3SJ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VACQYG356OHUTD5WQGAQ4L2TTFTAV3SJ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XODFRE2ZL64FICBJDOPWOLPTSSAI4U7X https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XODFRE2ZL64FICBJDOPWOLPTSSAI4U7X/ https://nvd.nist.gov/vuln/detail/CVE-2021-43859 https://www.cve.org/CVERecord?id=CVE-2021-43859 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://x-stream.github.io/CVE-2021-43859.html
com.thoughtworks.xstream:xstream CVE-2022-40151 HIGH 1.4.11.1 1.4.20 https://access.redhat.com/security/cve/CVE-2022-40151 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47367 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/issues/304 https://github.com/x-stream/xstream/issues/314 https://github.com/x-stream/xstream/security/advisories/GHSA-f8cc-g7j8-xxpm https://nvd.nist.gov/vuln/detail/CVE-2022-40151 https://www.cve.org/CVERecord?id=CVE-2022-40151 https://x-stream.github.io/CVE-2022-40151.html
com.thoughtworks.xstream:xstream CVE-2022-41966 HIGH 1.4.11.1 1.4.20 https://access.redhat.com/security/cve/CVE-2022-41966 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-j563-grx4-pjpv https://nvd.nist.gov/vuln/detail/CVE-2022-41966 https://security.netapp.com/advisory/ntap-20230216-0005/ https://ubuntu.com/security/notices/USN-5946-1 https://www.cve.org/CVERecord?id=CVE-2022-41966 https://x-stream.github.io/CVE-2022-41966.html
com.thoughtworks.xstream:xstream CVE-2024-47072 HIGH 1.4.11.1 1.4.21 https://access.redhat.com/security/cve/CVE-2024-47072 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/commit/bb838ce2269cac47433e31c77b2b236466e9f266 https://github.com/x-stream/xstream/commit/fdd9f7d3de0d7ccf2f9979bcd09fbf3e6a0c881a https://github.com/x-stream/xstream/security/advisories/GHSA-hfq9-hggm-c56q https://lists.debian.org/debian-lts-announce/2024/12/msg00023.html https://nvd.nist.gov/vuln/detail/CVE-2024-47072 https://www.cve.org/CVERecord?id=CVE-2024-47072 https://x-stream.github.io/CVE-2024-47072.html
com.thoughtworks.xstream:xstream CVE-2020-26258 MEDIUM 1.4.11.1 1.4.15 https://access.redhat.com/security/cve/CVE-2020-26258 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-4cch-wxpw-8p28 https://lists.apache.org/thread.html/r97993e3d78e1f5389b7b172ba9f308440830ce5f051ee62714a0aa34@%3Ccommits.struts.apache.org%3E https://lists.debian.org/debian-lts-announce/2020/12/msg00042.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2020-26258 https://security.netapp.com/advisory/ntap-20210409-0005 https://security.netapp.com/advisory/ntap-20210409-0005/ https://ubuntu.com/security/notices/USN-4714-1 https://ubuntu.com/security/notices/USN-4943-1 https://ubuntu.com/security/notices/USN-6978-1 https://www.cve.org/CVERecord?id=CVE-2020-26258 https://www.debian.org/security/2021/dsa-4828 https://x-stream.github.io/CVE-2020-26258.html
com.thoughtworks.xstream:xstream CVE-2020-26259 MEDIUM 1.4.11.1 1.4.15 https://access.redhat.com/security/cve/CVE-2020-26259 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-jfvx-7wrx-43fh https://lists.apache.org/thread.html/r97993e3d78e1f5389b7b172ba9f308440830ce5f051ee62714a0aa34@%3Ccommits.struts.apache.org%3E https://lists.debian.org/debian-lts-announce/2020/12/msg00042.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2020-26259 https://security.netapp.com/advisory/ntap-20210409-0005 https://security.netapp.com/advisory/ntap-20210409-0005/ https://ubuntu.com/security/notices/USN-4714-1 https://ubuntu.com/security/notices/USN-4943-1 https://ubuntu.com/security/notices/USN-6978-1 https://www.cve.org/CVERecord?id=CVE-2020-26259 https://www.debian.org/security/2021/dsa-4828 https://x-stream.github.io/CVE-2020-26259.html
com.thoughtworks.xstream:xstream CVE-2021-21342 MEDIUM 1.4.11.1 1.4.16 http://x-stream.github.io/changes.html#1.4.16 https://access.redhat.com/security/cve/CVE-2021-21342 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-hvv8-336g-rx3m https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd@%3Cusers.activemq.apache.org%3E https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0@%3Cdev.jmeter.apache.org%3E https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-21342 https://security.netapp.com/advisory/ntap-20210430-0002 https://security.netapp.com/advisory/ntap-20210430-0002/ https://ubuntu.com/security/notices/USN-4943-1 https://ubuntu.com/security/notices/USN-6978-1 https://www.cve.org/CVERecord?id=CVE-2021-21342 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpuoct2021.html https://x-stream.github.io/CVE-2021-21342.html https://x-stream.github.io/security.html#workaround
com.thoughtworks.xstream:xstream CVE-2021-21343 MEDIUM 1.4.11.1 1.4.16 http://x-stream.github.io/changes.html#1.4.16 https://access.redhat.com/security/cve/CVE-2021-21343 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-74cv-f58x-f9wf https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd@%3Cusers.activemq.apache.org%3E https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0@%3Cdev.jmeter.apache.org%3E https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-21343 https://security.netapp.com/advisory/ntap-20210430-0002 https://security.netapp.com/advisory/ntap-20210430-0002/ https://ubuntu.com/security/notices/USN-4943-1 https://ubuntu.com/security/notices/USN-6978-1 https://www.cve.org/CVERecord?id=CVE-2021-21343 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpuoct2021.html https://x-stream.github.io/CVE-2021-21343.html https://x-stream.github.io/security.html#workaround
com.thoughtworks.xstream:xstream CVE-2021-21344 MEDIUM 1.4.11.1 1.4.16 http://x-stream.github.io/changes.html#1.4.16 https://access.redhat.com/security/cve/CVE-2021-21344 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-59jw-jqf4-3wq3 https://linux.oracle.com/cve/CVE-2021-21344.html https://linux.oracle.com/errata/ELSA-2021-1354.html https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd@%3Cusers.activemq.apache.org%3E https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0@%3Cdev.jmeter.apache.org%3E https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-21344 https://security.netapp.com/advisory/ntap-20210430-0002 https://security.netapp.com/advisory/ntap-20210430-0002/ https://ubuntu.com/security/notices/USN-4943-1 https://ubuntu.com/security/notices/USN-6978-1 https://www.cve.org/CVERecord?id=CVE-2021-21344 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpuoct2021.html https://x-stream.github.io/CVE-2021-21344.html https://x-stream.github.io/security.html#workaround
com.thoughtworks.xstream:xstream CVE-2021-21345 MEDIUM 1.4.11.1 1.4.16 http://x-stream.github.io/changes.html#1.4.16 https://access.redhat.com/security/cve/CVE-2021-21345 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-hwpc-8xqv-jvj4 https://linux.oracle.com/cve/CVE-2021-21345.html https://linux.oracle.com/errata/ELSA-2021-1354.html https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd@%3Cusers.activemq.apache.org%3E https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0@%3Cdev.jmeter.apache.org%3E https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-21345 https://security.netapp.com/advisory/ntap-20210430-0002 https://security.netapp.com/advisory/ntap-20210430-0002/ https://ubuntu.com/security/notices/USN-4943-1 https://ubuntu.com/security/notices/USN-6978-1 https://www.cve.org/CVERecord?id=CVE-2021-21345 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpuoct2021.html https://x-stream.github.io/CVE-2021-21345.html https://x-stream.github.io/security.html#workaround
com.thoughtworks.xstream:xstream CVE-2021-21346 MEDIUM 1.4.11.1 1.4.16 http://x-stream.github.io/changes.html#1.4.16 https://access.redhat.com/security/cve/CVE-2021-21346 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-4hrm-m67v-5cxr https://linux.oracle.com/cve/CVE-2021-21346.html https://linux.oracle.com/errata/ELSA-2021-1354.html https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd@%3Cusers.activemq.apache.org%3E https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0@%3Cdev.jmeter.apache.org%3E https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-21346 https://security.netapp.com/advisory/ntap-20210430-0002 https://security.netapp.com/advisory/ntap-20210430-0002/ https://ubuntu.com/security/notices/USN-4943-1 https://ubuntu.com/security/notices/USN-6978-1 https://www.cve.org/CVERecord?id=CVE-2021-21346 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpuoct2021.html https://x-stream.github.io/CVE-2021-21346.html https://x-stream.github.io/security.html#workaround
com.thoughtworks.xstream:xstream CVE-2021-21347 MEDIUM 1.4.11.1 1.4.16 http://x-stream.github.io/changes.html#1.4.16 https://access.redhat.com/security/cve/CVE-2021-21347 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-qpfq-ph7r-qv6f https://linux.oracle.com/cve/CVE-2021-21347.html https://linux.oracle.com/errata/ELSA-2021-1354.html https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd@%3Cusers.activemq.apache.org%3E https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0@%3Cdev.jmeter.apache.org%3E https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-21347 https://security.netapp.com/advisory/ntap-20210430-0002 https://security.netapp.com/advisory/ntap-20210430-0002/ https://ubuntu.com/security/notices/USN-4943-1 https://ubuntu.com/security/notices/USN-6978-1 https://www.cve.org/CVERecord?id=CVE-2021-21347 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpuoct2021.html https://x-stream.github.io/CVE-2021-21347.html https://x-stream.github.io/security.html#workaround
com.thoughtworks.xstream:xstream CVE-2021-21348 MEDIUM 1.4.11.1 1.4.16 http://x-stream.github.io/changes.html#1.4.16 https://access.redhat.com/security/cve/CVE-2021-21348 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-56p8-3fh9-4cvq https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd@%3Cusers.activemq.apache.org%3E https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0@%3Cdev.jmeter.apache.org%3E https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-21348 https://security.netapp.com/advisory/ntap-20210430-0002 https://security.netapp.com/advisory/ntap-20210430-0002/ https://ubuntu.com/security/notices/USN-4943-1 https://ubuntu.com/security/notices/USN-6978-1 https://www.cve.org/CVERecord?id=CVE-2021-21348 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpuoct2021.html https://x-stream.github.io/CVE-2021-21348.html https://x-stream.github.io/security.html#workaround
com.thoughtworks.xstream:xstream CVE-2021-21349 MEDIUM 1.4.11.1 1.4.16 http://x-stream.github.io/changes.html#1.4.16 https://access.redhat.com/security/cve/CVE-2021-21349 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-f6hm-88x3-mfjv https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd@%3Cusers.activemq.apache.org%3E https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0@%3Cdev.jmeter.apache.org%3E https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-21349 https://security.netapp.com/advisory/ntap-20210430-0002 https://security.netapp.com/advisory/ntap-20210430-0002/ https://ubuntu.com/security/notices/USN-4943-1 https://ubuntu.com/security/notices/USN-6978-1 https://www.cve.org/CVERecord?id=CVE-2021-21349 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpuoct2021.html https://x-stream.github.io/CVE-2021-21349.html https://x-stream.github.io/security.html#workaround
com.thoughtworks.xstream:xstream CVE-2021-21350 MEDIUM 1.4.11.1 1.4.16 http://x-stream.github.io/changes.html#1.4.16 https://access.redhat.com/security/cve/CVE-2021-21350 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-43gc-mjxg-gvrq https://linux.oracle.com/cve/CVE-2021-21350.html https://linux.oracle.com/errata/ELSA-2021-1354.html https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd@%3Cusers.activemq.apache.org%3E https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0@%3Cdev.jmeter.apache.org%3E https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-21350 https://security.netapp.com/advisory/ntap-20210430-0002 https://security.netapp.com/advisory/ntap-20210430-0002/ https://ubuntu.com/security/notices/USN-4943-1 https://ubuntu.com/security/notices/USN-6978-1 https://www.cve.org/CVERecord?id=CVE-2021-21350 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpuoct2021.html https://x-stream.github.io/CVE-2021-21350.html https://x-stream.github.io/security.html#workaround
com.thoughtworks.xstream:xstream CVE-2021-21351 MEDIUM 1.4.11.1 1.4.16 http://x-stream.github.io/changes.html#1.4.16 https://access.redhat.com/security/cve/CVE-2021-21351 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-hrcp-8f3q-4w2c https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd@%3Cusers.activemq.apache.org%3E https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0@%3Cdev.jmeter.apache.org%3E https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-21351 https://security.netapp.com/advisory/ntap-20210430-0002 https://security.netapp.com/advisory/ntap-20210430-0002/ https://ubuntu.com/security/notices/USN-4943-1 https://ubuntu.com/security/notices/USN-6978-1 https://www.cve.org/CVERecord?id=CVE-2021-21351 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpuoct2021.html https://x-stream.github.io/CVE-2021-21351.html https://x-stream.github.io/security.html#workaround
com.thoughtworks.xstream:xstream CVE-2021-39140 MEDIUM 1.4.11.1 1.4.18 https://access.redhat.com/security/cve/CVE-2021-39140 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/security/advisories/GHSA-6wf9-jmg9-vxcc https://linux.oracle.com/cve/CVE-2021-39140.html https://linux.oracle.com/errata/ELSA-2021-3956.html https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/ https://nvd.nist.gov/vuln/detail/CVE-2021-39140 https://security.netapp.com/advisory/ntap-20210923-0003 https://security.netapp.com/advisory/ntap-20210923-0003/ https://ubuntu.com/security/notices/USN-5946-1 https://www.cve.org/CVERecord?id=CVE-2021-39140 https://www.debian.org/security/2021/dsa-5004 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://x-stream.github.io/CVE-2021-39140.html
commons-fileupload:commons-fileupload CVE-2023-24998 HIGH 1.4 1.5 http://www.openwall.com/lists/oss-security/2023/05/22/1 https://access.redhat.com/errata/RHSA-2023:6570 https://access.redhat.com/security/cve/CVE-2023-24998 https://bugzilla.redhat.com/2172298 https://bugzilla.redhat.com/2180856 https://bugzilla.redhat.com/2210321 https://commons.apache.org/proper/commons-fileupload/security-reports.html https://commons.apache.org/proper/commons-fileupload/security-reports.html#Fixed_in_Apache_Commons_FileUpload_1.5 https://errata.almalinux.org/9/ALSA-2023-6570.html https://github.com/apache/commons-fileupload https://github.com/apache/commons-fileupload/commit/e20c04990f7420ca917e96a84cec58b13a1b3d17 https://github.com/apache/tomcat/commit/8a2285f13affa961cc65595aad999db5efae45ce https://github.com/apache/tomcat/commit/9ca96c8c1eba86c0aaa2e6be581ba2a7d4d4ae6e https://github.com/apache/tomcat/commit/cf77cc545de0488fb89e24294151504a7432df74 https://github.com/apache/tomcat/commit/d53d8e7f77042cc32a3b98f589496a1ef5088e38 https://github.com/search?q=repo%3Aapache%2Ftomcat+util.http+path%3A%2F%5Eres%5C%2Fbnd%5C%2F%2F&type=code https://linux.oracle.com/cve/CVE-2023-24998.html https://linux.oracle.com/errata/ELSA-2023-7065.html https://lists.apache.org/thread/4xl4l09mhwg4vgsk7dxqogcjrobrrdoy https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html https://lists.debian.org/debian-lts-announce/2025/07/msg00008.html https://nvd.nist.gov/vuln/detail/CVE-2023-24998 https://security.gentoo.org/glsa/202305-37 https://security.netapp.com/advisory/ntap-20230302-0013 https://security.netapp.com/advisory/ntap-20230302-0013/ https://security.netapp.com/advisory/ntap-20241108-0002 https://security.netapp.com/advisory/ntap-20241108-0002/ https://tomcat.apache.org/security-10.html https://tomcat.apache.org/security-11.html https://tomcat.apache.org/security-8.html https://tomcat.apache.org/security-9.html https://www.cve.org/CVERecord?id=CVE-2023-24998 https://www.debian.org/security/2023/dsa-5522
commons-fileupload:commons-fileupload CVE-2025-48976 HIGH 1.4 1.6.0 http://www.openwall.com/lists/oss-security/2025/06/16/4 https://access.redhat.com/errata/RHSA-2025:14181 https://access.redhat.com/security/cve/CVE-2025-48976 https://advisory.echohq.com/cve/CVE-2025-48976 https://bugzilla.redhat.com/2373015 https://bugzilla.redhat.com/2373018 https://bugzilla.redhat.com/2373020 https://bugzilla.redhat.com/2373309 https://bugzilla.redhat.com/2379374 https://bugzilla.redhat.com/2379382 https://bugzilla.redhat.com/2379386 https://bugzilla.redhat.com/show_bug.cgi?id=2373015 https://bugzilla.redhat.com/show_bug.cgi?id=2373018 https://bugzilla.redhat.com/show_bug.cgi?id=2373020 https://bugzilla.redhat.com/show_bug.cgi?id=2373309 https://bugzilla.redhat.com/show_bug.cgi?id=2379374 https://bugzilla.redhat.com/show_bug.cgi?id=2379382 https://bugzilla.redhat.com/show_bug.cgi?id=2379386 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48976 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48988 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48989 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49125 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52434 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52520 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53506 https://errata.almalinux.org/9/ALSA-2025-14181.html https://errata.rockylinux.org/RLSA-2025:14181 https://github.com/advisories/GHSA-vv7r-c36w-3prj https://github.com/apache/commons-fileupload https://github.com/apache/commons-fileupload/commit/2108495a4775910b8559f18ed5a779d60542ee96%20%28commons-fileupload-1.6.0-RC1%29 https://github.com/apache/commons-fileupload/commit/b247774a72a044f5d5380ae947140ee80af4e78b https://github.com/apache/commons-fileupload/commit/bf68f63cfb312ef4710fb3dfb4d8e4e1665f4497 https://github.com/apache/tomcat/commit/667ddd76e2a0e762f3a784d86f0d25e7fd7cdb86%20%2810.1.42%29 https://github.com/apache/tomcat/commit/74f69ffaf61e54c727603e7e831fe20f0ac5d2a7%20%2811.0.8%29 https://github.com/apache/tomcat/commit/97790a35a27d236fa053e660676c3f8196284d93 https://github.com/apache/tomcat/commit/97790a35a27d236fa053e660676c3f8196284d93%20%289.0.106%29 https://linux.oracle.com/cve/CVE-2025-48976.html https://linux.oracle.com/errata/ELSA-2025-14181.html https://lists.apache.org/thread/fbs3wrr3p67vkjcxogqqqqz45pqtso12 https://lists.apache.org/thread/w7dbnfyqn1yc05kbqqbbyct7wbomv7lf https://lists.debian.org/debian-lts-announce/2025/07/msg00008.html https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html https://nvd.nist.gov/vuln/detail/CVE-2025-48976 https://www.cve.org/CVERecord?id=CVE-2025-48976
commons-lang:commons-lang CVE-2025-48924 MEDIUM 2.6 http://www.openwall.com/lists/oss-security/2025/07/11/1 https://access.redhat.com/security/cve/CVE-2025-48924 https://advisory.echohq.com/cve/CVE-2025-48924 https://github.com/apache/commons-lang https://github.com/apache/commons-lang/commit/b424803abdb2bec818e4fbcb251ce031c22aca53 https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1 https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html https://nvd.nist.gov/vuln/detail/CVE-2025-48924 https://ubuntu.com/security/notices/USN-8364-1 https://www.cve.org/CVERecord?id=CVE-2025-48924 https://www.openwall.com/lists/oss-security/2025/07/11/1
commons-net:commons-net CVE-2021-37533 MEDIUM 3.5 3.9.0 http://www.openwall.com/lists/oss-security/2022/12/03/1 https://access.redhat.com/security/cve/CVE-2021-37533 https://advisory.echohq.com/cve/CVE-2021-37533 https://github.com/advisories/GHSA-cgp8-4m63-fhh5 https://github.com/apache/commons-net https://github.com/apache/commons-net/commit/4fe1bae56e53f32756b1ca3296f3dd2c45e3e060 https://github.com/apache/commons-net/commit/b0bff89f70cfea70009e22f87639816cc3993974%20%28commons-net-3.9.0-RC1%29 https://issues.apache.org/jira/browse/NET-711 https://lists.apache.org/thread/o6yn9r9x6s94v97264hmgol1sf48mvx7 https://lists.debian.org/debian-lts-announce/2022/12/msg00038.html https://nvd.nist.gov/vuln/detail/CVE-2021-37533 https://ubuntu.com/security/notices/USN-6037-1 https://www.cve.org/CVERecord?id=CVE-2021-37533 https://www.debian.org/security/2022/dsa-5307
io.github.classgraph:classgraph CVE-2021-47621 MEDIUM 4.6.32 4.8.112 https://advisory.echohq.com/cve/CVE-2021-47621 https://docs.r3.com/en/platform/corda/4.8/enterprise/release-notes-enterprise.html https://github.com/advisories/GHSA-v2xm-76pq-phcf https://github.com/classgraph/classgraph https://github.com/classgraph/classgraph/commit/681362ad6b0b9d9abaffb2e07099ce54d7a41fa3 https://github.com/classgraph/classgraph/pull/539 https://github.com/classgraph/classgraph/releases/tag/classgraph-4.8.112 https://nvd.nist.gov/vuln/detail/CVE-2021-47621
io.springfox:springfox-swagger-ui CVE-2019-17495 CRITICAL 2.8.0 2.10.0 https://github.com/springfox/springfox/commit/26f72f0d16b166e12c20255a4ee907dc10685cf8 https://github.com/swagger-api/swagger-ui https://github.com/swagger-api/swagger-ui/releases/tag/v3.23.11 https://github.com/tarantula-team/CSS-injection-in-Swagger-UI https://lists.apache.org/thread.html/r103579b01da2d0aa0f672b88f811224bbf8ef493aaad845895955e91@%3Ccommits.airflow.apache.org%3E https://lists.apache.org/thread.html/r3acb7e494cf1aab99b6784b7c5bbddfd0d4f8a484ab534c3a61ef9cf@%3Ccommits.airflow.apache.org%3E https://lists.apache.org/thread.html/r84b327f7a8b6b28857b906c07a66dd98e1d341191fa8d7816514ef96@%3Ccommits.airflow.apache.org%3E https://lists.apache.org/thread.html/r853ffeb915a400f899de78124d4e0d77a19379d2e11bf8f4e98c624f@%3Ccommits.airflow.apache.org%3E https://lists.apache.org/thread.html/ref70b940c4f69560d29d6ba792d6c82865e74de3dcad4c92d99b1f8f@%3Ccommits.airflow.apache.org%3E https://nvd.nist.gov/vuln/detail/CVE-2019-17495 https://security.snyk.io/vuln/maven?search=CVE-2019-17495 https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpuoct2020.html
net.sf.jasperreports:jasperreports CVE-2025-10492 HIGH 6.8.0 7.0.4 https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6 https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6/ https://community.jaspersoft.com/forums/topic/69926-cve-2025-10492-%E2%80%93-no-fix-available-after-jasperreports-upgrade-community-edition https://github.com/Jaspersoft/jasperreports https://github.com/Jaspersoft/jasperreports/commit/3541a3e2b1ad8b78388ac505091da75cb652a647 https://github.com/Jaspersoft/jasperreports/commit/827c2f27c4ca8e2c5b3142d76df9c1c8575f3569 https://github.com/Jaspersoft/jasperreports/issues/542 https://nvd.nist.gov/vuln/detail/CVE-2025-10492
net.sf.jasperreports:jasperreports CVE-2026-6009 HIGH 6.8.0 7.0.7 https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11 https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11/ https://github.com/Jaspersoft/jasperreports https://nvd.nist.gov/vuln/detail/CVE-2026-6009
org.apache.ant:ant CVE-2020-11979 HIGH 1.7.1 1.10.9 https://access.redhat.com/security/cve/CVE-2020-11979 https://github.com/apache/ant https://github.com/apache/ant/commit/87ac51d3c22bcf7cfd0dc07cb0bd04a496e0d428 https://github.com/gradle/gradle/security/advisories/GHSA-j45w-qrgf-25vm https://lists.apache.org/thread.html/r107ea1b1a7a214bc72fe1a04207546ccef542146ae22952e1013b5cc@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/r1dc8518dc99c42ecca5ff82d0d2de64cd5d3a4fa691eb9ee0304781e@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/r2306b67f20c24942b872b0a41fbdc9330e8467388158bcd19c1094e0@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/r4ca33fad3fb39d130cda287d5a60727d9e706e6f2cf2339b95729490@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/r5e1cdd79f019162f76414708b2092acad0a6703d666d72d717319305@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/raaeddc41da8f3afb1cb224876084a45f68e437a0afd9889a707e4b0c@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/rbfe9ba28b74f39f46ec1bbbac3bef313f35017cf3aac13841a84483a@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/rc3c8ef9724b5b1e171529b47f4b35cb7920edfb6e917fa21eb6c64ea@%3Cdev.ant.apache.org%3E https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AALW42FWNQ35F7KB3JVRC6NBVV7AAYYI https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AALW42FWNQ35F7KB3JVRC6NBVV7AAYYI/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DYBRN5C2RW7JRY75IB7Q7ZVKZCHWAQWS https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DYBRN5C2RW7JRY75IB7Q7ZVKZCHWAQWS/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3NRQQ7ECII4ZNGW7GBC225LVYMPQEKB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3NRQQ7ECII4ZNGW7GBC225LVYMPQEKB/ https://nvd.nist.gov/vuln/detail/CVE-2020-11979 https://security.gentoo.org/glsa/202011-18 https://www.cve.org/CVERecord?id=CVE-2020-11979 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2021.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
org.apache.ant:ant CVE-2020-1945 MEDIUM 1.7.1 1.9.15, 1.10.8 http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00053.html http://www.openwall.com/lists/oss-security/2020/09/30/6 http://www.openwall.com/lists/oss-security/2020/12/06/1 https://access.redhat.com/security/cve/CVE-2020-1945 https://lists.apache.org/thread.html/r0d08a96ba9de8aa435f32944e8b2867c368a518d4ff57782e3637335@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r107ea1b1a7a214bc72fe1a04207546ccef542146ae22952e1013b5cc@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/r1863b9ce4c3e4b1e5b0c671ad05545ba3eb8399616aa746af5dfe1b1@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/r1a9c992d7c8219dc15b4ad448649f0ffdaa88d76ef6a0035c49455f5@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/r1b32c76afffcf676e13ed635a3332f3e46e6aaa7722eb3fc7a28f58e@%3Cdev.hive.apache.org%3E https://lists.apache.org/thread.html/r1dc8518dc99c42ecca5ff82d0d2de64cd5d3a4fa691eb9ee0304781e@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/r2306b67f20c24942b872b0a41fbdc9330e8467388158bcd19c1094e0@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/r2704fb14ce068c64759a986f81d5b5e42ab434fa13d0f444ad52816b@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/r3cea0f3da4f6d06d7afb6c0804da8e01773a0f50a09b8d9beb2cda65@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r4b2904d64affd4266cd72ccb2fc3927c1c2f22009f183095aa46bf90@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r4ca33fad3fb39d130cda287d5a60727d9e706e6f2cf2339b95729490@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/r5dfc77048b1f9db26622dce91a6edf083d499397256594952fad5f35@%3Ccommits.myfaces.apache.org%3E https://lists.apache.org/thread.html/r5e1cdd79f019162f76414708b2092acad0a6703d666d72d717319305@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/r6030d34ceacd0098538425c5dac8251ffc7fd90b886942bc7ef87858@%3Cnotifications.groovy.apache.org%3E https://lists.apache.org/thread.html/r6970d196cd73863dafdbc3a7052562deedd338e3bd7d73d8171d92d6@%3Ccommits.groovy.apache.org%3E https://lists.apache.org/thread.html/r6e295d792032ec02b32be3846c21a58857fba4a077d22c5842d69ba2@%3Ctorque-dev.db.apache.org%3E https://lists.apache.org/thread.html/r6edd3e2cb79ee635630d891b54a4f1a9cd8c7f639d6ee34e75fbe830@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r815f88d1044760176f30a4913b4baacd06f3eae4eb662de7388e46d8@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r8e24abb7dd77cda14c6df90a377c94f0a413bbfcec90a29540ff8adf@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r8e592bbfc016a5dbe2a8c0e81ff99682b9c78c453621b82c14e7b75e@%3Cdev.ant.apache.org%3E https://lists.apache.org/thread.html/r95dc943e47a211d29df605e14f86c280fc9fa8d828b2b53bd07673c9@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967@%3Cannounce.apache.org%3E https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967@%3Cdev.groovy.apache.org%3E https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967@%3Cusers.groovy.apache.org%3E https://lists.apache.org/thread.html/ra9dab34bf8625511f23692ad0fcee2725f782e9aad6c5cdff6cf4465@%3Cnotifications.groovy.apache.org%3E https://lists.apache.org/thread.html/raaeddc41da8f3afb1cb224876084a45f68e437a0afd9889a707e4b0c@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/rb860063819b9c0990e1fbce29d83f4554766fe5a05e3b3939736bf2b@%3Ccommits.myfaces.apache.org%3E https://lists.apache.org/thread.html/rb8ec556f176c83547b959150e2108e2ddf1d61224295941908b0a81f@%3Cannounce.apache.org%3E https://lists.apache.org/thread.html/rbfe9ba28b74f39f46ec1bbbac3bef313f35017cf3aac13841a84483a@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/rc3c8ef9724b5b1e171529b47f4b35cb7920edfb6e917fa21eb6c64ea@%3Cdev.ant.apache.org%3E https://lists.apache.org/thread.html/rc89e491b5b270fb40f1210b70554527b737c217ad2e831b643ead6bc@%3Cuser.ant.apache.org%3E https://lists.apache.org/thread.html/rce099751721c26a8166d8b6578293820832831a0b2cb8d93b8efa081@%3Cnotifications.groovy.apache.org%3E https://lists.apache.org/thread.html/rd7dda48ff835f4d0293949837d55541bfde3683bd35bd8431e324538@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/rda80ac59119558eaec452e58ddfac2ccc9211da1c65f7927682c78b1@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/rdaa9c51d5dc6560c9d2b3f3d742c768ad0705e154041e574a0fae45c@%3Cnotifications.groovy.apache.org%3E https://lists.apache.org/thread.html/re1ce84518d773a94a613d988771daf9252c9cf7375a9a477009f9735@%3Ccommits.creadur.apache.org%3E https://lists.apache.org/thread.html/rf07feaf78afc8f701e21948a06ef92565d3dff1242d710f4fbf900b2@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/rfd346609527a79662c48b1da3ac500ec30f29f7ddaa3575051e81890@%3Ccommits.creadur.apache.org%3E https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EQBR65TINSJRN7PTPIVNYS33P535WM74 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EQBR65TINSJRN7PTPIVNYS33P535WM74/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RRVAWTCVXJMRYKQKEXYSNBF7NLSR6OEI https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RRVAWTCVXJMRYKQKEXYSNBF7NLSR6OEI/ https://nvd.nist.gov/vuln/detail/CVE-2020-1945 https://security.gentoo.org/glsa/202007-34 https://ubuntu.com/security/notices/USN-4380-1 https://ubuntu.com/security/notices/USN-4874-1 https://usn.ubuntu.com/4380-1 https://usn.ubuntu.com/4380-1/ https://www.cve.org/CVERecord?id=CVE-2020-1945 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpujan2021.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2020.html https://www.oracle.com/security-alerts/cpuoct2020.html https://www.oracle.com/security-alerts/cpuoct2021.html
org.apache.ant:ant CVE-2021-36373 MEDIUM 1.7.1 1.9.16, 1.10.11 https://access.redhat.com/security/cve/CVE-2021-36373 https://ant.apache.org/security.html https://lists.apache.org/thread.html/r27919fd4db07c487239c1d9771f480d89ce5ee2750aa9447309b709a@%3Ccommits.groovy.apache.org%3E https://lists.apache.org/thread.html/r544c9e8487431768465b8b2d13982c75123109bd816acf839d46010d@%3Ccommits.groovy.apache.org%3E https://lists.apache.org/thread.html/r54afdab05e01de970649c2d91a993f68a6b00cd73e6e34e16c832d46@%3Cuser.ant.apache.org%3E https://lists.apache.org/thread.html/rad36f470647c5a7c02dd78c9973356d2840766d132b597b6444e373a@%3Cnotifications.groovy.apache.org%3E https://lists.apache.org/thread.html/rf4bb79751a02889623195715925e4fd8932dd3c97e0ade91395a96c6@%3Cdev.myfaces.apache.org%3E https://nvd.nist.gov/vuln/detail/CVE-2021-36373 https://security.netapp.com/advisory/ntap-20210819-0007 https://security.netapp.com/advisory/ntap-20210819-0007/ https://www.cve.org/CVERecord?id=CVE-2021-36373 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
org.apache.commons:commons-compress CVE-2019-12402 HIGH 1.18 1.19 https://access.redhat.com/security/cve/CVE-2019-12402 https://github.com/jensdietrich/xshady-release/tree/main/CVE-2019-12402 https://lists.apache.org/thread.html/308cc15f1f1dc53e97046fddbac240e6cd16de89a2746cf257be7f5b@%3Cdev.commons.apache.org%3E https://lists.apache.org/thread.html/54cc4e9fa6b24520135f6fa4724dfb3465bc14703c7dc7e52353a0ea@%3Ccommits.creadur.apache.org%3E https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/r05cf37c1e1e662e968cfece1102fcd50fe207181fdbf2c30aadfafd3@%3Cissues.flink.apache.org%3E https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E https://lists.apache.org/thread.html/r21d64797914001119d2fc766b88c6da181dc2308d20f14e7a7f46117@%3Cissues.flink.apache.org%3E https://lists.apache.org/thread.html/r233267e24519bacd0f9fb9f61a1287cb9f4bcb6e75d83f34f405c521@%3Cissues.flink.apache.org%3E https://lists.apache.org/thread.html/r25422df9ad22fec56d9eeca3ab8bd6d66365e9f6bfe311b64730edf5@%3Cissues.flink.apache.org%3E https://lists.apache.org/thread.html/r4363c994c8bca033569a98da9218cc0c62bb695c1e47a98e5084e5a0@%3Cissues.flink.apache.org%3E https://lists.apache.org/thread.html/r5103b1c9242c0f812ac96e524344144402cbff9b6e078d1557bc7b1e@%3Cissues.flink.apache.org%3E https://lists.apache.org/thread.html/r590c15cebee9b8e757e2f738127a9a71e48ede647a3044c504e050a4@%3Cissues.flink.apache.org%3E https://lists.apache.org/thread.html/r5caf4fcb69d2749225391e61db7216282955204849ba94f83afe011f@%3Cissues.flink.apache.org%3E https://lists.apache.org/thread.html/r7af60fbd8b2350d49d14e53a3ab2801998b9d1af2d6fcac60b060a53@%3Cdev.brooklyn.apache.org%3E https://lists.apache.org/thread.html/r972f82d821b805d04602976a9736c01b6bf218cfe0c3f48b472db488@%3Cissues.flink.apache.org%3E https://lists.apache.org/thread.html/rcc35ab6be300365de5ff9587e0479d10d7d7c79070921837e3693162@%3Cissues.flink.apache.org%3E https://lists.apache.org/thread.html/rd3f99d732baed459b425fb0a9e9e14f7843c9459b12037e4a9d753b5@%3Cissues.flink.apache.org%3E https://lists.apache.org/thread.html/rdebc1830d6c09c11d5a4804ca26769dbd292d17d361c61dea50915f0@%3Cissues.flink.apache.org%3E https://lists.apache.org/thread.html/re13bd219dd4b651134f6357f12bd07a0344eea7518c577bbdd185265@%3Cissues.flink.apache.org%3E https://lists.apache.org/thread.html/rf5230a049d989dbfdd404b4320a265dceeeba459a4d04ec21873bd55@%3Csolr-user.lucene.apache.org%3E https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QLJIK2AUOZOWXR3S5XXBUNMOF3RTHTI7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QLJIK2AUOZOWXR3S5XXBUNMOF3RTHTI7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WZB3GB7YXIOUKIOQ27VTIP6KKGJJ3CKL https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WZB3GB7YXIOUKIOQ27VTIP6KKGJJ3CKL/ https://nvd.nist.gov/vuln/detail/CVE-2019-12402 https://security.netapp.com/advisory/ntap-20230818-0001 https://security.netapp.com/advisory/ntap-20230818-0001/ https://www.cve.org/CVERecord?id=CVE-2019-12402 https://www.openwall.com/lists/oss-security/2019/08/27/1 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpuapr2020.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2021.html https://www.oracle.com/security-alerts/cpujul2020.html https://www.oracle.com/security-alerts/cpuoct2020.html https://www.oracle.com/security-alerts/cpuoct2021.html
org.apache.commons:commons-compress CVE-2021-35515 HIGH 1.18 1.21 http://www.openwall.com/lists/oss-security/2021/07/13/1 https://access.redhat.com/security/cve/CVE-2021-35515 https://commons.apache.org/proper/commons-compress/security-reports.html https://lists.apache.org/thread.html/r19ebfd71770ec0617a9ea180e321ef927b3fefb4c81ec5d1902d20ab@%3Cuser.commons.apache.org%3E https://lists.apache.org/thread.html/r67ef3c07fe3b8c1b02d48012149d280ad6da8e4cec253b527520fb2b@%3Cdev.poi.apache.org%3E https://lists.apache.org/thread.html/r9f54c0caa462267e0cc68b49f141e91432b36b23348d18c65bd0d040@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/rab292091eadd1ecc63c516e9541a7f241091cf2e652b8185a6059945@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/racd0c0381c8404f298b226cd9db2eaae965b14c9c568224aa3f437ae@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/rb064d705fdfa44b5dae4c366b369ef6597951083196321773b983e71@%3Ccommits.pulsar.apache.org%3E https://lists.apache.org/thread.html/rb6e1fa80d34e5ada45f72655d84bfd90db0ca44ef19236a49198c88c@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/rb7adf3e55359819e77230b4586521e5c6874ce5ed93384bdc14d6aee@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/rba65ed5ddb0586f5b12598f55ec7db3633e7b7fede60466367fbf86a@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/rbaea15ddc5a7c0c6b66660f1d6403b28595e2561bb283eade7d7cd69@%3Cannounce.apache.org%3E https://lists.apache.org/thread.html/rbe91c512c5385181149ab087b6c909825d34299f5c491c6482a2ed57@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/rd4332baaf6debd03d60deb7ec93bee49e5fdbe958cb6800dff7fb00e@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/rf2f4d7940371a7c7c5b679f50e28fc7fcc82cd00670ced87e013ac88@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/rfba19167efc785ad3561e7ef29f340d65ac8f0d897aed00e0731e742@%3Cnotifications.skywalking.apache.org%3E https://nvd.nist.gov/vuln/detail/CVE-2021-35515 https://security.netapp.com/advisory/ntap-20211022-0001 https://security.netapp.com/advisory/ntap-20211022-0001/ https://www.cve.org/CVERecord?id=CVE-2021-35515 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
org.apache.commons:commons-compress CVE-2021-35516 HIGH 1.18 1.21 http://www.openwall.com/lists/oss-security/2021/07/13/2 https://access.redhat.com/security/cve/CVE-2021-35516 https://commons.apache.org/proper/commons-compress/security-reports.html https://lists.apache.org/thread.html/r67ef3c07fe3b8c1b02d48012149d280ad6da8e4cec253b527520fb2b@%3Cdev.poi.apache.org%3E https://lists.apache.org/thread.html/r9f54c0caa462267e0cc68b49f141e91432b36b23348d18c65bd0d040@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/racd0c0381c8404f298b226cd9db2eaae965b14c9c568224aa3f437ae@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/rb064d705fdfa44b5dae4c366b369ef6597951083196321773b983e71@%3Ccommits.pulsar.apache.org%3E https://lists.apache.org/thread.html/rb6e1fa80d34e5ada45f72655d84bfd90db0ca44ef19236a49198c88c@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/rb7adf3e55359819e77230b4586521e5c6874ce5ed93384bdc14d6aee@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/rba65ed5ddb0586f5b12598f55ec7db3633e7b7fede60466367fbf86a@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/rd4332baaf6debd03d60deb7ec93bee49e5fdbe958cb6800dff7fb00e@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/rf5b1016fb15b7118b9a5e16bb0b78cb4f1dfcf7821eb137ab5757c91@%3Cannounce.apache.org%3E https://lists.apache.org/thread.html/rf68442d67eb166f4b6cf0bbbe6c7f99098c12954f37332073c9822ca@%3Cuser.commons.apache.org%3E https://lists.apache.org/thread.html/rfba19167efc785ad3561e7ef29f340d65ac8f0d897aed00e0731e742@%3Cnotifications.skywalking.apache.org%3E https://nvd.nist.gov/vuln/detail/CVE-2021-35516 https://security.netapp.com/advisory/ntap-20211022-0001 https://security.netapp.com/advisory/ntap-20211022-0001/ https://www.cve.org/CVERecord?id=CVE-2021-35516 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
org.apache.commons:commons-compress CVE-2021-35517 HIGH 1.18 1.21 http://www.openwall.com/lists/oss-security/2021/07/13/3 http://www.openwall.com/lists/oss-security/2021/07/13/5 https://access.redhat.com/security/cve/CVE-2021-35517 https://commons.apache.org/proper/commons-compress/security-reports.html https://lists.apache.org/thread.html/r31f75743ac173b0a606f8ea6ea53f351f386c44e7bcf78ae04007c29@%3Cissues.flink.apache.org%3E https://lists.apache.org/thread.html/r457b2ed564860996b20d938566fe8bd4bfb7c37be8e205448ccb5975@%3Cannounce.apache.org%3E https://lists.apache.org/thread.html/r54afdab05e01de970649c2d91a993f68a6b00cd73e6e34e16c832d46@%3Cuser.ant.apache.org%3E https://lists.apache.org/thread.html/r605d906b710b95f1bbe0036a53ac6968f667f2c249b6fbabada9a940@%3Cuser.commons.apache.org%3E https://lists.apache.org/thread.html/r67ef3c07fe3b8c1b02d48012149d280ad6da8e4cec253b527520fb2b@%3Cdev.poi.apache.org%3E https://lists.apache.org/thread.html/r9f54c0caa462267e0cc68b49f141e91432b36b23348d18c65bd0d040@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/ra393ffdc7c90a4a37ea023946f390285693795013a642d80fba20203@%3Cannounce.apache.org%3E https://lists.apache.org/thread.html/racd0c0381c8404f298b226cd9db2eaae965b14c9c568224aa3f437ae@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/rb064d705fdfa44b5dae4c366b369ef6597951083196321773b983e71@%3Ccommits.pulsar.apache.org%3E https://lists.apache.org/thread.html/rb6e1fa80d34e5ada45f72655d84bfd90db0ca44ef19236a49198c88c@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/rb7adf3e55359819e77230b4586521e5c6874ce5ed93384bdc14d6aee@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/rba65ed5ddb0586f5b12598f55ec7db3633e7b7fede60466367fbf86a@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/rd4332baaf6debd03d60deb7ec93bee49e5fdbe958cb6800dff7fb00e@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/rfba19167efc785ad3561e7ef29f340d65ac8f0d897aed00e0731e742@%3Cnotifications.skywalking.apache.org%3E https://nvd.nist.gov/vuln/detail/CVE-2021-35517 https://security.netapp.com/advisory/ntap-20211022-0001 https://security.netapp.com/advisory/ntap-20211022-0001/ https://www.cve.org/CVERecord?id=CVE-2021-35517 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
org.apache.commons:commons-compress CVE-2021-36090 HIGH 1.18 1.21 http://www.openwall.com/lists/oss-security/2021/07/13/4 http://www.openwall.com/lists/oss-security/2021/07/13/6 https://access.redhat.com/security/cve/CVE-2021-36090 https://commons.apache.org/proper/commons-compress/security-reports.html https://lists.apache.org/thread.html/r0e87177f8e78b4ee453cd4d3d8f4ddec6f10d2c27707dd71e12cafc9@%3Cannounce.apache.org%3E https://lists.apache.org/thread.html/r25f4c44616045085bc3cf901bb7e68e445eee53d1966fc08998fc456@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/r3227b1287e5bd8db6523b862c22676b046ad8f4fc96433225f46a2bd@%3Cissues.drill.apache.org%3E https://lists.apache.org/thread.html/r4f03c5de923e3f2a8c316248681258125140514ef3307bfe1538e1ab@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/r54049b66afbca766b6763c7531e9fe7a20293a112bcb65462a134949@%3Ccommits.drill.apache.org%3E https://lists.apache.org/thread.html/r67ef3c07fe3b8c1b02d48012149d280ad6da8e4cec253b527520fb2b@%3Cdev.poi.apache.org%3E https://lists.apache.org/thread.html/r75ffc7a461e7e7ae77690fa75bd47bb71365c732e0fbcc44da4f8ff5@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/r9a23d4dbf4e34d498664080bff59f2893b855eb16dae33e4aa92fa53@%3Cannounce.apache.org%3E https://lists.apache.org/thread.html/r9f54c0caa462267e0cc68b49f141e91432b36b23348d18c65bd0d040@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/rab292091eadd1ecc63c516e9541a7f241091cf2e652b8185a6059945@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/racd0c0381c8404f298b226cd9db2eaae965b14c9c568224aa3f437ae@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/rb064d705fdfa44b5dae4c366b369ef6597951083196321773b983e71@%3Ccommits.pulsar.apache.org%3E https://lists.apache.org/thread.html/rb5fa2ee61828fa2e42361b58468717e84902dd71c4aea8dc0b865df7@%3Cnotifications.james.apache.org%3E https://lists.apache.org/thread.html/rb6e1fa80d34e5ada45f72655d84bfd90db0ca44ef19236a49198c88c@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/rb7adf3e55359819e77230b4586521e5c6874ce5ed93384bdc14d6aee@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/rba65ed5ddb0586f5b12598f55ec7db3633e7b7fede60466367fbf86a@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/rbbf42642c3e4167788a7c13763d192ee049604d099681f765385d99d@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/rbe91c512c5385181149ab087b6c909825d34299f5c491c6482a2ed57@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/rc4134026d7d7b053d4f9f2205531122732405012c8804fd850a9b26f@%3Cuser.commons.apache.org%3E https://lists.apache.org/thread.html/rc7df4c2f0bbe2028a1498a46d322c91184f7a369e3e4c57d9518cacf@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/rd4332baaf6debd03d60deb7ec93bee49e5fdbe958cb6800dff7fb00e@%3Cnotifications.skywalking.apache.org%3E https://lists.apache.org/thread.html/rdd5412a5b9a25aed2a02c3317052d38a97128314d50bc1ed36e81d38@%3Cuser.ant.apache.org%3E https://lists.apache.org/thread.html/rf2f4d7940371a7c7c5b679f50e28fc7fcc82cd00670ced87e013ac88@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/rf3f0a09fee197168a813966c5816157f6c600a47313a0d6813148ea6@%3Cissues.drill.apache.org%3E https://lists.apache.org/thread.html/rf93b6bb267580e01deb7f3696f7eaca00a290c66189a658cf7230a1a@%3Cissues.drill.apache.org%3E https://lists.apache.org/thread.html/rfba19167efc785ad3561e7ef29f340d65ac8f0d897aed00e0731e742@%3Cnotifications.skywalking.apache.org%3E https://nvd.nist.gov/vuln/detail/CVE-2021-36090 https://security.netapp.com/advisory/ntap-20211022-0001 https://security.netapp.com/advisory/ntap-20211022-0001/ https://www.cve.org/CVERecord?id=CVE-2021-36090 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
org.apache.commons:commons-compress CVE-2024-25710 MEDIUM 1.18 1.26.0 http://seclists.org/fulldisclosure/2024/Aug/37 http://www.openwall.com/lists/oss-security/2024/02/19/1 https://access.redhat.com/security/cve/CVE-2024-25710 https://advisory.echohq.com/cve/CVE-2024-25710 https://github.com/advisories/GHSA-4g9r-vxhx-9pgx https://github.com/apache/commons-compress https://lists.apache.org/thread/cz8qkcwphy4cx8gltn932ln51cbtq6kf https://nvd.nist.gov/vuln/detail/CVE-2024-25710 https://security.netapp.com/advisory/ntap-20240307-0010 https://security.netapp.com/advisory/ntap-20240307-0010/ https://www.cve.org/CVERecord?id=CVE-2024-25710
org.apache.commons:commons-lang3 CVE-2025-48924 MEDIUM 3.9 3.18.0 http://www.openwall.com/lists/oss-security/2025/07/11/1 https://access.redhat.com/security/cve/CVE-2025-48924 https://advisory.echohq.com/cve/CVE-2025-48924 https://github.com/apache/commons-lang https://github.com/apache/commons-lang/commit/b424803abdb2bec818e4fbcb251ce031c22aca53 https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1 https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html https://nvd.nist.gov/vuln/detail/CVE-2025-48924 https://ubuntu.com/security/notices/USN-8364-1 https://www.cve.org/CVERecord?id=CVE-2025-48924 https://www.openwall.com/lists/oss-security/2025/07/11/1
org.apache.commons:commons-vfs2 CVE-2025-27553 HIGH 2.1 2.10.0 http://www.openwall.com/lists/oss-security/2025/03/23/1 https://access.redhat.com/security/cve/CVE-2025-27553 https://github.com/apache/commons-vfs https://linux.oracle.com/cve/CVE-2025-27553.html https://linux.oracle.com/errata/ELSA-2025-10548.html https://lists.apache.org/thread/cnzqowyw9r2pl263cylmxhnvh41hyjcb https://lists.debian.org/debian-lts-announce/2025/04/msg00006.html https://nvd.nist.gov/vuln/detail/CVE-2025-27553 https://www.cve.org/CVERecord?id=CVE-2025-27553
org.apache.commons:commons-vfs2 CVE-2025-30474 MEDIUM 2.1 2.10.0 http://www.openwall.com/lists/oss-security/2025/03/23/2 https://github.com/apache/commons-vfs https://issues.apache.org/jira/browse/VFS-169 https://lists.apache.org/thread/w6ztgnbk6ccry3470x191g3xwrpgy6f4 https://nvd.nist.gov/vuln/detail/CVE-2025-30474
org.apache.httpcomponents:httpclient CVE-2020-13956 MEDIUM 4.5.4 4.5.13, 5.0.3 https://access.redhat.com/security/cve/CVE-2020-13956 https://advisory.echohq.com/cve/CVE-2020-13956 https://bugzilla.redhat.com/show_bug.cgi?id=1886587 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13956 https://errata.almalinux.org/8/ALSA-2022-1861.html https://errata.rockylinux.org/RLSA-2022:1861 https://github.com/advisories/GHSA-7r82-7xv7-xcpj https://github.com/apache/httpcomponents-client https://linux.oracle.com/cve/CVE-2020-13956.html https://linux.oracle.com/errata/ELSA-2022-1861.html https://lists.apache.org/thread.html/r03bbc318c81be21f5c8a9b85e34f2ecc741aa804a8e43b0ef2c37749@%3Cissues.maven.apache.org%3E https://lists.apache.org/thread.html/r043a75acdeb52b15dd5e9524cdadef4202e6a5228644206acf9363f9@%3Cdev.hive.apache.org%3E https://lists.apache.org/thread.html/r06cf3ca5c8ceb94b39cd24a73d4e96153b485a7dac88444dd876accb@%3Cissues.drill.apache.org%3E https://lists.apache.org/thread.html/r0a75b8f0f72f3e18442dc56d33f3827b905f2fe5b7ba48997436f5d1@%3Cissues.solr.apache.org%3E https://lists.apache.org/thread.html/r0bebe6f9808ac7bdf572873b4fa96a29c6398c90dab29f131f3ebffe@%3Cissues.solr.apache.org%3E https://lists.apache.org/thread.html/r12cb62751b35bdcda0ae2a08b67877d665a1f4d41eee0fa7367169e0@%3Cdev.ranger.apache.org%3E https://lists.apache.org/thread.html/r132e4c6a560cfc519caa1aaee63bdd4036327610eadbd89f76dd5457@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/r2835543ef0f91adcc47da72389b816e36936f584c7be584d2314fac3@%3Cissues.lucene.apache.org%3E https://lists.apache.org/thread.html/r2a03dc210231d7e852ef73015f71792ac0fcaca6cccc024c522ef17d@%3Ccommits.creadur.apache.org%3E https://lists.apache.org/thread.html/r2dc7930b43eadc78220d269b79e13ecd387e4bee52db67b2f47d4303@%3Cgitbox.hive.apache.org%3E https://lists.apache.org/thread.html/r34178ab6ef106bc940665fd3f4ba5026fac3603b3fa2aefafa0b619d@%3Cdev.ranger.apache.org%3E https://lists.apache.org/thread.html/r34efec51cb817397ccf9f86e25a75676d435ba5f83ee7b2eabdad707@%3Ccommits.creadur.apache.org%3E https://lists.apache.org/thread.html/r3cecd59fba74404cbf4eb430135e1080897fb376f111406a78bed13a@%3Cissues.lucene.apache.org%3E https://lists.apache.org/thread.html/r3f740e4c38bba1face49078aa5cbeeb558c27be601cc9712ad2dcd1e@%3Ccommits.creadur.apache.org%3E https://lists.apache.org/thread.html/r4850b3fbaea02fde2886e461005e4af8d37c80a48b3ce2a6edca0e30@%3Cissues.solr.apache.org%3E https://lists.apache.org/thread.html/r549ac8c159bf0c568c19670bedeb8d7c0074beded951d34b1c1d0d05@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/r55b2a1d1e9b1ec9db792b93da8f0f99a4fd5a5310b02673359d9b4d1@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/r5b55f65c123a7481104d663a915ec45a0d103e6aaa03f42ed1c07a89@%3Cdev.jackrabbit.apache.org%3E https://lists.apache.org/thread.html/r5de3d3808e7b5028df966e45115e006456c4e8931dc1e29036f17927@%3Cissues.solr.apache.org%3E https://lists.apache.org/thread.html/r5fec9c1d67f928179adf484b01e7becd7c0a6fdfe3a08f92ea743b90@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r63296c45d5d84447babaf39bd1487329d8a80d8d563e67a4b6f3d8a7@%3Cdev.ranger.apache.org%3E https://lists.apache.org/thread.html/r69a94e2f302d1b778bdfefe90fcb4b8c50b226438c3c8c1d0de85a19@%3Cdev.ranger.apache.org%3E https://lists.apache.org/thread.html/r6a3cda38d050ebe13c1bc9a28d0a8ec38945095d07eca49046bcb89f@%3Cissues.solr.apache.org%3E https://lists.apache.org/thread.html/r6d672b46622842e565e00f6ef6bef83eb55d8792aac2bee75bff9a2a@%3Cissues.lucene.apache.org%3E https://lists.apache.org/thread.html/r6dab7da30f8bf075f79ee189e33b45a197502e2676481bb8787fc0d7@%3Cdev.hc.apache.org%3E https://lists.apache.org/thread.html/r6eb2dae157dbc9af1f30d1f64e9c60d4ebef618f3dce4a0e32d6ea4d@%3Ccommits.drill.apache.org%3E https://lists.apache.org/thread.html/r70c429923100c5a4fae8e5bc71c8a2d39af3de4888f50a0ac3755e6f@%3Ccommits.creadur.apache.org%3E https://lists.apache.org/thread.html/r87ddc09295c27f25471269ad0a79433a91224045988b88f0413a97ec@%3Cissues.bookkeeper.apache.org%3E https://lists.apache.org/thread.html/r8aa1e5c343b89aec5b69961471950e862f15246cb6392910161c389b@%3Cissues.maven.apache.org%3E https://lists.apache.org/thread.html/r9e52a6c72c8365000ecd035e48cc9fee5a677a150350d4420c46443d@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/ra539f20ef0fb0c27ee39945b5f56bf162e5c13d1c60f7344dab8de3b@%3Cissues.maven.apache.org%3E https://lists.apache.org/thread.html/ra8bc6b61c5df301a6fe5a716315528ecd17ccb8a7f907e24a47a1a5e@%3Cissues.lucene.apache.org%3E https://lists.apache.org/thread.html/rad6222134183046f3928f733bf680919e0c390739bfbfe6c90049673@%3Cissues.drill.apache.org%3E https://lists.apache.org/thread.html/rae14ae25ff4a60251e3ba2629c082c5ba3851dfd4d21218b99b56652@%3Cissues.solr.apache.org%3E https://lists.apache.org/thread.html/rb33212dab7beccaf1ffef9b88610047c644f644c7a0ebdc44d77e381@%3Ccommits.turbine.apache.org%3E https://lists.apache.org/thread.html/rb4ba262d6f08ab9cf8b1ebbcd9b00b0368ffe90dad7ad7918b4b56fc@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/rb725052404fabffbe093c83b2c46f3f87e12c3193a82379afbc529f8@%3Csolr-user.lucene.apache.org%3E https://lists.apache.org/thread.html/rc0863892ccfd9fd0d0ae10091f24ee769fb39b8957fe4ebabfc11f17@%3Cdev.jackrabbit.apache.org%3E https://lists.apache.org/thread.html/rc3739e0ad4bcf1888c6925233bfc37dd71156bbc8416604833095c42@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/rc505fee574fe8d18f9b0c655a4d120b0ae21bb6a73b96003e1d9be35@%3Cissues.solr.apache.org%3E https://lists.apache.org/thread.html/rc5c6ccb86d2afe46bbd4b71573f0448dc1f87bbcd5a0d8c7f8f904b2@%3Cissues.lucene.apache.org%3E https://lists.apache.org/thread.html/rc990e2462ec32b09523deafb2c73606208599e196fa2d7f50bdbc587@%3Cissues.maven.apache.org%3E https://lists.apache.org/thread.html/rcced7ed3237c29cd19c1e9bf465d0038b8b2e967b99fc283db7ca553@%3Cdev.ranger.apache.org%3E https://lists.apache.org/thread.html/rcd9ad5dda60c82ab0d0c9bd3e9cb1dc740804451fc20c7f451ef5cc4@%3Cgitbox.hive.apache.org%3E https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E https://lists.apache.org/thread.html/rd5ab56beb2ac6879f6ab427bc4e5f7691aed8362d17b713f61779858@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/re504acd4d63b8df2a7353658f45c9a3137e5f80e41cf7de50058b2c1@%3Cissues.solr.apache.org%3E https://lists.apache.org/thread.html/rea3dbf633dde5008d38bf6600a3738b9216e733e03f9ff7becf79625@%3Cissues.drill.apache.org%3E https://lists.apache.org/thread.html/ree942561f4620313c75982a4e5f3b74fe6f7062b073210779648eec2@%3Cissues.lucene.apache.org%3E https://lists.apache.org/thread.html/reef569c2419705754a3acf42b5f19b2a158153cef0e448158bc54917@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/rf03228972e56cb4a03e6d9558188c2938078cf3ceb23a3fead87c9ca@%3Cissues.bookkeeper.apache.org%3E https://lists.apache.org/thread.html/rf43d17ed0d1fb4fb79036b582810ef60b18b1ef3add0d5dea825af1e@%3Cissues.lucene.apache.org%3E https://lists.apache.org/thread.html/rf4db88c22e1be9eb60c7dc623d0528642c045fb196a24774ac2fa3a3@%3Cissues.lucene.apache.org%3E https://lists.apache.org/thread.html/rf7ca60f78f05b772cc07d27e31bcd112f9910a05caf9095e38ee150f@%3Cdev.ranger.apache.org%3E https://lists.apache.org/thread.html/rfb35f6db9ba1f1e061b63769a4eff5abadcc254ebfefc280e5a0dcf1@%3Ccommits.creadur.apache.org%3E https://lists.apache.org/thread.html/rfbedcb586a1e7dfce87ee03c720e583fc2ceeafa05f35c542cecc624@%3Cissues.solr.apache.org%3E https://lists.apache.org/thread.html/rfc00884c7b7ca878297bffe45fcb742c362b00b26ba37070706d44c3@%3Cissues.hive.apache.org%3E https://nvd.nist.gov/vuln/detail/CVE-2020-13956 https://priyankn.github.io/2021-02-26-CVE-2020-13956/ https://security.netapp.com/advisory/ntap-20220210-0002 https://security.netapp.com/advisory/ntap-20220210-0002/ https://ubuntu.com/security/notices/USN-5239-1 https://www.cve.org/CVERecord?id=CVE-2020-13956 https://www.openwall.com/lists/oss-security/2020/10/08/4 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
org.apache.logging.log4j:log4j-core CVE-2021-44228 CRITICAL 2.8.2 2.15.0, 2.3.1, 2.12.2 http://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remote-Code-Execution.html http://packetstormsecurity.com/files/165260/VMware-Security-Advisory-2021-0028.html http://packetstormsecurity.com/files/165261/Apache-Log4j2-2.14.1-Information-Disclosure.html http://packetstormsecurity.com/files/165270/Apache-Log4j2-2.14.1-Remote-Code-Execution.html http://packetstormsecurity.com/files/165281/Log4j2-Log4Shell-Regexes.html http://packetstormsecurity.com/files/165282/Log4j-Payload-Generator.html http://packetstormsecurity.com/files/165306/L4sh-Log4j-Remote-Code-Execution.html http://packetstormsecurity.com/files/165307/Log4j-Remote-Code-Execution-Word-Bypassing.html http://packetstormsecurity.com/files/165311/log4j-scan-Extensive-Scanner.html http://packetstormsecurity.com/files/165371/VMware-Security-Advisory-2021-0028.4.html http://packetstormsecurity.com/files/165532/Log4Shell-HTTP-Header-Injection.html http://packetstormsecurity.com/files/165642/VMware-vCenter-Server-Unauthenticated-Log4Shell-JNDI-Injection-Remote-Code-Execution.html http://packetstormsecurity.com/files/165673/UniFi-Network-Application-Unauthenticated-Log4Shell-Remote-Code-Execution.html http://packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html http://packetstormsecurity.com/files/167917/MobileIron-Log4Shell-Remote-Command-Execution.html http://packetstormsecurity.com/files/171626/AD-Manager-Plus-7122-Remote-Code-Execution.html http://seclists.org/fulldisclosure/2022/Dec/2 http://seclists.org/fulldisclosure/2022/Jul/11 http://seclists.org/fulldisclosure/2022/Mar/23 http://www.openwall.com/lists/oss-security/2021/12/10/1 http://www.openwall.com/lists/oss-security/2021/12/10/2 http://www.openwall.com/lists/oss-security/2021/12/10/3 http://www.openwall.com/lists/oss-security/2021/12/13/1 http://www.openwall.com/lists/oss-security/2021/12/13/2 http://www.openwall.com/lists/oss-security/2021/12/14/4 http://www.openwall.com/lists/oss-security/2021/12/15/3 https://access.redhat.com/security/cve/CVE-2021-44228 https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf https://github.com/advisories/GHSA-7rjr-3q55-vv33 https://github.com/advisories/GHSA-jfh8-c2jp-5v3q https://github.com/apache/logging-log4j2 https://github.com/apache/logging-log4j2/commit/c77b3cb39312b83b053d23a2158b99ac7de44dd3 https://github.com/apache/logging-log4j2/pull/608 https://github.com/cisagov/log4j-affected-db https://github.com/cisagov/log4j-affected-db/blob/develop/SOFTWARE-LIST.md https://github.com/github/advisory-database/pull/5501 https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44228 https://github.com/tangxiaofeng7/apache-log4j-poc https://issues.apache.org/jira/browse/LOG4J2-3198 https://issues.apache.org/jira/browse/LOG4J2-3201 https://issues.apache.org/jira/browse/LOG4J2-3214 https://issues.apache.org/jira/browse/LOG4J2-3221 https://lists.debian.org/debian-lts-announce/2021/12/msg00007.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M5CSVUNV4HWZZXGOKNSK6L7RPM7BOKIB https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M5CSVUNV4HWZZXGOKNSK6L7RPM7BOKIB/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VU57UJDCFIASIO35GC55JMKSRXJMCDFM https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VU57UJDCFIASIO35GC55JMKSRXJMCDFM/ https://logging.apache.org/log4j/2.x/changes-report.html#a2.15.0 https://logging.apache.org/log4j/2.x/manual/lookups.html#JndiLookup https://logging.apache.org/log4j/2.x/manual/migration.html https://logging.apache.org/log4j/2.x/security.html https://msrc-blog.microsoft.com/2021/12/11/microsofts-response-to-cve-2021-44228-apache-log4j2 https://msrc-blog.microsoft.com/2021/12/11/microsofts-response-to-cve-2021-44228-apache-log4j2/ https://nvd.nist.gov/vuln/detail/CVE-2021-44228 https://packetstormsecurity.com/files/165673/UniFi-Network-Application-Unauthenticated-Log4Shell-Remote-Code-Execution.html https://packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html https://packetstormsecurity.com/files/167917/MobileIron-Log4Shell-Remote-Command-Execution.html https://packetstormsecurity.com/files/171626/AD-Manager-Plus-7122-Remote-Code-Execution.html https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd https://seclists.org/fulldisclosure/2022/Dec/2 https://seclists.org/fulldisclosure/2022/Jul/11 https://seclists.org/fulldisclosure/2022/Mar/23 https://security.netapp.com/advisory/ntap-20211210-0007 https://security.netapp.com/advisory/ntap-20211210-0007/ https://support.apple.com/kb/HT213189 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd https://twitter.com/kurtseifried/status/1469345530182455296 https://ubuntu.com/security/notices/USN-5192-1 https://ubuntu.com/security/notices/USN-5192-2 https://ubuntu.com/security/notices/USN-5197-1 https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/Log4Shell https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0001 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-44228 https://www.cve.org/CVERecord?id=CVE-2021-44228 https://www.debian.org/security/2021/dsa-5020 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html https://www.kb.cert.org/vuls/id/930724 https://www.lunasec.io/docs/blog/log4j-zero-day/ https://www.nu11secur1ty.com/2021/12/cve-2021-44228.html https://www.oracle.com/security-alerts/alert-cve-2021-44228.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html
org.apache.logging.log4j:log4j-core CVE-2021-45046 CRITICAL 2.8.2 2.16.0, 2.12.2, 2.3.1 http://www.openwall.com/lists/oss-security/2021/12/14/4 http://www.openwall.com/lists/oss-security/2021/12/15/3 http://www.openwall.com/lists/oss-security/2021/12/18/1 https://access.redhat.com/security/cve/CVE-2021-44228 https://access.redhat.com/security/cve/CVE-2021-45046 https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf https://github.com/apache/logging-log4j2/compare/rel/2.3...rel/2.3.1 https://issues.apache.org/jira/browse/LOG4J2-3221 https://lists.apache.org/thread/83y7dx5xvn3h5290q1twn16tltolv88f https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EOKPQGV24RRBBI4TBZUDQMM4MEH7MXCY https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EOKPQGV24RRBBI4TBZUDQMM4MEH7MXCY/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SIG7FZULMNK2XF6FZRU4VWYDQXNMUGAJ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SIG7FZULMNK2XF6FZRU4VWYDQXNMUGAJ/ https://logging.apache.org/log4j/2.x/security.html https://logging.apache.org/security.html#CVE-2021-45046 https://nvd.nist.gov/vuln/detail/CVE-2021-45046 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd https://security.gentoo.org/glsa/202310-16 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd https://ubuntu.com/security/notices/USN-5197-1 https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/Log4Shell https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-45046 https://www.cve.org/CVERecord?id=CVE-2021-44228 https://www.cve.org/CVERecord?id=CVE-2021-45046 https://www.debian.org/security/2021/dsa-5022 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html https://www.kb.cert.org/vuls/id/930724 https://www.openwall.com/lists/oss-security/2021/12/14/4 https://www.openwall.com/lists/oss-security/2021/12/15/3 https://www.openwall.com/lists/oss-security/2021/12/18/1 https://www.oracle.com/security-alerts/alert-cve-2021-44228.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html
org.apache.logging.log4j:log4j-core CVE-2021-45105 HIGH 2.8.2 2.12.3, 2.17.0, 2.3.1 http://www.openwall.com/lists/oss-security/2021/12/19/1 https://access.redhat.com/security/cve/CVE-2021-45105 https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-501673.pdf https://issues.apache.org/jira/browse/LOG4J2-3230 https://lists.debian.org/debian-lts-announce/2021/12/msg00017.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EOKPQGV24RRBBI4TBZUDQMM4MEH7MXCY https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SIG7FZULMNK2XF6FZRU4VWYDQXNMUGAJ https://logging.apache.org/log4j/2.x/security.html https://logging.apache.org/log4j/2.x/security.html#CVE-2021-45105 https://nvd.nist.gov/vuln/detail/CVE-2021-45105 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd https://security.netapp.com/advisory/ntap-20211218-0001 https://security.netapp.com/advisory/ntap-20211218-0001/ https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd https://ubuntu.com/security/notices/USN-5203-1 https://ubuntu.com/security/notices/USN-5222-1 https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/Log4Shell https://www.cve.org/CVERecord?id=CVE-2021-45105 https://www.debian.org/security/2021/dsa-5024 https://www.kb.cert.org/vuls/id/930724 https://www.openwall.com/lists/oss-security/2021/12/19/1 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.zerodayinitiative.com/advisories/ZDI-21-1541 https://www.zerodayinitiative.com/advisories/ZDI-21-1541/
org.apache.logging.log4j:log4j-core CVE-2021-44832 MEDIUM 2.8.2 2.3.2, 2.12.4, 2.17.1 http://www.openwall.com/lists/oss-security/2021/12/28/1 https://access.redhat.com/security/cve/CVE-2021-44832 https://cert-portal.siemens.com/productcert/pdf/ssa-784507.pdf https://github.com/apache/logging-log4j2 https://github.com/apache/logging-log4j2/commit/05db5f9527254632b59aed2a1d78a32c5ab74f16 https://issues.apache.org/jira/browse/LOG4J2-3293 https://lists.apache.org/thread/s1o5vlo78ypqxnzn6p8zf6t9shtq5143 https://lists.debian.org/debian-lts-announce/2021/12/msg00036.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EVV25FXL4FU5X6X5BSL7RLQ7T6F65MRA https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EVV25FXL4FU5X6X5BSL7RLQ7T6F65MRA/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T57MPJUW3MA6QGWZRTMCHHMMPQNVKGFC https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T57MPJUW3MA6QGWZRTMCHHMMPQNVKGFC/ https://nvd.nist.gov/vuln/detail/CVE-2021-44832 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd https://security.netapp.com/advisory/ntap-20220104-0001 https://security.netapp.com/advisory/ntap-20220104-0001/ https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd https://ubuntu.com/security/notices/USN-5222-1 https://www.cve.org/CVERecord?id=CVE-2021-44832 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html
org.apache.logging.log4j:log4j-core CVE-2025-68161 MEDIUM 2.8.2 2.25.3 http://www.openwall.com/lists/oss-security/2025/12/18/1 https://access.redhat.com/security/cve/CVE-2025-68161 https://advisory.echohq.com/cve/CVE-2025-68161 https://github.com/apache/logging-log4j2 https://github.com/apache/logging-log4j2/commit/3b93748497e1adbbd027fda8a5e7268ec5d0d578 https://github.com/apache/logging-log4j2/pull/4002 https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx https://lists.debian.org/debian-lts-announce/2026/01/msg00015.html https://logging.apache.org/cyclonedx/vdr.xml https://logging.apache.org/log4j/2.x/manual/appenders/network.html#SslConfiguration-attr-verifyHostName https://logging.apache.org/log4j/2.x/manual/systemproperties.html#log4j2.sslVerifyHostName https://logging.apache.org/security.html#CVE-2025-68161 https://nvd.nist.gov/vuln/detail/CVE-2025-68161 https://www.cve.org/CVERecord?id=CVE-2025-68161
org.apache.logging.log4j:log4j-core CVE-2026-34479 MEDIUM 2.8.2 2.25.4 http://www.openwall.com/lists/oss-security/2026/04/10/8 https://access.redhat.com/security/cve/CVE-2026-34479 https://advisory.echohq.com/cve/CVE-2026-34479 https://github.com/apache/logging-log4j2 https://github.com/apache/logging-log4j2/pull/4078 https://lists.apache.org/thread/gd0hp6mj17rn3kj279vgy4p7kd4zz5on https://logging.apache.org/cyclonedx/vdr.xml https://logging.apache.org/log4j/2.x/migrate-from-log4j1.html https://logging.apache.org/security.html#CVE-2026-34479 https://nvd.nist.gov/vuln/detail/CVE-2026-34479 https://www.cve.org/CVERecord?id=CVE-2026-34479
org.apache.logging.log4j:log4j-core CVE-2026-34480 MEDIUM 2.8.2 2.25.4 http://www.openwall.com/lists/oss-security/2026/04/10/9 https://access.redhat.com/security/cve/CVE-2026-34480 https://advisory.echohq.com/cve/CVE-2026-34480 https://github.com/apache/logging-log4j2 https://github.com/apache/logging-log4j2/pull/4077 https://lists.apache.org/thread/5x0hcnng0chhghp6jgjdp3qmbbhfjzhb https://logging.apache.org/cyclonedx/vdr.xml https://logging.apache.org/log4j/2.x/manual/layouts.html#XmlLayout https://logging.apache.org/security.html#CVE-2026-34480 https://nvd.nist.gov/vuln/detail/CVE-2026-34480 https://www.cve.org/CVERecord?id=CVE-2026-34480
org.apache.logging.log4j:log4j-core CVE-2020-9488 LOW 2.8.2 2.13.2, 2.12.3, 2.3.2 https://access.redhat.com/security/cve/CVE-2020-9488 https://gitbox.apache.org/repos/asf?p=logging-log4j2.git;h=6851b5083ef9610bae320bf07e1f24d2aa08851b (release-2.x) https://gitbox.apache.org/repos/asf?p=logging-log4j2.git;h=fb91a3d71e2f3dadad6fd1beb2ab857f44fe8bbb (master) https://issues.apache.org/jira/browse/LOG4J2-2819 https://lists.apache.org/thread.html/r0a2699f724156a558afd1abb6c044fb9132caa66dce861b82699722a@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r0df3d7a5acb98c57e64ab9266aa21eeee1d9b399addb96f9cf1cbe05@%3Cdev.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r1fc73f0e16ec2fa249d3ad39a5194afb9cc5afb4c023dc0bab5a5881@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r22a56beb76dd8cf18e24fda9072f1e05990f49d6439662d3782a392f@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe@%3Cusers.kafka.apache.org%3E https://lists.apache.org/thread.html/r2f209d271349bafd91537a558a279c08ebcff8fa3e547357d58833e6@%3Cdev.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r33864a0fc171c1c4bf680645ebb6d4f8057899ab294a43e1e4fe9d04@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r393943de452406f0f6f4b3def9f8d3c071f96323c1f6ed1a098f7fe4@%3Ctorque-dev.db.apache.org%3E https://lists.apache.org/thread.html/r3d1d00441c55144a4013adda74b051ae7864128ebcfb6ee9721a2eb3@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r4285398e5585a0456d3d9db021a4fce6e6fcf3ec027dfa13a450ec98@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r45916179811a32cbaa500f972de9098e6ee80ee81c7f134fce83e03a@%3Cissues.flink.apache.org%3E https://lists.apache.org/thread.html/r48bcd06049c1779ef709564544c3d8a32ae6ee5c3b7281a606ac4463@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r48efc7cb5aeb4e1f67aaa06fb4b5479a5635d12f07d0b93fc2d08809@%3Ccommits.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r4d5dc9f3520071338d9ebc26f9f158a43ae28a91923d176b550a807b@%3Cdev.hive.apache.org%3E https://lists.apache.org/thread.html/r4db540cafc5d7232c62e076051ef661d37d345015b2e59b3f81a932f@%3Cdev.hive.apache.org%3E https://lists.apache.org/thread.html/r4ed1f49616a8603832d378cb9d13e7a8b9b27972bb46d946ccd8491f@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r5a68258e5ab12532dc179edae3d6e87037fa3b50ab9d63a90c432507@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r65578f3761a89bc164e8964acd5d913b9f8fd997967b195a89a97ca3@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r7641ee788e1eb1be4bb206a7d15f8a64ec6ef23e5ec6132d5a567695@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r7e5c10534ed06bf805473ac85e8412fe3908a8fa4cabf5027bf11220@%3Cdev.kafka.apache.org%3E https://lists.apache.org/thread.html/r7e739f2961753af95e2a3a637828fb88bfca68e5d6b0221d483a9ee5@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r8c001b9a95c0bbec06f4457721edd94935a55932e64b82cc5582b846@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r8e96c340004b7898cad3204ea51280ef6e4b553a684e1452bf1b18b1@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r9776e71e3c67c5d13a91c1eba0dc025b48b802eb7561cc6956d6961c@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r9a79175c393d14d760a0ae3731b4a873230a16ef321aa9ca48a810cd@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/ra051e07a0eea4943fa104247e69596f094951f51512d42c924e86c75@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/ra632b329b2ae2324fabbad5da204c4ec2e171ff60348ec4ba698fd40@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/rbc45eb0f53fd6242af3e666c2189464f848a851d408289840cecc6e3@%3Ccommits.zookeeper.apache.org%3E https://lists.apache.org/thread.html/rbc7642b9800249553f13457e46b813bea1aec99d2bc9106510e00ff3@%3Ctorque-dev.db.apache.org%3E https://lists.apache.org/thread.html/rc2dbc4633a6eea1fcbce6831876cfa17b73759a98c65326d1896cb1a@%3Ctorque-dev.db.apache.org%3E https://lists.apache.org/thread.html/rc6b81c013618d1de1b5d6b8c1088aaf87b4bacc10c2371f15a566701@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E https://lists.apache.org/thread.html/rd55f65c6822ff235eda435d31488cfbb9aa7055cdf47481ebee777cc@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/rd5d58088812cf8e677d99b07f73c654014c524c94e7fedbdee047604@%3Ctorque-dev.db.apache.org%3E https://lists.apache.org/thread.html/rd8e87c4d69df335d0ba7d815b63be8bd8a6352f429765c52eb07ddac@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/re024d86dffa72ad800f2848d0c77ed93f0b78ee808350b477a6ed987@%3Cgitbox.hive.apache.org%3E https://lists.apache.org/thread.html/rec34b1cccf907898e7cb36051ffac3ccf1ea89d0b261a2a3b3fb267f@%3Ccommits.zookeeper.apache.org%3E https://lists.apache.org/thread.html/rf1c2a81a08034c688b8f15cf58a4cfab322d00002ca46d20133bee20@%3Cdev.kafka.apache.org%3E https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E https://lists.debian.org/debian-lts-announce/2021/12/msg00017.html https://nvd.nist.gov/vuln/detail/CVE-2020-9488 https://security.netapp.com/advisory/ntap-20200504-0003 https://security.netapp.com/advisory/ntap-20200504-0003/ https://www.cve.org/CVERecord?id=CVE-2020-9488 https://www.debian.org/security/2021/dsa-5020 https://www.openwall.com/lists/oss-security/2020/04/25/1 https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2021.html https://www.oracle.com/security-alerts/cpujul2020.html https://www.oracle.com/security-alerts/cpuoct2020.html https://www.oracle.com/security-alerts/cpuoct2021.html
org.apache.maven.shared:maven-shared-utils CVE-2022-29599 CRITICAL 3.2.1 3.3.3 http://www.openwall.com/lists/oss-security/2022/05/23/3 https://access.redhat.com/security/cve/CVE-2022-29599 https://bugzilla.redhat.com/show_bug.cgi?id=2066479 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29599 https://errata.almalinux.org/8/ALSA-2022-4798.html https://errata.rockylinux.org/RLSA-2022:4798 https://github.com/apache/maven-shared-utils https://github.com/apache/maven-shared-utils/commit/f751e614c09df8de1a080dc1153931f3f68991c9 https://github.com/apache/maven-shared-utils/pull/40 https://issues.apache.org/jira/browse/MSHARED-297 https://linux.oracle.com/cve/CVE-2022-29599.html https://linux.oracle.com/errata/ELSA-2022-4798.html https://lists.debian.org/debian-lts-announce/2022/08/msg00018.html https://nvd.nist.gov/vuln/detail/CVE-2022-29599 https://rhn.redhat.com/errata/RHSA-2022-1662.html https://ubuntu.com/security/notices/USN-6730-1 https://www.cve.org/CVERecord?id=CVE-2022-29599 https://www.debian.org/security/2022/dsa-5242
org.apache.maven:maven-core CVE-2021-26291 CRITICAL 3.6.0 3.8.1 http://www.openwall.com/lists/oss-security/2021/04/23/5 https://access.redhat.com/security/cve/CVE-2021-26291 https://github.com/apache/maven https://github.com/apache/maven/commit/67125676eef313e592da6424a9be0c90c5e6bca5%20%28master%29 https://github.com/apache/maven/commit/899465aeec03753ea91e15a79579eab76369c016 https://github.com/apache/maven/commit/907d53ad3264718f66ff15e1363d76b07dd0c05f%20%283.8.x%29 https://github.com/apache/maven/commit/fa79cb22e456cc65522b5bab8c4240fe08c5775f https://issues.apache.org/jira/browse/MNG-7116 https://issues.apache.org/jira/browse/MNG-7117 https://issues.apache.org/jira/browse/MNG-7118 https://lists.apache.org/thread.html/r0556ce5db7231025785477739ee416b169d8aff5ee9bac7854d64736@%3Cannounce.apache.org%3E https://lists.apache.org/thread.html/r06db4057b74e0598a412734f693a34a8836ac6f06d16d139e5e1027c@%3Cdev.maven.apache.org%3E https://lists.apache.org/thread.html/r07a89b32783f73bda6903c1f9aadeb859e5bef0a4daed6d87db8e4a9@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/r08a401f8c98a99f68d061fde6e6659d695f28d60fe4f0413bcb355b0@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/r0a5e4ff2a7ca7ad8595d7683afbaeb3b8788ba974681907f97e7dc8e@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r0d083314aa3934dd4b6e6970d1f6ee50f6eaa9d867deb2cd96788478@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r167dbc42ef7c59802c2ca1ac14735ef9cf687c25208229993d6206fe@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe@%3Cusers.kafka.apache.org%3E https://lists.apache.org/thread.html/r2ddabd06d94b60cfb0141e4abb23201c628ab925e30742f61a04d013@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/r30a139c165b3da6e0d5536434ab1550534011b1fdfcd2f5d95892c5b@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/r30e9fcba679d164158cc26236704c351954909c18cb2485d11038aa6@%3Cdev.kafka.apache.org%3E https://lists.apache.org/thread.html/r340e75c9bb6e8661b89e1cf2c52f4638a18312e57bd884722bc28f52@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r39fa6ec4b7e912d3e04ea68efd23e554ec9c8efa2c96f5b45104fc61@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r3f0450dcab7e63b5f233ccfbc6fca5f1867a75c8aa2493ea82732381@%3Cdev.jena.apache.org%3E https://lists.apache.org/thread.html/r4e1619cfefcd031fac62064a3858f5c9229eef907bd5d8ef14c594fc@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/r52c6cda14dc6315dc79e72d30109f4589e9c6300ef6dc1a019da32d4@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/r53cd5de57aaa126038c5301d8f518f3defab3c5b1c7e17c97bad08d8@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/r5ae6aaa8a2ce86145225c3516bb45d315c0454e3765d651527e5df8a@%3Ccommits.kafka.apache.org%3E https://lists.apache.org/thread.html/r71bc13669be84c2ff45b74a67929bc2da905c152e12a39b406e3c2a0@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/r7212b874e575e59d648980d91bc22e684906aee9b211ab92da9591f5@%3Cdev.kafka.apache.org%3E https://lists.apache.org/thread.html/r74329c671df713f61ae4620ee2452a0443ccad7f33c60e8ed7d21ff9@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/r77af3ac7c3bfbd5454546e13faf7aec21d627bdcf36c9ca240436b94@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/r78fb6d2cf0ca332cfa43abd4471e75fa6c517ed9cdfcb950bff48d40@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r86aebd0387ae19b740b3eb28bad83fe6aceca0d6257eaa810a6e0002@%3Ccommits.kafka.apache.org%3E https://lists.apache.org/thread.html/r86e1c81e03f441855f127980e9b3d41939d04a7caea2b7ab718e2288@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r96cc126d3ee9aa42af9d3bb4baa94828b0a5f656584a50dcc594125f@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/r9a027668558264c4897633e66bcb7784099fdec9f9b22c38c2442f00@%3Cusers.maven.apache.org%3E https://lists.apache.org/thread.html/ra88a0eba7f84658cefcecc0143fd8bbad52c229ee5dfcbfdde7b6457@%3Cdev.jena.apache.org%3E https://lists.apache.org/thread.html/ra9d984eccfd2ae7726671e025f0296bf03786e5cdf872138110ac29b@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/rc7ae2530063d1cd1cf8e9fa130d10940760f927168d4063d23b8cd0a@%3Ccommits.kafka.apache.org%3E https://lists.apache.org/thread.html/rc9e441c1576bdc4375d32526d5cf457226928e9c87b9f54ded26271c@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/rcd37d9214b08067a2e8f2b5b4fd123a1f8cb6008698d11ef44028c21@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/rcd6c3a36f1dbc130da1b89d0f320db7040de71661a512695a8d513ac@%3Cdev.kafka.apache.org%3E https://lists.apache.org/thread.html/rdcbad6d8ce72c79827ed8c635f9a62dd919bb21c94a0b64cab2efc31@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/re75f8b3dbc5faa1640908f87e644d373e00f8b4e6ba3e2ba4bd2c80b@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/red3bf6cbfd99e36b0c0a4fa1cea1eef1eb300c6bd8f372f497341265@%3Cdev.kafka.apache.org%3E https://lists.apache.org/thread.html/rf9abfc0223747a56694825c050cc6b66627a293a32ea926b3de22402@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/rfc0db1f3c375087e69a239f9284ded72d04fbb55849eadde58fa9dc2@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/rfc27e2727a20a574f39273e0432aa97486a332f9b3068f6ac1346594@%3Cdev.myfaces.apache.org%3E https://maven.apache.org/docs/3.8.1/release-notes.html https://maven.apache.org/docs/3.8.1/release-notes.html#cve-2021-26291 https://nvd.nist.gov/vuln/detail/CVE-2021-26291 https://ubuntu.com/security/notices/USN-5245-1 https://ubuntu.com/security/notices/USN-5805-1 https://www.cve.org/CVERecord?id=CVE-2021-26291 https://www.openwall.com/lists/oss-security/2021/04/23/5 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.whitesourcesoftware.com/resources/blog/maven-security-vulnerability-cve-2021-26291 https://www.whitesourcesoftware.com/resources/blog/maven-security-vulnerability-cve-2021-26291/
org.apache.mina:mina-core CVE-2024-52046 CRITICAL 2.0.16 2.2.4, 2.1.10, 2.0.27 http://www.openwall.com/lists/oss-security/2024/12/25/1 https://access.redhat.com/security/cve/CVE-2024-52046 https://github.com/apache/mina https://lists.apache.org/thread/4wxktgjpggdbto15d515wdctohb0qmv8 https://nvd.nist.gov/vuln/detail/CVE-2024-52046 https://security.netapp.com/advisory/ntap-20250103-0001 https://security.netapp.com/advisory/ntap-20250103-0001/ https://www.cve.org/CVERecord?id=CVE-2024-52046
org.apache.mina:mina-core CVE-2026-41409 CRITICAL 2.0.16 2.0.28, 2.1.11, 2.2.6 https://access.redhat.com/security/cve/CVE-2026-41409 https://advisory.echohq.com/cve/CVE-2026-41409 https://github.com/advisories/GHSA-76h9-2vwh-w278 https://github.com/advisories/GHSA-f2wh-grmh-r6jm https://github.com/apache/mina https://lists.apache.org/thread/9ddvsq6c4l5bhwq8l14sob4f8qjvx5c9 https://nvd.nist.gov/vuln/detail/CVE-2026-41409 https://www.cve.org/CVERecord?id=CVE-2026-41409
org.apache.mina:mina-core CVE-2026-41635 CRITICAL 2.0.16 2.0.28, 2.1.11, 2.2.6 http://www.openwall.com/lists/oss-security/2026/04/27/4 https://access.redhat.com/security/cve/CVE-2026-41635 https://advisory.echohq.com/cve/CVE-2026-41635 https://github.com/advisories/GHSA-8297-v2rf-2p32 https://github.com/apache/mina https://lists.apache.org/thread/1l91w1mqsb3lwfd504fs045ylxntt2tm https://nvd.nist.gov/vuln/detail/CVE-2026-41635 https://www.cve.org/CVERecord?id=CVE-2026-41635
org.apache.mina:mina-core CVE-2026-47065 CRITICAL 2.0.16 2.2.8, 2.1.13, 2.0.29 https://access.redhat.com/security/cve/CVE-2026-47065 https://advisory.echohq.com/cve/CVE-2026-47065 https://github.com/advisories/GHSA-v3pr-hxpr-mfm8 https://github.com/apache/mina https://lists.apache.org/thread/y7xj1bl8qo47p9bktb11hg5v6k1d4dyj https://nvd.nist.gov/vuln/detail/CVE-2026-47065 https://www.cve.org/CVERecord?id=CVE-2026-47065
org.apache.mina:mina-core CVE-2019-0231 HIGH 2.0.16 2.0.21, 2.1.1 http://mina.apache.org/mina-project/index.html#mina-211-mina-2021-released-posted-on-april-14-2019 https://access.redhat.com/security/cve/CVE-2019-0231 https://nvd.nist.gov/vuln/detail/CVE-2019-0231 https://www.cve.org/CVERecord?id=CVE-2019-0231 https://www.openwall.com/lists/oss-security/2019/04/14/1
org.apache.mina:mina-core CVE-2021-41973 MEDIUM 2.0.16 2.1.5, 2.0.22 http://www.openwall.com/lists/oss-security/2021/11/01/2 http://www.openwall.com/lists/oss-security/2021/11/01/8 https://access.redhat.com/security/cve/CVE-2021-41973 https://lists.apache.org/thread.html/r0b907da9340d5ff4e6c1a4798ef4e79700a668657f27cca8a39e9250@%3Cdev.mina.apache.org%3E https://nvd.nist.gov/vuln/detail/CVE-2021-41973 https://www.cve.org/CVERecord?id=CVE-2021-41973 https://www.oracle.com/security-alerts/cpuapr2022.html
org.apache.pdfbox:pdfbox CVE-2021-27807 MEDIUM 2.0.17 2.0.23 http://www.openwall.com/lists/oss-security/2021/03/19/9 https://access.redhat.com/security/cve/CVE-2021-27807 https://github.com/apache/pdfbox https://github.com/apache/pdfbox/commit/5c5a837140fbb4ef78bb5ef9f29ad537c872c83e https://issues.apache.org/jira/browse/PDFBOX-4892 https://lists.apache.org/thread.html/r043edc5dcf9199f7f882ed7906b41cb816753766e88b8792dbf319a9@%3Cannounce.apache.org%3E https://lists.apache.org/thread.html/r1218e60c32829f76943ecaca79237120c2ec1ab266459d711a578b50@%3Cdev.pdfbox.apache.org%3E https://lists.apache.org/thread.html/r1d268642f8b52456ee8f876b888b8ed7a9e9568c7770789f3ded7f9e@%3Ccommits.ofbiz.apache.org%3E https://lists.apache.org/thread.html/r4717f902f8bc36d47b3fa978552a25e4ed3ddc2fffb52b94fbc4ab36@%3Cusers.pdfbox.apache.org%3E https://lists.apache.org/thread.html/r4cbc3f6981cd0a1a482531df9d44e4c42a7f63342a7ba78b7bff8a1b@%3Cnotifications.james.apache.org%3E https://lists.apache.org/thread.html/r54594251369e14c185da9662a5340a52afbbdf75d61c9c3a69c8f2e8@%3Cdev.pdfbox.apache.org%3E https://lists.apache.org/thread.html/r5c8e2125d18af184c80f7a986fbe47eaf0d30457cd450133adc235ac@%3Ccommits.ofbiz.apache.org%3E https://lists.apache.org/thread.html/r6e067a6d83ccb6892d0ff867bd216704f21fb0b6a854dea34be04f12@%3Cnotifications.ofbiz.apache.org%3E https://lists.apache.org/thread.html/r7ee634c21816c69ce829d0c41f35afa2a53a99bdd3c7cce8644fdc0e@%3Cnotifications.ofbiz.apache.org%3E https://lists.apache.org/thread.html/r818058ff1e4b9f6bef4e5a2e74faff38cb3d3885c1e2db398bc55cfb@%3Cusers.pdfbox.apache.org%3E https://lists.apache.org/thread.html/r9ffe179385637b0b5cbdabd0246118005b4b8232909d2d14cd68ccd3@%3Ccommits.ofbiz.apache.org%3E https://lists.apache.org/thread.html/raa35746227f3f8d50fff1db9899524423a718f6f35cd39bd4769fa6c@%3Cnotifications.ofbiz.apache.org%3E https://lists.apache.org/thread.html/rc69140d894c6a9c67a8097a25656cce59b46a5620c354ceba10543c3@%3Cnotifications.ofbiz.apache.org%3E https://lists.apache.org/thread.html/re1e35881482e07dc2be6058d9b44483457f36133cac67956686ad9b9@%3Cnotifications.ofbiz.apache.org%3E https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2AVLKAHFMPH72TTP25INPZPGX5FODK3H https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2AVLKAHFMPH72TTP25INPZPGX5FODK3H/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6KDA2U4KL2N3XT3PM4ZJEBBA6JJIH2G4 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6KDA2U4KL2N3XT3PM4ZJEBBA6JJIH2G4/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PT72QOFDXLJ7PLTN66EMG5EHPTE7TFZ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PT72QOFDXLJ7PLTN66EMG5EHPTE7TFZ/ https://nvd.nist.gov/vuln/detail/CVE-2021-27807 https://svn.apache.org/viewvc?view=revision&revision=1886911 https://www.cve.org/CVERecord?id=CVE-2021-27807 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
org.apache.pdfbox:pdfbox CVE-2021-27906 MEDIUM 2.0.17 2.0.23 http://www.openwall.com/lists/oss-security/2021/03/19/10 https://access.redhat.com/security/cve/CVE-2021-27906 https://github.com/apache/pdfbox https://github.com/apache/pdfbox/commit/8c47be1011c11dc47300faecffd8ab32fba3646f https://issues.apache.org/jira/browse/PDFBOX-5112 https://lists.apache.org/thread.html/r1218e60c32829f76943ecaca79237120c2ec1ab266459d711a578b50@%3Cdev.pdfbox.apache.org%3E https://lists.apache.org/thread.html/r1d268642f8b52456ee8f876b888b8ed7a9e9568c7770789f3ded7f9e@%3Ccommits.ofbiz.apache.org%3E https://lists.apache.org/thread.html/r4cbc3f6981cd0a1a482531df9d44e4c42a7f63342a7ba78b7bff8a1b@%3Cnotifications.james.apache.org%3E https://lists.apache.org/thread.html/r54594251369e14c185da9662a5340a52afbbdf75d61c9c3a69c8f2e8@%3Cdev.pdfbox.apache.org%3E https://lists.apache.org/thread.html/r5c8e2125d18af184c80f7a986fbe47eaf0d30457cd450133adc235ac@%3Ccommits.ofbiz.apache.org%3E https://lists.apache.org/thread.html/r64982b768c8a2220b07aaf813bd099a9863de0d13eb212fd4efe208f@%3Cusers.pdfbox.apache.org%3E https://lists.apache.org/thread.html/r6e067a6d83ccb6892d0ff867bd216704f21fb0b6a854dea34be04f12@%3Cnotifications.ofbiz.apache.org%3E https://lists.apache.org/thread.html/r7ee634c21816c69ce829d0c41f35afa2a53a99bdd3c7cce8644fdc0e@%3Cnotifications.ofbiz.apache.org%3E https://lists.apache.org/thread.html/r9ffe179385637b0b5cbdabd0246118005b4b8232909d2d14cd68ccd3@%3Ccommits.ofbiz.apache.org%3E https://lists.apache.org/thread.html/raa35746227f3f8d50fff1db9899524423a718f6f35cd39bd4769fa6c@%3Cnotifications.ofbiz.apache.org%3E https://lists.apache.org/thread.html/rc69140d894c6a9c67a8097a25656cce59b46a5620c354ceba10543c3@%3Cnotifications.ofbiz.apache.org%3E https://lists.apache.org/thread.html/rdf78aef4793362e778e21e34328b0456e302bde4b7e74f229df0ee04@%3Cannounce.apache.org%3E https://lists.apache.org/thread.html/re1e35881482e07dc2be6058d9b44483457f36133cac67956686ad9b9@%3Cnotifications.ofbiz.apache.org%3E https://lists.apache.org/thread.html/rf35026148ccc0e1af133501c0d003d052883fcc65107b3ff5d3b61cd@%3Cusers.pdfbox.apache.org%3E https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2AVLKAHFMPH72TTP25INPZPGX5FODK3H https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2AVLKAHFMPH72TTP25INPZPGX5FODK3H/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6KDA2U4KL2N3XT3PM4ZJEBBA6JJIH2G4 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6KDA2U4KL2N3XT3PM4ZJEBBA6JJIH2G4/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PT72QOFDXLJ7PLTN66EMG5EHPTE7TFZ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PT72QOFDXLJ7PLTN66EMG5EHPTE7TFZ/ https://nvd.nist.gov/vuln/detail/CVE-2021-27906 https://www.cve.org/CVERecord?id=CVE-2021-27906 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
org.apache.pdfbox:pdfbox CVE-2021-31811 MEDIUM 2.0.17 2.0.24 http://www.openwall.com/lists/oss-security/2021/06/12/2 https://access.redhat.com/security/cve/CVE-2021-31811 https://lists.apache.org/thread.html/r132e9dbbe0ebdc08b39583d8be0a575fdba573d60a42d940228bceff@%3Cnotifications.ofbiz.apache.org%3E https://lists.apache.org/thread.html/r143fd8445e0e778f4a85187bd79438630b96b8040e9401751fdb8aea@%3Ccommits.ofbiz.apache.org%3E https://lists.apache.org/thread.html/r179cc3b6822c167702ab35fe36093d5da4c99af44238c8a754c6860f@%3Ccommits.ofbiz.apache.org%3E https://lists.apache.org/thread.html/r2090789e4dcc2c87aacbd87d5f18e2d64dcb9f6eb7c47f5cf7d293cb@%3Cnotifications.ofbiz.apache.org%3E https://lists.apache.org/thread.html/rd4b6db6c3b8ab3c70f1c3bbd725a40920896453ffc2744ade6afd9fb@%3Cnotifications.ofbiz.apache.org%3E https://lists.apache.org/thread.html/re0cacd3fb337cdf8469853913ed2b4ddd8f8bfc52ff0ddbe61c1dfba@%3Ccommits.ofbiz.apache.org%3E https://lists.apache.org/thread.html/re3bd16f0cc8f1fbda46b06a4b8241cd417f71402809baa81548fc20e@%3Cusers.pdfbox.apache.org%3E https://lists.apache.org/thread.html/rf937c2236e6c79cdb99f76a70690dd345e53dbe0707cb506a202e43e@%3Cannounce.apache.org%3E https://lists.apache.org/thread.html/rfe26bcaba564deb505c32711ba68df7ec589797dcd96ff3389a8aaba@%3Cnotifications.ofbiz.apache.org%3E https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7HHWJRFXZ3PTKLJCOM7WJEYZFKFWMNSV https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7HHWJRFXZ3PTKLJCOM7WJEYZFKFWMNSV/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MDJKJQOMVFDFIDS27OQJXNOYHV2O273D https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MDJKJQOMVFDFIDS27OQJXNOYHV2O273D/ https://nvd.nist.gov/vuln/detail/CVE-2021-31811 https://www.cve.org/CVERecord?id=CVE-2021-31811 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
org.apache.pdfbox:pdfbox CVE-2021-31812 MEDIUM 2.0.17 2.0.24 http://www.openwall.com/lists/oss-security/2021/06/12/1 https://access.redhat.com/security/cve/CVE-2021-31812 https://lists.apache.org/thread.html/r132e9dbbe0ebdc08b39583d8be0a575fdba573d60a42d940228bceff@%3Cnotifications.ofbiz.apache.org%3E https://lists.apache.org/thread.html/r143fd8445e0e778f4a85187bd79438630b96b8040e9401751fdb8aea@%3Ccommits.ofbiz.apache.org%3E https://lists.apache.org/thread.html/r179cc3b6822c167702ab35fe36093d5da4c99af44238c8a754c6860f@%3Ccommits.ofbiz.apache.org%3E https://lists.apache.org/thread.html/r2090789e4dcc2c87aacbd87d5f18e2d64dcb9f6eb7c47f5cf7d293cb@%3Cnotifications.ofbiz.apache.org%3E https://lists.apache.org/thread.html/ra2ab0ce69ce8aaff0773b8c1036438387ce004c2afc6f066626e205e@%3Cusers.pdfbox.apache.org%3E https://lists.apache.org/thread.html/rd4b6db6c3b8ab3c70f1c3bbd725a40920896453ffc2744ade6afd9fb@%3Cnotifications.ofbiz.apache.org%3E https://lists.apache.org/thread.html/re0cacd3fb337cdf8469853913ed2b4ddd8f8bfc52ff0ddbe61c1dfba@%3Ccommits.ofbiz.apache.org%3E https://lists.apache.org/thread.html/rf251f6c358087107f8c23473468b279d59d50a75db6b4768165c78d3@%3Cannounce.apache.org%3E https://lists.apache.org/thread.html/rfe26bcaba564deb505c32711ba68df7ec589797dcd96ff3389a8aaba@%3Cnotifications.ofbiz.apache.org%3E https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7HHWJRFXZ3PTKLJCOM7WJEYZFKFWMNSV https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7HHWJRFXZ3PTKLJCOM7WJEYZFKFWMNSV/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MDJKJQOMVFDFIDS27OQJXNOYHV2O273D https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MDJKJQOMVFDFIDS27OQJXNOYHV2O273D/ https://nvd.nist.gov/vuln/detail/CVE-2021-31812 https://www.cve.org/CVERecord?id=CVE-2021-31812 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
org.apache.poi:poi CVE-2019-12415 MEDIUM 4.1.0 4.1.1 https://access.redhat.com/security/cve/CVE-2019-12415 https://github.com/apache/poi https://lists.apache.org/thread.html/13a54b6a03369cfb418a699180ffb83bd727320b6ddfec198b9b728e@%3Cannounce.apache.org%3E https://lists.apache.org/thread.html/2ac0327748de0c2b3c1c012481b79936797c711724e0b7da83cf564c@%3Cuser.tika.apache.org%3E https://lists.apache.org/thread.html/895164e03a3c327449069e2fd6ced0367561878b3ae6a8ec740c2007@%3Cuser.tika.apache.org%3E https://lists.apache.org/thread.html/d88b8823867033514d7ec05d66f88c70dc207604d3dcbd44fd88464c@%3Cuser.tika.apache.org%3E https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E https://nvd.nist.gov/vuln/detail/CVE-2019-12415 https://www.cve.org/CVERecord?id=CVE-2019-12415 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpuapr2020.html https://www.oracle.com/security-alerts/cpujan2020.html https://www.oracle.com/security-alerts/cpujan2021.html https://www.oracle.com/security-alerts/cpujul2020.html https://www.oracle.com/security-alerts/cpuoct2020.html https://www.oracle.com/security-alerts/cpuoct2021.html
org.apache.poi:poi-ooxml CVE-2025-31672 MEDIUM 4.1.0 5.4.0 http://www.openwall.com/lists/oss-security/2025/04/08/2 https://access.redhat.com/security/cve/CVE-2025-31672 https://advisory.echohq.com/cve/CVE-2025-31672 https://bz.apache.org/bugzilla/show_bug.cgi?id=69620 https://github.com/advisories/GHSA-gmg8-593g-7mv3 https://github.com/apache/poi https://lists.apache.org/thread/k14w8vcjqy4h34hh5kzldko78kpylkq5 https://nvd.nist.gov/vuln/detail/CVE-2025-31672 https://security.netapp.com/advisory/ntap-20250523-0004 https://security.netapp.com/advisory/ntap-20250523-0004/ https://www.cve.org/CVERecord?id=CVE-2025-31672
org.apache.tika:tika-core CVE-2025-66516 CRITICAL 1.22 3.2.2 https://access.redhat.com/security/cve/CVE-2025-66516 https://cve.org/CVERecord?id=CVE-2025-54988 https://github.com/apache/tika https://lists.apache.org/thread/s5x3k93nhbkqzztp1olxotoyjpdlps9k https://nvd.nist.gov/vuln/detail/CVE-2025-66516 https://ubuntu.com/security/notices/USN-8324-1 https://www.cve.org/CVERecord?id=CVE-2025-66516
org.apache.tika:tika-core CVE-2022-30126 MEDIUM 1.22 1.28.2, 2.4.0 http://www.openwall.com/lists/oss-security/2022/05/16/3 http://www.openwall.com/lists/oss-security/2022/05/31/2 http://www.openwall.com/lists/oss-security/2022/06/27/5 https://access.redhat.com/security/cve/CVE-2022-30126 https://github.com/advisories/GHSA-qw3f-w4pf-jh5f https://github.com/apache/tika https://github.com/apache/tika/commit/83b0de4d60161ebd4bc224141a959ac8c18d95f4 https://github.com/apache/tika/commit/a36711610fa1f6f5ba0f594803415af795e0b265 https://github.com/apache/tika/commit/e76302196ebcafb7b51fce37fbe8256e6c0fbc51 https://lists.apache.org/thread/dh3syg68nxogbmlg13srd6gjn3h2z6r4 https://nvd.nist.gov/vuln/detail/CVE-2022-30126 https://security.netapp.com/advisory/ntap-20220624-0004 https://security.netapp.com/advisory/ntap-20220624-0004/ https://ubuntu.com/security/notices/USN-7529-1 https://www.cve.org/CVERecord?id=CVE-2022-30126 https://www.openwall.com/lists/oss-security/2022/05/16/3 https://www.oracle.com/security-alerts/cpujul2022.html
org.apache.tika:tika-core CVE-2022-30973 MEDIUM 1.22 1.28.3 http://www.openwall.com/lists/oss-security/2022/05/31/2 http://www.openwall.com/lists/oss-security/2022/06/27/5 https://access.redhat.com/security/cve/CVE-2022-30973 https://github.com/advisories/GHSA-rpjm-422r-95mh https://github.com/apache/tika https://github.com/apache/tika/commit/a36711610fa1f6f5ba0f594803415af795e0b265 https://github.com/apache/tika/commit/e76302196ebcafb7b51fce37fbe8256e6c0fbc51 https://lists.apache.org/thread/gqvb5t4p7tmdpl0y5bdbf72pgxj04h7p https://nvd.nist.gov/vuln/detail/CVE-2022-30973 https://security.netapp.com/advisory/ntap-20220722-0004 https://security.netapp.com/advisory/ntap-20220722-0004/ https://ubuntu.com/security/notices/USN-7529-1 https://www.cve.org/CVERecord?id=CVE-2022-30973
org.apache.velocity:velocity CVE-2020-13936 HIGH 1.7 http://www.openwall.com/lists/oss-security/2021/03/10/1 https://access.redhat.com/security/cve/CVE-2020-13936 https://github.com/apache/velocity-engine https://lists.apache.org/thread.html/r01043f584cbd47959fabe18fff64de940f81a65024bb8dddbda31d9a@%3Cuser.velocity.apache.org%3E https://lists.apache.org/thread.html/r0bc98e9cd080b4a13b905c571b9bed87e1a0878d44dbf21487c6cca4@%3Cdev.santuario.apache.org%3E https://lists.apache.org/thread.html/r17cb932fab14801b14e5b97a7f05192f4f366ef260c10d4a8dba8ac9@%3Cdev.ws.apache.org%3E https://lists.apache.org/thread.html/r293284c6806c73f51098001ea86a14271c39f72cd76af9e946d9d9ad@%3Cdev.ws.apache.org%3E https://lists.apache.org/thread.html/r39de20c7e9c808b1f96790875d33e58c9c0aabb44fd9227e7b3dc5da@%3Cdev.ws.apache.org%3E https://lists.apache.org/thread.html/r3ea4c4c908505b20a4c268330dfe7188b90c84dcf777728d02068ae6@%3Cannounce.apache.org%3E https://lists.apache.org/thread.html/r4cd59453b65d4ac290fcb3b71fdf32b4f1f8989025e89558deb5a245@%3Cdev.ws.apache.org%3E https://lists.apache.org/thread.html/r52a5129df402352adc34d052bab9234c8ef63596306506a89fdc7328@%3Cusers.activemq.apache.org%3E https://lists.apache.org/thread.html/r7f209b837217d2a0fe5977fb692e7f15d37fa5de8214bcdc4c21d9a7@%3Ccommits.turbine.apache.org%3E https://lists.apache.org/thread.html/r9dc2505651788ac668299774d9e7af4dc616be2f56fdc684d1170882@%3Cusers.activemq.apache.org%3E https://lists.apache.org/thread.html/rb042f3b0090e419cc9f5a3d32cf0baff283ccd6fcb1caea61915d6b6@%3Ccommits.velocity.apache.org%3E https://lists.apache.org/thread.html/rbee7270556f4172322936b5ecc9fabf0c09f00d4fa56c9de1963c340@%3Cdev.ws.apache.org%3E https://lists.apache.org/thread.html/rd2a89e17e8a9b451ce655f1a34117752ea1d18a22ce580d8baa824fd@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/rd7e865c87f9043c21d9c1fd9d4df866061d9a08cfc322771160d8058@%3Cdev.ws.apache.org%3E https://lists.apache.org/thread.html/re641197d204765130618086238c73dd2ce5a3f94b33785b587d72726@%3Cdev.ws.apache.org%3E https://lists.apache.org/thread.html/re8e7482fe54d289fc0229e61cc64947b63b12c3c312e9f25bf6f3b8c@%3Cdev.ws.apache.org%3E https://lists.apache.org/thread.html/reab5978b54a9f4c078402161e30a89c42807b198814acadbe6c862c7@%3Cdev.ws.apache.org%3E https://lists.apache.org/thread.html/rf7d369de88dc88a1347006a3323b3746d849234db40a8edfd5ebc436@%3Cdev.ws.apache.org%3E https://lists.debian.org/debian-lts-announce/2021/03/msg00019.html https://nvd.nist.gov/vuln/detail/CVE-2020-13936 https://security.gentoo.org/glsa/202107-52 https://ubuntu.com/security/notices/USN-6281-1 https://www.cve.org/CVERecord?id=CVE-2020-13936 https://www.openwall.com/lists/oss-security/2021/03/10/1 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html
org.assertj:assertj-core CVE-2026-24400 HIGH 3.8.0 3.27.7 https://access.redhat.com/errata/RHSA-2026:60215 https://access.redhat.com/security/cve/CVE-2026-24400 https://bugzilla.redhat.com/2433116 https://bugzilla.redhat.com/show_bug.cgi?id=2433116 https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24400 https://errata.almalinux.org/9/ALSA-2026-60215.html https://errata.rockylinux.org/RLSA-2026:60215 https://github.com/assertj/assertj https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a https://github.com/assertj/assertj/releases/tag/assertj-build-3.27.7 https://github.com/assertj/assertj/security/advisories/GHSA-rqfh-9r24-8c9r https://linux.oracle.com/cve/CVE-2026-24400.html https://linux.oracle.com/errata/ELSA-2026-60215-0.html https://nvd.nist.gov/vuln/detail/CVE-2026-24400 https://www.cve.org/CVERecord?id=CVE-2026-24400
org.codehaus.groovy:groovy-all CVE-2020-17521 MEDIUM 2.4.8 2.4.21, 2.5.14, 3.0.7 https://access.redhat.com/security/cve/CVE-2020-17521 https://github.com/apache/groovy https://github.com/apache/groovy/commit/bcbe5c4c76db83736166530647c024ac1e47ef28 https://github.com/apache/groovy/pull/1425 https://groovy-lang.org/security.html#CVE-2020-17521 https://lists.apache.org/thread.html/r4b2f13c302eec98838ff7475253091fb9b75bc1038016ba00ebf6c08@%3Cdev.atlas.apache.org%3E https://lists.apache.org/thread.html/ra9dab34bf8625511f23692ad0fcee2725f782e9aad6c5cdff6cf4465@%3Cnotifications.groovy.apache.org%3E https://lists.apache.org/thread.html/rea63a4666ba245d2892471307772a2d8ce0f0741f341d6576625c1b3@%3Cdev.atlas.apache.org%3E https://nvd.nist.gov/vuln/detail/CVE-2020-17521 https://security.netapp.com/advisory/ntap-20201218-0006 https://security.netapp.com/advisory/ntap-20201218-0006/ https://www.cve.org/CVERecord?id=CVE-2020-17521 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2021.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
org.codehaus.plexus:plexus-utils CVE-2025-67030 HIGH 3.1.0 4.0.3, 3.6.1 https://access.redhat.com/errata/RHSA-2026:17668 https://access.redhat.com/errata/RHSA-2026:18054 https://access.redhat.com/errata/RHSA-2026:18055 https://access.redhat.com/errata/RHSA-2026:18059 https://access.redhat.com/errata/RHSA-2026:35990 https://access.redhat.com/errata/RHSA-2026:35991 https://access.redhat.com/errata/RHSA-2026:35992 https://access.redhat.com/errata/RHSA-2026:35996 https://access.redhat.com/errata/RHSA-2026:35997 https://access.redhat.com/errata/RHSA-2026:36012 https://access.redhat.com/errata/RHSA-2026:38500 https://access.redhat.com/errata/RHSA-2026:38514 https://access.redhat.com/errata/RHSA-2026:38796 https://access.redhat.com/errata/RHSA-2026:40841 https://access.redhat.com/errata/RHSA-2026:41948 https://access.redhat.com/errata/RHSA-2026:60239 https://access.redhat.com/errata/RHSA-2026:60246 https://access.redhat.com/errata/RHSA-2026:60247 https://access.redhat.com/errata/RHSA-2026:60248 https://access.redhat.com/errata/RHSA-2026:60249 https://access.redhat.com/errata/RHSA-2026:60250 https://access.redhat.com/errata/RHSA-2026:60251 https://access.redhat.com/errata/RHSA-2026:60252 https://access.redhat.com/errata/RHSA-2026:60254 https://access.redhat.com/errata/RHSA-2026:60256 https://access.redhat.com/errata/RHSA-2026:60259 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:7109 https://access.redhat.com/errata/RHSA-2026:7380 https://access.redhat.com/security/cve/CVE-2025-67030 https://advisory.echohq.com/cve/CVE-2025-67030 https://bugzilla.redhat.com/2451409 https://bugzilla.redhat.com/show_bug.cgi?id=2451409 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67030 https://errata.almalinux.org/9/ALSA-2026-38796.html https://errata.rockylinux.org/RLSA-2026:38796 https://gist.github.com/weaver4VD/3216dac645220f8c9b488362f61241ec https://github.com/advisories/GHSA-6fmv-xxpf-w3cw https://github.com/codehaus-plexus/plexus-utils https://github.com/codehaus-plexus/plexus-utils/commit/6d780b3378829318ba5c2d29547e0012d5b29642 https://github.com/codehaus-plexus/plexus-utils/issues/294 https://github.com/codehaus-plexus/plexus-utils/pull/295 https://github.com/codehaus-plexus/plexus-utils/pull/296 https://github.com/codehaus-plexus/plexus-utils/releases/tag/plexus-utils-4.0.3 https://linux.oracle.com/cve/CVE-2025-67030.html https://linux.oracle.com/errata/ELSA-2026-41948.html https://nvd.nist.gov/vuln/detail/CVE-2025-67030 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-67030.json https://www.cve.org/CVERecord?id=CVE-2025-67030
org.elasticsearch:elasticsearch CVE-2023-31418 HIGH 6.6.1 7.17.13, 8.9.0 https://access.redhat.com/security/cve/CVE-2023-31418 https://discuss.elastic.co/t/elasticsearch-8-9-0-7-17-13-security-update/343616 https://nvd.nist.gov/vuln/detail/CVE-2023-31418 https://security.netapp.com/advisory/ntap-20231130-0005 https://security.netapp.com/advisory/ntap-20231130-0005/ https://www.cve.org/CVERecord?id=CVE-2023-31418 https://www.elastic.co/community/security
org.elasticsearch:elasticsearch CVE-2019-7614 MEDIUM 6.6.1 6.8.2, 7.2.1 https://access.redhat.com/security/cve/CVE-2019-7614 https://github.com/elastic/elasticsearch https://nvd.nist.gov/vuln/detail/CVE-2019-7614 https://www.cve.org/CVERecord?id=CVE-2019-7614 https://www.elastic.co/community/security https://www.elastic.co/community/security/
org.elasticsearch:elasticsearch CVE-2020-7019 MEDIUM 6.6.1 7.9.0, 6.8.12 https://access.redhat.com/security/cve/CVE-2020-7019 https://discuss.elastic.co/t/elastic-stack-7-9-0-and-6-8-12-security-update/245456 https://github.com/elastic/elasticsearch https://nvd.nist.gov/vuln/detail/CVE-2020-7019 https://security.netapp.com/advisory/ntap-20200827-0001 https://security.netapp.com/advisory/ntap-20200827-0001/ https://www.cve.org/CVERecord?id=CVE-2020-7019 https://www.elastic.co/community/security/
org.elasticsearch:elasticsearch CVE-2020-7021 MEDIUM 6.6.1 6.8.14, 7.10.0 https://access.redhat.com/security/cve/CVE-2020-7021 https://discuss.elastic.co/t/elastic-stack-7-11-0-and-6-8-14-security-update/263915 https://github.com/elastic/elasticsearch https://nvd.nist.gov/vuln/detail/CVE-2020-7021 https://security.netapp.com/advisory/ntap-20210319-0003 https://security.netapp.com/advisory/ntap-20210319-0003/ https://www.cve.org/CVERecord?id=CVE-2020-7021
org.elasticsearch:elasticsearch CVE-2021-22135 MEDIUM 6.6.1 7.11.2, 6.8.15 https://access.redhat.com/security/cve/CVE-2021-22135 https://discuss.elastic.co/t/elastic-stack-7-12-0-and-6-8-15-security-update/268125 https://nvd.nist.gov/vuln/detail/CVE-2021-22135 https://security.netapp.com/advisory/ntap-20210625-0003 https://security.netapp.com/advisory/ntap-20210625-0003/ https://www.cve.org/CVERecord?id=CVE-2021-22135
org.elasticsearch:elasticsearch CVE-2021-22137 MEDIUM 6.6.1 7.11.2, 6.8.15 https://access.redhat.com/security/cve/CVE-2021-22137 https://discuss.elastic.co/t/elastic-stack-7-12-0-and-6-8-15-security-update/268125 https://github.com/elastic/elasticsearch https://nvd.nist.gov/vuln/detail/CVE-2021-22137 https://security.netapp.com/advisory/ntap-20210625-0003 https://security.netapp.com/advisory/ntap-20210625-0003/ https://www.cve.org/CVERecord?id=CVE-2021-22137
org.elasticsearch:elasticsearch CVE-2021-22144 MEDIUM 6.6.1 6.8.17, 7.13.3 https://access.redhat.com/security/cve/CVE-2021-22144 https://discuss.elastic.co/t/elasticsearch-7-13-3-and-6-8-17-security-update/278100 https://nvd.nist.gov/vuln/detail/CVE-2021-22144 https://security.netapp.com/advisory/ntap-20210827-0006 https://security.netapp.com/advisory/ntap-20210827-0006/ https://www.cve.org/CVERecord?id=CVE-2021-22144 https://www.oracle.com/security-alerts/cpuapr2022.html
org.elasticsearch:elasticsearch CVE-2023-49921 MEDIUM 6.6.1 7.17.16, 8.11.2 https://access.redhat.com/security/cve/CVE-2023-49921 https://discuss.elastic.co/t/elasticsearch-8-11-2-7-17-16-security-update-esa-2023-29/349179 https://github.com/elastic/elasticsearch https://nvd.nist.gov/vuln/detail/CVE-2023-49921 https://www.cve.org/CVERecord?id=CVE-2023-49921
org.elasticsearch:elasticsearch CVE-2024-23444 MEDIUM 6.6.1 8.13.0, 7.17.23 https://discuss.elastic.co/t/elasticsearch-8-13-0-7-17-23-security-update-esa-2024-12/364157 https://github.com/elastic/elasticsearch https://github.com/elastic/elasticsearch/commit/07296d596a1dee24730e33ad40b6726f70c6fc23 https://github.com/elastic/elasticsearch/commit/321c4e1e6b738bf80faa41dbb9881489a4ab44e5 https://github.com/elastic/elasticsearch/commit/bb1eddada3678257838b0590090ff9eb68acaa1b https://github.com/elastic/elasticsearch/pull/106105 https://github.com/elastic/elasticsearch/pull/109834 https://nvd.nist.gov/vuln/detail/CVE-2024-23444 https://security.netapp.com/advisory/ntap-20250404-0001 https://security.netapp.com/advisory/ntap-20250404-0001/
org.elasticsearch:elasticsearch CVE-2024-43709 MEDIUM 6.6.1 7.17.21, 8.13.3 https://access.redhat.com/security/cve/CVE-2024-43709 https://discuss.elastic.co/t/elasticsearch-7-17-21-and-8-13-3-security-update-esa-2024-25/373442 https://github.com/elastic/elasticsearch https://nvd.nist.gov/vuln/detail/CVE-2024-43709 https://security.netapp.com/advisory/ntap-20250221-0007 https://security.netapp.com/advisory/ntap-20250221-0007/ https://www.cve.org/CVERecord?id=CVE-2024-43709
org.elasticsearch:elasticsearch CVE-2024-52979 MEDIUM 6.6.1 7.17.25, 8.16.0 https://access.redhat.com/security/cve/CVE-2024-52979 https://discuss.elastic.co/t/elasticsearch-7-17-25-and-8-16-0-security-update-esa-2024-40/377709 https://github.com/elastic/elasticsearch https://github.com/elastic/elasticsearch/commit/cbde7f456d7ccd98556302fccf3238bb4557fc91 https://github.com/elastic/elasticsearch/commit/f9b6b57d1d0f76e2d14291c04fb50abeb642cfbf https://github.com/elastic/elasticsearch/pull/114002 https://nvd.nist.gov/vuln/detail/CVE-2024-52979 https://www.cve.org/CVERecord?id=CVE-2024-52979
org.elasticsearch:elasticsearch CVE-2020-7020 LOW 6.6.1 6.8.13, 7.9.2 https://access.redhat.com/security/cve/CVE-2020-7020 https://discuss.elastic.co/t/elastic-stack-7-9-3-and-6-8-13-security-update/253033 https://github.com/elastic/elasticsearch https://nvd.nist.gov/vuln/detail/CVE-2020-7020 https://security.netapp.com/advisory/ntap-20201123-0001 https://security.netapp.com/advisory/ntap-20201123-0001/ https://staging-website.elastic.co/community/security https://staging-website.elastic.co/community/security/ https://www.cve.org/CVERecord?id=CVE-2020-7020 https://www.elastic.co/community/security/
org.liquibase:liquibase-core CVE-2022-0839 CRITICAL 3.6.3 4.8.0 http://seclists.org/fulldisclosure/2025/Apr/14 https://access.redhat.com/security/cve/CVE-2022-0839 https://github.com/liquibase/liquibase https://github.com/liquibase/liquibase/commit/33d9d925082097fb1a3d2fc8e44423d964cd9381 https://huntr.dev/bounties/f1ae5779-b406-4594-a8a3-d089c68d6e70 https://nvd.nist.gov/vuln/detail/CVE-2022-0839 https://www.cve.org/CVERecord?id=CVE-2022-0839 https://www.oracle.com/security-alerts/cpujul2022.html
org.omnifaces:omnifaces CVE-2026-102695 HIGH 2.7.1 1.14.3, 2.7.33, 3.14.23, 4.7.12, 5.4.2 https://github.com/omnifaces/omnifaces https://github.com/omnifaces/omnifaces/commit/59d6c5188c39418546fe500d05036645987a77d1 https://github.com/omnifaces/omnifaces/commit/a52b92461cf39d983f51ce8724fe7e6b944073e4 https://github.com/omnifaces/omnifaces/commit/aa42da361821ddfbb85b126564e71587347d2786 https://github.com/omnifaces/omnifaces/commit/c43eef01174a4dc09cec44eff553ff6284150af7 https://github.com/omnifaces/omnifaces/commit/d5cae243c4692555efaa4ba774e0f8f60e3f4db5 https://github.com/omnifaces/omnifaces/releases/tag/1.14.3 https://github.com/omnifaces/omnifaces/releases/tag/2.7.33 https://github.com/omnifaces/omnifaces/releases/tag/3.14.23 https://github.com/omnifaces/omnifaces/releases/tag/4.7.12 https://github.com/omnifaces/omnifaces/releases/tag/5.4.2 https://github.com/omnifaces/omnifaces/security/advisories/GHSA-fp43-vj7g-pg92
org.omnifaces:omnifaces CVE-2026-41883 HIGH 2.7.1 1.14.2, 2.7.32, 3.14.16, 4.7.5, 5.2.3 https://github.com/omnifaces/omnifaces https://github.com/omnifaces/omnifaces/security/advisories/GHSA-vp6r-9m58-5xv8 https://nvd.nist.gov/vuln/detail/CVE-2026-41883
org.primefaces:primefaces CVE-2020-10544 MEDIUM 7.0 8.0 https://github.com/primefaces/primefaces https://github.com/primefaces/primefaces/commit/9982c4f7a83f75e3ab06168fa283e3d6128dfd1f https://github.com/primefaces/primefaces/issues/5642 https://nvd.nist.gov/vuln/detail/CVE-2020-10544
org.springframework:spring-beans CVE-2022-22965 CRITICAL 4.0.9.RELEASE 5.2.20.RELEASE, 5.3.18 http://packetstormsecurity.com/files/166713/Spring4Shell-Code-Execution.html http://packetstormsecurity.com/files/167011/Spring4Shell-Spring-Framework-Class-Property-Remote-Code-Execution.html https://access.redhat.com/security/cve/CVE-2022-22965 https://bugalert.org/content/notices/2022-03-30-spring.html https://cert-portal.siemens.com/productcert/pdf/ssa-254054.pdf https://github.com/spring-projects/spring-boot/releases/tag/v2.5.12 https://github.com/spring-projects/spring-boot/releases/tag/v2.6.6 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/002546b3e4b8d791ea6acccb81eb3168f51abb15 https://github.com/spring-projects/spring-framework/issues/28260 https://github.com/spring-projects/spring-framework/releases/tag/v5.2.20.RELEASE https://github.com/spring-projects/spring-framework/releases/tag/v5.3.18 https://nvd.nist.gov/vuln/detail/CVE-2022-22965 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0005 https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement https://tanzu.vmware.com/security/cve-2022-22965 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67 https://ubuntu.com/security/notices/USN-7165-1 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22965 https://www.cve.org/CVERecord?id=CVE-2022-22965 https://www.cyberkendra.com/2022/03/spring4shell-details-and-exploit-code.html https://www.kb.cert.org/vuls/id/970766 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.praetorian.com/blog/spring-core-jdk9-rce/
org.springframework:spring-beans CVE-2022-22970 HIGH 4.0.9.RELEASE 5.2.22.RELEASE, 5.3.20 https://access.redhat.com/security/cve/CVE-2022-22970 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/50177b1ad3485bd44239b1756f6c14607476fcf2 https://github.com/spring-projects/spring-framework/commit/83186b689f11f5e6efe7ccc08fdeb92f66fcd583 https://nvd.nist.gov/vuln/detail/CVE-2022-22970 https://security.netapp.com/advisory/ntap-20220616-0006 https://security.netapp.com/advisory/ntap-20220616-0006/ https://tanzu.vmware.com/security/cve-2022-22970 https://www.cve.org/CVERecord?id=CVE-2022-22970 https://www.oracle.com/security-alerts/cpujul2022.html
org.springframework:spring-context CVE-2022-22968 HIGH 4.0.9.RELEASE 5.3.19, 5.2.21.RELEASE https://access.redhat.com/security/cve/CVE-2022-22968 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/833e750175349ab4fd502109a8b41af77e25cdea https://github.com/spring-projects/spring-framework/commit/a7cf19cec5ebd270f97a194d749e2d5701ad2ab7 https://nvd.nist.gov/vuln/detail/CVE-2022-22968 https://security.netapp.com/advisory/ntap-20220602-0004 https://security.netapp.com/advisory/ntap-20220602-0004/ https://tanzu.vmware.com/security/cve-2022-22968 https://www.cve.org/CVERecord?id=CVE-2022-22968 https://www.oracle.com/security-alerts/cpujul2022.html
org.springframework:spring-context CVE-2024-38820 MEDIUM 4.0.9.RELEASE 6.1.14 https://advisory.echohq.com/cve/CVE-2024-38820 https://github.com/advisories/GHSA-4gc7-5j7h-4qph https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/23656aebc6c7d0f9faff1080981eb4d55eff296c https://github.com/spring-projects/spring-framework/commits/v6.2.0-RC2 https://nvd.nist.gov/vuln/detail/CVE-2024-38820 https://security.netapp.com/advisory/ntap-20241129-0003 https://security.netapp.com/advisory/ntap-20241129-0003/ https://spring.io/security/cve-2024-38820
org.springframework:spring-context CVE-2025-22233 LOW 4.0.9.RELEASE 6.2.7, 6.1.20 https://advisory.echohq.com/cve/CVE-2025-22233 https://github.com/advisories/GHSA-4wp7-92pw-q264 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/edfcc6ffb188e4614ec9b212e3208b666981851c https://github.com/spring-projects/spring-framework/commit/ee62701f5634e904e42e218baad142cea2bcd332 https://github.com/spring-projects/spring-framework/issues/34801 https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N&version=3.1 https://nvd.nist.gov/vuln/detail/CVE-2025-22233 https://spring.io/security/cve-2025-22233
org.springframework:spring-core CVE-2015-5211 HIGH 4.0.9.RELEASE 4.2.2, 4.1.8, 3.2.15 https://github.com/advisories/GHSA-pgf9-h69p-pcgf https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/03f547 https://github.com/spring-projects/spring-framework/commit/03f547eb9868f48f44d59b56067d4ac4740672c3 https://github.com/spring-projects/spring-framework/commit/2bd1da https://github.com/spring-projects/spring-framework/commit/2bd1daa75ee0b8ec33608ca6ab065ef3e1815543 https://github.com/spring-projects/spring-framework/commit/a95c3d https://github.com/spring-projects/spring-framework/commit/a95c3d820dbc4c3ae752f1b3ee22ee860b162402 https://jira.spring.io/browse/SPR-13548 https://lists.debian.org/debian-lts-announce/2019/07/msg00012.html https://nvd.nist.gov/vuln/detail/CVE-2015-5211 https://pivotal.io/security/cve-2015-5211 https://ubuntu.com/security/notices/USN-4774-1 https://www.cve.org/CVERecord?id=CVE-2015-5211 https://www.trustwave.com/Resources/SpiderLabs-Blog/Reflected-File-Download---A-New-Web-Attack-Vector https://www.trustwave.com/Resources/SpiderLabs-Blog/Reflected-File-Download---A-New-Web-Attack-Vector/
org.springframework:spring-core CVE-2016-5007 HIGH 4.0.9.RELEASE 4.3.1 http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html http://www.securityfocus.com/bid/91687 https://access.redhat.com/security/cve/CVE-2016-5007 https://github.com/advisories/GHSA-8crv-49fr-2h6j https://github.com/spring-projects/spring-framework/commit/a30ab30e4e9ae021fdda04e9abfc228476b846b5 https://github.com/spring-projects/spring-security/commit/e4c13e3c0ee7f06f59d3b43ca6734215ad7d8974 https://github.com/spring-projects/spring-security/issues/3964 https://nvd.nist.gov/vuln/detail/CVE-2016-5007 https://pivotal.io/security/cve-2016-5007 https://www.cve.org/CVERecord?id=CVE-2016-5007 https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
org.springframework:spring-core CVE-2018-1272 HIGH 4.0.9.RELEASE 4.3.15, 5.0.5 http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html http://www.securityfocus.com/bid/103697 https://access.redhat.com/errata/RHSA-2018:1320 https://access.redhat.com/errata/RHSA-2018:2669 https://access.redhat.com/security/cve/CVE-2018-1272 https://github.com/advisories/GHSA-4487-x383-qpph https://github.com/spring-projects/spring-framework/commit/ab2410c754b67902f002bfcc0c3895bd7772d39 https://github.com/spring-projects/spring-framework/commit/e02ff3a0da50744b0980d5d665fd242eedea767 https://nvd.nist.gov/vuln/detail/CVE-2018-1272 https://pivotal.io/security/cve-2018-1272 https://www.cve.org/CVERecord?id=CVE-2018-1272 https://www.oracle.com/security-alerts/cpujul2020.html https://www.oracle.com/security-alerts/cpuoct2021.html https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
org.springframework:spring-core CVE-2018-1257 MEDIUM 4.0.9.RELEASE 5.0.6, 4.3.17 http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html http://www.securityfocus.com/bid/104260 https://access.redhat.com/errata/RHSA-2018:1809 https://access.redhat.com/errata/RHSA-2018:3768 https://access.redhat.com/security/cve/CVE-2018-1257 https://github.com/advisories/GHSA-rcpf-vj53-7h2m https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/246a6db1cad205ca9b6fca00c544ab7443ba202 https://github.com/spring-projects/spring-framework/commit/ff2228fdaf131d57b5c8c5918ee8d07c6dd9bba https://nvd.nist.gov/vuln/detail/CVE-2018-1257 https://pivotal.io/security/cve-2018-1257 https://www.cve.org/CVERecord?id=CVE-2018-1257 https://www.oracle.com/security-alerts/cpujan2020.html https://www.oracle.com/security-alerts/cpujul2020.html https://www.oracle.com/security-alerts/cpuoct2021.html https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
org.springframework:spring-core CVE-2018-1271 MEDIUM 4.0.9.RELEASE 5.0.5, 4.3.15 http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html http://www.securityfocus.com/bid/103699 https://access.redhat.com/errata/RHSA-2018:1320 https://access.redhat.com/errata/RHSA-2018:2669 https://access.redhat.com/errata/RHSA-2018:2939 https://access.redhat.com/security/cve/CVE-2018-1271 https://github.com/advisories/GHSA-g8hw-794c-4j9g https://github.com/spring-projects/spring-framework/commit/0e28bee0f155b9bf240b4bafc4646e4810cb23f8 https://github.com/spring-projects/spring-framework/commit/13356a7ee2240f740737c5c83bdccdacc30603ab https://github.com/spring-projects/spring-framework/commit/695bf2961feffd35b5560ccc982a2189dcca611f https://github.com/spring-projects/spring-framework/commit/91b803a2310344d925e5d4b1709bbcea90375548 https://github.com/spring-projects/spring-framework/commit/98ad23bef8e2e04143f8f5b201380543a8d8c0c3 https://github.com/spring-projects/spring-framework/commit/b9ebdaaf3710db473a2e1fec8641c316483a22aa https://github.com/spring-projects/spring-framework/commit/f046a066eceefa0799d1bc89bd6e1318f39bdf69 https://github.com/spring-projects/spring-framework/commit/f59ea610dfcf55cd0b42f6dd76a9b3dab0218aaa https://nvd.nist.gov/vuln/detail/CVE-2018-1271 https://pivotal.io/security/cve-2018-1271 https://www.cve.org/CVERecord?id=CVE-2018-1271 https://www.oracle.com/security-alerts/cpujul2020.html https://www.oracle.com/security-alerts/cpuoct2021.html https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
org.springframework:spring-core CVE-2026-41848 LOW 4.0.9.RELEASE 7.0.8, 6.2.19 https://access.redhat.com/security/cve/CVE-2026-41848 https://advisory.echohq.com/cve/CVE-2026-41848 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/12b44f2545a1bec6150c7a05e66092c732597a94 https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41848 https://spring.io/security/cve-2026-41848 https://www.cve.org/CVERecord?id=CVE-2026-41848
org.springframework:spring-expression CVE-2023-20863 HIGH 4.0.9.RELEASE 6.0.8, 5.3.27, 5.2.24.RELEASE https://access.redhat.com/security/cve/CVE-2023-20863 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/965a6392757d20f9db19241126fcc719a51eac15 https://github.com/spring-projects/spring-framework/commit/b73f5fcac22555f844cf27a7eeb876cb9d7f7f7e https://github.com/spring-projects/spring-framework/commit/ebc82654282bda547fbc20a9749ab1bda886a46f https://nvd.nist.gov/vuln/detail/CVE-2023-20863 https://security.netapp.com/advisory/ntap-20240524-0015 https://security.netapp.com/advisory/ntap-20240524-0015/ https://spring.io/security/cve-2023-20863 https://www.cve.org/CVERecord?id=CVE-2023-20863
org.springframework:spring-expression CVE-2026-41849 HIGH 4.0.9.RELEASE https://access.redhat.com/security/cve/CVE-2026-41849 https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln/detail/CVE-2026-41849 https://spring.io/security/cve-2026-41849 https://www.cve.org/CVERecord?id=CVE-2026-41849
org.springframework:spring-expression CVE-2026-41850 HIGH 4.0.9.RELEASE 7.0.8, 6.2.19 https://access.redhat.com/security/cve/CVE-2026-41850 https://advisory.echohq.com/cve/CVE-2026-41850 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41850 https://spring.io/security/cve-2026-41850 https://www.cve.org/CVERecord?id=CVE-2026-41850
org.springframework:spring-expression CVE-2022-22950 MEDIUM 4.0.9.RELEASE 5.3.17, 5.2.20.RELEASE https://access.redhat.com/security/cve/CVE-2022-22950 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/83ac65915871067c39a4fb255e0d484c785c0c11 https://github.com/spring-projects/spring-framework/issues/28145 https://github.com/spring-projects/spring-framework/issues/28257 https://github.com/spring-projects/spring-framework/releases/tag/v5.2.20.RELEASE https://github.com/spring-projects/spring-framework/releases/tag/v5.3.17 https://nvd.nist.gov/vuln/detail/CVE-2022-22950 https://tanzu.vmware.com/security/cve-2022-22950 https://www.cve.org/CVERecord?id=CVE-2022-22950
org.springframework:spring-expression CVE-2023-20861 MEDIUM 4.0.9.RELEASE 6.0.7, 5.3.26, 5.2.23.RELEASE https://access.redhat.com/security/cve/CVE-2023-20861 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/430fc25acad2e85cbdddcd52b64481691f03ebd1 https://github.com/spring-projects/spring-framework/commit/52c93b1c4b24d70de233a958e60e7c5822bd274f https://github.com/spring-projects/spring-framework/commit/935c29e3ddba5b19951e54f6685c70ed45d9cbe5 https://nvd.nist.gov/vuln/detail/CVE-2023-20861 https://security.netapp.com/advisory/ntap-20230420-0007 https://security.netapp.com/advisory/ntap-20230420-0007/ https://spring.io/blog/2023/03/20/spring-framework-6-0-7-and-5-3-26-fix-cve-2023-20860-and-cve-2023-20861 https://spring.io/security/cve-2023-20861 https://www.cve.org/CVERecord?id=CVE-2023-20861
org.springframework:spring-expression CVE-2024-38808 MEDIUM 4.0.9.RELEASE 5.3.39 https://access.redhat.com/security/cve/CVE-2024-38808 https://advisory.echohq.com/cve/CVE-2024-38808 https://github.com/advisories/GHSA-9cmq-m9j5-mvww https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/26f2dad388499faecf99e75b8856788e95d8d658 https://github.com/spring-projects/spring-framework/commit/f44d13cb7816e586b86c02421af4f5498391111c https://nvd.nist.gov/vuln/detail/CVE-2024-38808 https://security.netapp.com/advisory/ntap-20240920-0002 https://security.netapp.com/advisory/ntap-20240920-0002/ https://spring.io/security/cve-2024-38808 https://www.cve.org/CVERecord?id=CVE-2024-38808
org.springframework:spring-expression CVE-2026-41851 MEDIUM 4.0.9.RELEASE 7.0.8, 6.2.19 https://access.redhat.com/security/cve/CVE-2026-41851 https://advisory.echohq.com/cve/CVE-2026-41851 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/2c18c33ce0f89bf718c184190cfb7ed49b4276fb https://github.com/spring-projects/spring-framework/commit/76a36dfd707cddbe7118a81c2e055b36501d2cff https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41851 https://spring.io/security/cve-2026-41851 https://www.cve.org/CVERecord?id=CVE-2026-41851
org.springframework:spring-expression CVE-2026-41852 LOW 4.0.9.RELEASE 7.0.8, 6.2.19 https://access.redhat.com/security/cve/CVE-2026-41852 https://advisory.echohq.com/cve/CVE-2026-41852 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41852 https://spring.io/security/cve-2026-41852 https://www.cve.org/CVERecord?id=CVE-2026-41852
No Misconfigurations found