| com.esotericsoftware.yamlbeans:yamlbeans |
CVE-2023-24621 |
HIGH |
1.11 |
|
https://contrastsecurity.com
https://github.com/Contrast-Security-OSS/yamlbeans/blob/main/SECURITY.md
https://github.com/EsotericSoftware
https://github.com/EsotericSoftware/yamlbeans
https://nvd.nist.gov/vuln/detail/CVE-2023-24621
|
| com.esotericsoftware.yamlbeans:yamlbeans |
CVE-2023-24620 |
MEDIUM |
1.11 |
|
https://contrastsecurity.com
https://github.com/Contrast-Security-OSS/yamlbeans/blob/main/SECURITY.md
https://github.com/EsotericSoftware
https://github.com/EsotericSoftware/yamlbeans
https://nvd.nist.gov/vuln/detail/CVE-2023-24620
|
| com.google.code.gson:gson |
CVE-2022-25647 |
HIGH |
2.8.0 |
2.8.9 |
https://access.redhat.com/security/cve/CVE-2022-25647
https://github.com/google/gson
https://github.com/google/gson/pull/1991
https://github.com/google/gson/pull/1991/commits
https://linux.oracle.com/cve/CVE-2022-25647.html
https://linux.oracle.com/errata/ELSA-2022-9656.html
https://lists.debian.org/debian-lts-announce/2022/05/msg00015.html
https://lists.debian.org/debian-lts-announce/2022/09/msg00009.html
https://nvd.nist.gov/vuln/detail/CVE-2022-25647
https://security.netapp.com/advisory/ntap-20220901-0009
https://security.netapp.com/advisory/ntap-20220901-0009/
https://snyk.io/vuln/SNYK-JAVA-COMGOOGLECODEGSON-1730327
https://ubuntu.com/security/notices/USN-6692-1
https://www.cve.org/CVERecord?id=CVE-2022-25647
https://www.debian.org/security/2022/dsa-5227
https://www.oracle.com/security-alerts/cpujul2022.html
|
| com.google.guava:guava |
CVE-2018-10237 |
MEDIUM |
18.0 |
24.1.1-android |
http://www.securitytracker.com/id/1041707
https://access.redhat.com/errata/RHSA-2018:2423
https://access.redhat.com/errata/RHSA-2018:2424
https://access.redhat.com/errata/RHSA-2018:2425
https://access.redhat.com/errata/RHSA-2018:2428
https://access.redhat.com/errata/RHSA-2018:2598
https://access.redhat.com/errata/RHSA-2018:2643
https://access.redhat.com/errata/RHSA-2018:2740
https://access.redhat.com/errata/RHSA-2018:2741
https://access.redhat.com/errata/RHSA-2018:2742
https://access.redhat.com/errata/RHSA-2018:2743
https://access.redhat.com/errata/RHSA-2018:2927
https://access.redhat.com/errata/RHSA-2019:2858
https://access.redhat.com/errata/RHSA-2019:3149
https://access.redhat.com/security/cve/CVE-2018-10237
https://github.com/google/guava
https://github.com/google/guava/wiki/CVE-2018-10237
https://groups.google.com/d/topic/guava-announce/xqWALw4W1vs/discussion
https://groups.google.com/forum/#!topic/guava-announce/xqWALw4W1vs/discussion
https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272@%3Cissues.activemq.apache.org%3E
https://lists.apache.org/thread.html/19fa48533bc7ea1accf6b12746a74ed888ae6e49a5cf81ae4f807495@%3Ccommon-dev.hadoop.apache.org%3E
https://lists.apache.org/thread.html/33c6bccfeb7adf644d4d79894ca8f09370be6ed4b20632c2e228d085@%3Ccommits.cassandra.apache.org%3E
https://lists.apache.org/thread.html/3d5dbdd92ac9ceaef90e40f78599f9109f2f345252e0ac9d98e7e084@%3Cgitbox.activemq.apache.org%3E
https://lists.apache.org/thread.html/3ddd79c801edd99c0978e83dbe2168ebd36fd42acfa5dac38fb03dd6@%3Cissues.activemq.apache.org%3E
https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/cc48fe770c45a74dc3b37ed0817393e0c96701fc49bc431ed922f3cc@%3Chdfs-dev.hadoop.apache.org%3E
https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r02e39d7beb32eebcdbb4b516e95f67d71c90d5d462b26f4078d21eeb@%3Cdev.flink.apache.org%3E
https://lists.apache.org/thread.html/r02e39d7beb32eebcdbb4b516e95f67d71c90d5d462b26f4078d21eeb@%3Cuser.flink.apache.org%3E
https://lists.apache.org/thread.html/r223bc776a077d0795786c38cbc6e7dd808fce1a9161b00ba9c0a5d55@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/r22c8173b804cd4a420c43064ba4e363d0022aa421008b1989f7354d4@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r27eb79a87a760335226dbfa6a7b7bffea539a535f8e80c41e482106d@%3Cdev.cxf.apache.org%3E
https://lists.apache.org/thread.html/r2ea4e5e5aa8ad73b001a466c582899620961f47d77a40af712c1fdf9@%3Cdev.cxf.apache.org%3E
https://lists.apache.org/thread.html/r30e7d7b6bfa630dacc41649a0e96dad75165d50474c1241068aa0f94@%3Cissues.storm.apache.org%3E
https://lists.apache.org/thread.html/r352e40ca9874d1beb4ad95403792adca7eb295e6bc3bd7b65fabcc21@%3Ccommits.samza.apache.org%3E
https://lists.apache.org/thread.html/r38e2ab87528d3c904e7fac496e8fd766b9277656ff95b97d6b6b6dcd@%3Cdev.cxf.apache.org%3E
https://lists.apache.org/thread.html/r3c3b33ee5bef0c67391d27a97cbfd89d44f328cf072b601b58d4e748@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r43491b25b2e5c368c34b106a82eff910a5cea3e90de82ad75cc16540@%3Cdev.syncope.apache.org%3E
https://lists.apache.org/thread.html/r50fc0bcc734dd82e691d36d209258683141bfc0083739a77e56ad92d@%3Cdev.flink.apache.org%3E
https://lists.apache.org/thread.html/r841c5e14e1b55281523ebcde661ece00b38a0569e00ef5e12bd5f6ba@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/r95799427b335807a4c54776908125c3e66597b65845ae50096d9278a@%3Cdev.cxf.apache.org%3E
https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b@%3Cusers.kafka.apache.org%3E
https://lists.apache.org/thread.html/ra4f44016926dcb034b3b230280a18102062f94ae55b8a31bb92fed84@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/ra8906723927aef2a599398c238eacfc845b74d812e0093ec2fc70a7d@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/rb3da574c34bc6bd37972d2266af3093b90d7e437460423c24f477919@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/rc78f6e84f82cc662860e96526d8ab969f34dbe12dc560e22d9d147a3@%3Cdev.cxf.apache.org%3E
https://lists.apache.org/thread.html/rc8467f357b943ceaa86f289f8bc1a5d1c7955b75d3bac1426f2d4ac1@%3Ccommon-dev.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rd01f5ff0164c468ec7abc96ff7646cea3cce6378da2e4aa29c6bcb95@%3Cgithub.arrow.apache.org%3E
https://lists.apache.org/thread.html/rd0c8ec6e044aa2958dd0549ebf8ecead7f5968c9474ba73a504161b2@%3Cdev.cxf.apache.org%3E
https://lists.apache.org/thread.html/rdc56c15693c236e31e1e95f847b8e5e74fc0a05741d47488e7fc8c45@%3Cissues.flink.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2018-10237
https://security.netapp.com/advisory/ntap-20220629-0008
https://security.netapp.com/advisory/ntap-20220629-0008/
https://www.cve.org/CVERecord?id=CVE-2018-10237
https://www.oracle.com/security-alerts/cpuapr2020.html
https://www.oracle.com/security-alerts/cpujan2021.html
https://www.oracle.com/security-alerts/cpujul2020.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| com.google.guava:guava |
CVE-2023-2976 |
MEDIUM |
18.0 |
32.0.0-android |
https://access.redhat.com/security/cve/CVE-2023-2976
https://github.com/google/guava
https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284
https://github.com/google/guava/issues/2575
https://github.com/google/guava/issues/6532
https://github.com/google/guava/releases/tag/v32.0.0
https://nvd.nist.gov/vuln/detail/CVE-2023-2976
https://security.netapp.com/advisory/ntap-20230818-0008
https://security.netapp.com/advisory/ntap-20230818-0008/
https://security.netapp.com/advisory/ntap-20241108-0002
https://security.netapp.com/advisory/ntap-20241108-0002/
https://www.cve.org/CVERecord?id=CVE-2023-2976
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01006.html
|
| com.google.guava:guava |
CVE-2020-8908 |
LOW |
18.0 |
32.0.0-android |
https://access.redhat.com/security/cve/CVE-2020-8908
https://github.com/google/guava
https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284
https://github.com/google/guava/commit/fec0dbc4634006a6162cfd4d0d09c962073ddf40
https://github.com/google/guava/issues/2575
https://github.com/google/guava/issues/4011
https://github.com/google/guava/issues/4011#issuecomment-1573923586
https://github.com/google/guava/issues/4011#issuecomment-1578991974
https://github.com/google/guava/releases/tag/v32.0.0
https://lists.apache.org/thread.html/r007add131977f4f576c232b25e024249a3d16f66aad14a4b52819d21@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r037fed1d0ebde50c9caf8d99815db3093c344c3f651c5a49a09824ce@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r07ed3e4417ad043a27bee7bb33322e9bfc7d7e6d1719b8e3dfd95c14@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r161b87f8037bbaff400194a63cd2016c9a69f5949f06dcc79beeab54@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r215b3d50f56faeb2f9383505f3e62faa9f549bb23e8a9848b78a968e@%3Ccommits.ws.apache.org%3E
https://lists.apache.org/thread.html/r294be9d31c0312d2c0837087204b5d4bf49d0552890e6eec716fa6a6@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r2fe45d96eea8434b91592ca08109118f6308d60f6d0e21d52438cfb4@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r3c3b33ee5bef0c67391d27a97cbfd89d44f328cf072b601b58d4e748@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r3dd8881de891598d622227e9840dd7c2ef1d08abbb49e9690c7ae1bc@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/r4776f62dfae4a0006658542f43034a7fc199350e35a66d4e18164ee6@%3Ccommits.cxf.apache.org%3E
https://lists.apache.org/thread.html/r49549a8322f62cd3acfa4490d25bfba0be04f3f9ff4d14fe36199d27@%3Cyarn-dev.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r58a8775205ab1839dba43054b09a9ab3b25b423a4170b2413c4067ac@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r5b3d93dfdfb7708e796e8762ab40edbde8ff8add48aba53e5ea26f44@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/r5d61b98ceb7bba939a651de5900dbd67be3817db6bfcc41c6e04e199@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r6874dfe26eefc41b7c9a5e4a0487846fc4accf8c78ff948b24a1104a@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r68d86f4b06c808204f62bcb254fcb5b0432528ee8d37a07ef4bc8222@%3Ccommits.ws.apache.org%3E
https://lists.apache.org/thread.html/r79e47ed555bdb1180e528420a7a2bb898541367a29a3bc6bbf0baf2c@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r7b0e81d8367264d6cad98766a469d64d11248eb654417809bfdacf09@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r841c5e14e1b55281523ebcde661ece00b38a0569e00ef5e12bd5f6ba@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/ra7ab308481ee729f998691e8e3e02e93b1dedfc98f6b1cd3d86923b3@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rb2364f4cf4d274eab5a7ecfaf64bf575cedf8b0173551997c749d322@%3Cgitbox.hive.apache.org%3E
https://lists.apache.org/thread.html/rb8c0f1b7589864396690fe42a91a71dea9412e86eec66dc85bbacaaf@%3Ccommits.cxf.apache.org%3E
https://lists.apache.org/thread.html/rbc7642b9800249553f13457e46b813bea1aec99d2bc9106510e00ff3@%3Ctorque-dev.db.apache.org%3E
https://lists.apache.org/thread.html/rc2dbc4633a6eea1fcbce6831876cfa17b73759a98c65326d1896cb1a@%3Ctorque-dev.db.apache.org%3E
https://lists.apache.org/thread.html/rc607bc52f3507b8b9c28c6a747c3122f51ac24afe80af2a670785b97@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/rcafc3a637d82bdc9a24036b2ddcad1e519dd0e6f848fcc3d606fd78f@%3Cdev.hive.apache.org%3E
https://lists.apache.org/thread.html/rd01f5ff0164c468ec7abc96ff7646cea3cce6378da2e4aa29c6bcb95@%3Cgithub.arrow.apache.org%3E
https://lists.apache.org/thread.html/rd2704306ec729ccac726e50339b8a8f079515cc29ccb77713b16e7c5@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/rd5d58088812cf8e677d99b07f73c654014c524c94e7fedbdee047604@%3Ctorque-dev.db.apache.org%3E
https://lists.apache.org/thread.html/rd7e12d56d49d73e2b8549694974b07561b79b05455f7f781954231bf@%3Cdev.pig.apache.org%3E
https://lists.apache.org/thread.html/re120f6b3d2f8222121080342c5801fdafca2f5188ceeb3b49c8a1d27@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/reebbd63c25bc1a946caa419cec2be78079f8449d1af48e52d47c9e85@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/rf00b688ffa620c990597f829ff85fdbba8bf73ee7bfb34783e1f0d4e@%3Cyarn-dev.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rf9f0fa84b8ae1a285f0210bafec6de2a9eba083007d04640b82aa625@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/rfc27e2727a20a574f39273e0432aa97486a332f9b3068f6ac1346594@%3Cdev.myfaces.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2020-8908
https://security.netapp.com/advisory/ntap-20220210-0003
https://security.netapp.com/advisory/ntap-20220210-0003/
https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEGUAVA-1015415
https://www.cve.org/CVERecord?id=CVE-2020-8908
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| com.thoughtworks.xstream:xstream |
CVE-2017-7957 |
HIGH |
1.4.9 |
1.4.10 |
http://www.debian.org/security/2017/dsa-3841
http://www.securityfocus.com/bid/100687
http://www.securitytracker.com/id/1039499
http://x-stream.github.io/CVE-2017-7957.html
https://access.redhat.com/errata/RHSA-2017:1832
https://access.redhat.com/errata/RHSA-2017:2888
https://access.redhat.com/errata/RHSA-2017:2889
https://access.redhat.com/security/cve/CVE-2017-7957
https://exchange.xforce.ibmcloud.com/vulnerabilities/125800
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/commit/6e546ec366419158b1e393211be6d78ab9604ab
https://github.com/x-stream/xstream/commit/8542d02d9ac5d384c85f4b33d6c1888c53bd55d
https://github.com/x-stream/xstream/commit/b3570be
https://github.com/x-stream/xstream/commit/b3570be2f39234e61f99f9a20640756ea71b1b4
https://nvd.nist.gov/vuln/detail/CVE-2017-7957
https://www-prd-trops.events.ibm.com/node/715749
https://www.cve.org/CVERecord?id=CVE-2017-7957
https://x-stream.github.io/CVE-2017-7957.html
|
| com.thoughtworks.xstream:xstream |
CVE-2020-26217 |
HIGH |
1.4.9 |
1.4.14-java7 |
https://access.redhat.com/security/cve/CVE-2020-26217
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/commit/0fec095d534126931c99fd38e9c6d41f5c685c1a
https://github.com/x-stream/xstream/security/advisories/GHSA-mw36-7c6c-q4q2
https://linux.oracle.com/cve/CVE-2020-26217.html
https://linux.oracle.com/errata/ELSA-2021-0162.html
https://lists.apache.org/thread.html/r2de526726e7f4db4a7cb91b7355070779f51a84fd985c6529c2f4e9e@%3Cissues.activemq.apache.org%3E
https://lists.apache.org/thread.html/r7c9fc255edc0b9cd9567093d131f6d33fde4c662aaf912460ef630e9@%3Ccommits.camel.apache.org%3E
https://lists.apache.org/thread.html/r826a006fda71cc96fc87b6eca4b5d195f19a292ad36cea501682c38c@%3Cissues.activemq.apache.org%3E
https://lists.apache.org/thread.html/redde3609b89b2a4ff18b536a06ef9a77deb93d47fda8ed28086fa8c3@%3Cissues.activemq.apache.org%3E
https://lists.debian.org/debian-lts-announce/2020/12/msg00001.html
https://nvd.nist.gov/vuln/detail/CVE-2020-26217
https://security.netapp.com/advisory/ntap-20210409-0004
https://security.netapp.com/advisory/ntap-20210409-0004/
https://ubuntu.com/security/notices/USN-4714-1
https://ubuntu.com/security/notices/USN-4943-1
https://ubuntu.com/security/notices/USN-6978-1
https://www.cve.org/CVERecord?id=CVE-2020-26217
https://www.debian.org/security/2020/dsa-4811
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://x-stream.github.io/CVE-2020-26217.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-21341 |
HIGH |
1.4.9 |
1.4.16 |
http://x-stream.github.io/changes.html#1.4.16
https://access.redhat.com/security/cve/CVE-2021-21341
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-2p3x-qw9c-25hh
https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd@%3Cusers.activemq.apache.org%3E
https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0@%3Cdev.jmeter.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-21341
https://security.netapp.com/advisory/ntap-20210430-0002
https://security.netapp.com/advisory/ntap-20210430-0002/
https://ubuntu.com/security/notices/USN-4943-1
https://ubuntu.com/security/notices/USN-6978-1
https://www.cve.org/CVERecord?id=CVE-2021-21341
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://x-stream.github.io/CVE-2021-21341.html
https://x-stream.github.io/security.html#workaround
|
| com.thoughtworks.xstream:xstream |
CVE-2021-29505 |
HIGH |
1.4.9 |
1.4.17 |
https://access.redhat.com/security/cve/CVE-2021-29505
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/commit/24fac82191292c6ae25f94508d28b9823f83624f
https://github.com/x-stream/xstream/commit/f0c4a8d861b68ffc3119cfbbbd632deee624e227
https://github.com/x-stream/xstream/security/advisories/GHSA-7chv-rrw6-w6fc
https://linux.oracle.com/cve/CVE-2021-29505.html
https://linux.oracle.com/errata/ELSA-2021-2683.html
https://lists.apache.org/thread.html/r8ee51debf7fd184b6a6b020dc31df25118b0aa612885f12fbe77f04f@%3Cdev.jmeter.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/07/msg00004.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-29505
https://security.netapp.com/advisory/ntap-20210708-0007
https://security.netapp.com/advisory/ntap-20210708-0007/
https://www.cve.org/CVERecord?id=CVE-2021-29505
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://x-stream.github.io/CVE-2021-29505.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39139 |
HIGH |
1.4.9 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39139
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-64xx-cq4q-mf44
https://linux.oracle.com/cve/CVE-2021-39139.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39139
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39139
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39139.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39141 |
HIGH |
1.4.9 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39141
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-g5w6-mrj7-75h2
https://linux.oracle.com/cve/CVE-2021-39141.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39141
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39141
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39141.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39144 |
HIGH |
1.4.9 |
1.4.18 |
http://packetstormsecurity.com/files/169859/VMware-NSX-Manager-XStream-Unauthenticated-Remote-Code-Execution.html
https://access.redhat.com/security/cve/CVE-2021-39144
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-j9h8-phrw-h4fh
https://linux.oracle.com/cve/CVE-2021-39144.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39144
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-39144
https://www.cve.org/CVERecord?id=CVE-2021-39144
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39144.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39145 |
HIGH |
1.4.9 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39145
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-8jrj-525p-826v
https://linux.oracle.com/cve/CVE-2021-39145.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39145
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39145
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39145.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39146 |
HIGH |
1.4.9 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39146
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-p8pq-r894-fm8f
https://linux.oracle.com/cve/CVE-2021-39146.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39146
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39146
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39146.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39147 |
HIGH |
1.4.9 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39147
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-h7v4-7xg3-hxcc
https://linux.oracle.com/cve/CVE-2021-39147.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39147
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39147
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39147.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39148 |
HIGH |
1.4.9 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39148
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-qrx8-8545-4wg2
https://linux.oracle.com/cve/CVE-2021-39148.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39148
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39148
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39148.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39149 |
HIGH |
1.4.9 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39149
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-3ccq-5vw3-2p6x
https://linux.oracle.com/cve/CVE-2021-39149.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39149
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39149
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39149.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39150 |
HIGH |
1.4.9 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39150
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-cxfm-5m4g-x7xp
https://linux.oracle.com/cve/CVE-2021-39150.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39150
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39150
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39150.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39151 |
HIGH |
1.4.9 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39151
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-hph2-m3g5-xxv4
https://linux.oracle.com/cve/CVE-2021-39151.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39151
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39151
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39151.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39152 |
HIGH |
1.4.9 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39152
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-xw4p-crpj-vjx2
https://linux.oracle.com/cve/CVE-2021-39152.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39152
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39152
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39152.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39153 |
HIGH |
1.4.9 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39153
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-2q8x-2p7f-574v
https://linux.oracle.com/cve/CVE-2021-39153.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39153
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39153
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39153.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39154 |
HIGH |
1.4.9 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39154
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-6w62-hx7r-mw68
https://linux.oracle.com/cve/CVE-2021-39154.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39154
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39154
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39154.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-43859 |
HIGH |
1.4.9 |
1.4.19 |
http://www.openwall.com/lists/oss-security/2022/02/09/1
https://access.redhat.com/security/cve/CVE-2021-43859
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/commit/e8e88621ba1c85ac3b8620337dd672e0c0c3a846
https://github.com/x-stream/xstream/security/advisories/GHSA-rmr5-cpv2-vgjf
https://lists.debian.org/debian-lts-announce/2022/02/msg00018.html
https://lists.debian.org/debian-lts-announce/2024/12/msg00023.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VACQYG356OHUTD5WQGAQ4L2TTFTAV3SJ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VACQYG356OHUTD5WQGAQ4L2TTFTAV3SJ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XODFRE2ZL64FICBJDOPWOLPTSSAI4U7X
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XODFRE2ZL64FICBJDOPWOLPTSSAI4U7X/
https://nvd.nist.gov/vuln/detail/CVE-2021-43859
https://www.cve.org/CVERecord?id=CVE-2021-43859
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-43859.html
|
| com.thoughtworks.xstream:xstream |
CVE-2022-40151 |
HIGH |
1.4.9 |
1.4.20 |
https://access.redhat.com/security/cve/CVE-2022-40151
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47367
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/issues/304
https://github.com/x-stream/xstream/issues/314
https://github.com/x-stream/xstream/security/advisories/GHSA-f8cc-g7j8-xxpm
https://nvd.nist.gov/vuln/detail/CVE-2022-40151
https://www.cve.org/CVERecord?id=CVE-2022-40151
https://x-stream.github.io/CVE-2022-40151.html
|
| com.thoughtworks.xstream:xstream |
CVE-2022-41966 |
HIGH |
1.4.9 |
1.4.20 |
https://access.redhat.com/security/cve/CVE-2022-41966
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-j563-grx4-pjpv
https://nvd.nist.gov/vuln/detail/CVE-2022-41966
https://security.netapp.com/advisory/ntap-20230216-0005/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2022-41966
https://x-stream.github.io/CVE-2022-41966.html
|
| com.thoughtworks.xstream:xstream |
CVE-2024-47072 |
HIGH |
1.4.9 |
1.4.21 |
https://access.redhat.com/security/cve/CVE-2024-47072
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/commit/bb838ce2269cac47433e31c77b2b236466e9f266
https://github.com/x-stream/xstream/commit/fdd9f7d3de0d7ccf2f9979bcd09fbf3e6a0c881a
https://github.com/x-stream/xstream/security/advisories/GHSA-hfq9-hggm-c56q
https://lists.debian.org/debian-lts-announce/2024/12/msg00023.html
https://nvd.nist.gov/vuln/detail/CVE-2024-47072
https://www.cve.org/CVERecord?id=CVE-2024-47072
https://x-stream.github.io/CVE-2024-47072.html
|
| com.thoughtworks.xstream:xstream |
CVE-2020-26258 |
MEDIUM |
1.4.9 |
1.4.15 |
https://access.redhat.com/security/cve/CVE-2020-26258
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-4cch-wxpw-8p28
https://lists.apache.org/thread.html/r97993e3d78e1f5389b7b172ba9f308440830ce5f051ee62714a0aa34@%3Ccommits.struts.apache.org%3E
https://lists.debian.org/debian-lts-announce/2020/12/msg00042.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2020-26258
https://security.netapp.com/advisory/ntap-20210409-0005
https://security.netapp.com/advisory/ntap-20210409-0005/
https://ubuntu.com/security/notices/USN-4714-1
https://ubuntu.com/security/notices/USN-4943-1
https://ubuntu.com/security/notices/USN-6978-1
https://www.cve.org/CVERecord?id=CVE-2020-26258
https://www.debian.org/security/2021/dsa-4828
https://x-stream.github.io/CVE-2020-26258.html
|
| com.thoughtworks.xstream:xstream |
CVE-2020-26259 |
MEDIUM |
1.4.9 |
1.4.15 |
https://access.redhat.com/security/cve/CVE-2020-26259
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-jfvx-7wrx-43fh
https://lists.apache.org/thread.html/r97993e3d78e1f5389b7b172ba9f308440830ce5f051ee62714a0aa34@%3Ccommits.struts.apache.org%3E
https://lists.debian.org/debian-lts-announce/2020/12/msg00042.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2020-26259
https://security.netapp.com/advisory/ntap-20210409-0005
https://security.netapp.com/advisory/ntap-20210409-0005/
https://ubuntu.com/security/notices/USN-4714-1
https://ubuntu.com/security/notices/USN-4943-1
https://ubuntu.com/security/notices/USN-6978-1
https://www.cve.org/CVERecord?id=CVE-2020-26259
https://www.debian.org/security/2021/dsa-4828
https://x-stream.github.io/CVE-2020-26259.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-21342 |
MEDIUM |
1.4.9 |
1.4.16 |
http://x-stream.github.io/changes.html#1.4.16
https://access.redhat.com/security/cve/CVE-2021-21342
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-hvv8-336g-rx3m
https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd@%3Cusers.activemq.apache.org%3E
https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0@%3Cdev.jmeter.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-21342
https://security.netapp.com/advisory/ntap-20210430-0002
https://security.netapp.com/advisory/ntap-20210430-0002/
https://ubuntu.com/security/notices/USN-4943-1
https://ubuntu.com/security/notices/USN-6978-1
https://www.cve.org/CVERecord?id=CVE-2021-21342
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://x-stream.github.io/CVE-2021-21342.html
https://x-stream.github.io/security.html#workaround
|
| com.thoughtworks.xstream:xstream |
CVE-2021-21343 |
MEDIUM |
1.4.9 |
1.4.16 |
http://x-stream.github.io/changes.html#1.4.16
https://access.redhat.com/security/cve/CVE-2021-21343
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-74cv-f58x-f9wf
https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd@%3Cusers.activemq.apache.org%3E
https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0@%3Cdev.jmeter.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-21343
https://security.netapp.com/advisory/ntap-20210430-0002
https://security.netapp.com/advisory/ntap-20210430-0002/
https://ubuntu.com/security/notices/USN-4943-1
https://ubuntu.com/security/notices/USN-6978-1
https://www.cve.org/CVERecord?id=CVE-2021-21343
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://x-stream.github.io/CVE-2021-21343.html
https://x-stream.github.io/security.html#workaround
|
| com.thoughtworks.xstream:xstream |
CVE-2021-21344 |
MEDIUM |
1.4.9 |
1.4.16 |
http://x-stream.github.io/changes.html#1.4.16
https://access.redhat.com/security/cve/CVE-2021-21344
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-59jw-jqf4-3wq3
https://linux.oracle.com/cve/CVE-2021-21344.html
https://linux.oracle.com/errata/ELSA-2021-1354.html
https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd@%3Cusers.activemq.apache.org%3E
https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0@%3Cdev.jmeter.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-21344
https://security.netapp.com/advisory/ntap-20210430-0002
https://security.netapp.com/advisory/ntap-20210430-0002/
https://ubuntu.com/security/notices/USN-4943-1
https://ubuntu.com/security/notices/USN-6978-1
https://www.cve.org/CVERecord?id=CVE-2021-21344
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://x-stream.github.io/CVE-2021-21344.html
https://x-stream.github.io/security.html#workaround
|
| com.thoughtworks.xstream:xstream |
CVE-2021-21345 |
MEDIUM |
1.4.9 |
1.4.16 |
http://x-stream.github.io/changes.html#1.4.16
https://access.redhat.com/security/cve/CVE-2021-21345
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-hwpc-8xqv-jvj4
https://linux.oracle.com/cve/CVE-2021-21345.html
https://linux.oracle.com/errata/ELSA-2021-1354.html
https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd@%3Cusers.activemq.apache.org%3E
https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0@%3Cdev.jmeter.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-21345
https://security.netapp.com/advisory/ntap-20210430-0002
https://security.netapp.com/advisory/ntap-20210430-0002/
https://ubuntu.com/security/notices/USN-4943-1
https://ubuntu.com/security/notices/USN-6978-1
https://www.cve.org/CVERecord?id=CVE-2021-21345
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://x-stream.github.io/CVE-2021-21345.html
https://x-stream.github.io/security.html#workaround
|
| com.thoughtworks.xstream:xstream |
CVE-2021-21346 |
MEDIUM |
1.4.9 |
1.4.16 |
http://x-stream.github.io/changes.html#1.4.16
https://access.redhat.com/security/cve/CVE-2021-21346
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-4hrm-m67v-5cxr
https://linux.oracle.com/cve/CVE-2021-21346.html
https://linux.oracle.com/errata/ELSA-2021-1354.html
https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd@%3Cusers.activemq.apache.org%3E
https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0@%3Cdev.jmeter.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-21346
https://security.netapp.com/advisory/ntap-20210430-0002
https://security.netapp.com/advisory/ntap-20210430-0002/
https://ubuntu.com/security/notices/USN-4943-1
https://ubuntu.com/security/notices/USN-6978-1
https://www.cve.org/CVERecord?id=CVE-2021-21346
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://x-stream.github.io/CVE-2021-21346.html
https://x-stream.github.io/security.html#workaround
|
| com.thoughtworks.xstream:xstream |
CVE-2021-21347 |
MEDIUM |
1.4.9 |
1.4.16 |
http://x-stream.github.io/changes.html#1.4.16
https://access.redhat.com/security/cve/CVE-2021-21347
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-qpfq-ph7r-qv6f
https://linux.oracle.com/cve/CVE-2021-21347.html
https://linux.oracle.com/errata/ELSA-2021-1354.html
https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd@%3Cusers.activemq.apache.org%3E
https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0@%3Cdev.jmeter.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-21347
https://security.netapp.com/advisory/ntap-20210430-0002
https://security.netapp.com/advisory/ntap-20210430-0002/
https://ubuntu.com/security/notices/USN-4943-1
https://ubuntu.com/security/notices/USN-6978-1
https://www.cve.org/CVERecord?id=CVE-2021-21347
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://x-stream.github.io/CVE-2021-21347.html
https://x-stream.github.io/security.html#workaround
|
| com.thoughtworks.xstream:xstream |
CVE-2021-21348 |
MEDIUM |
1.4.9 |
1.4.16 |
http://x-stream.github.io/changes.html#1.4.16
https://access.redhat.com/security/cve/CVE-2021-21348
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-56p8-3fh9-4cvq
https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd@%3Cusers.activemq.apache.org%3E
https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0@%3Cdev.jmeter.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-21348
https://security.netapp.com/advisory/ntap-20210430-0002
https://security.netapp.com/advisory/ntap-20210430-0002/
https://ubuntu.com/security/notices/USN-4943-1
https://ubuntu.com/security/notices/USN-6978-1
https://www.cve.org/CVERecord?id=CVE-2021-21348
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://x-stream.github.io/CVE-2021-21348.html
https://x-stream.github.io/security.html#workaround
|
| com.thoughtworks.xstream:xstream |
CVE-2021-21349 |
MEDIUM |
1.4.9 |
1.4.16 |
http://x-stream.github.io/changes.html#1.4.16
https://access.redhat.com/security/cve/CVE-2021-21349
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-f6hm-88x3-mfjv
https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd@%3Cusers.activemq.apache.org%3E
https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0@%3Cdev.jmeter.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-21349
https://security.netapp.com/advisory/ntap-20210430-0002
https://security.netapp.com/advisory/ntap-20210430-0002/
https://ubuntu.com/security/notices/USN-4943-1
https://ubuntu.com/security/notices/USN-6978-1
https://www.cve.org/CVERecord?id=CVE-2021-21349
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://x-stream.github.io/CVE-2021-21349.html
https://x-stream.github.io/security.html#workaround
|
| com.thoughtworks.xstream:xstream |
CVE-2021-21350 |
MEDIUM |
1.4.9 |
1.4.16 |
http://x-stream.github.io/changes.html#1.4.16
https://access.redhat.com/security/cve/CVE-2021-21350
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-43gc-mjxg-gvrq
https://linux.oracle.com/cve/CVE-2021-21350.html
https://linux.oracle.com/errata/ELSA-2021-1354.html
https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd@%3Cusers.activemq.apache.org%3E
https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0@%3Cdev.jmeter.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-21350
https://security.netapp.com/advisory/ntap-20210430-0002
https://security.netapp.com/advisory/ntap-20210430-0002/
https://ubuntu.com/security/notices/USN-4943-1
https://ubuntu.com/security/notices/USN-6978-1
https://www.cve.org/CVERecord?id=CVE-2021-21350
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://x-stream.github.io/CVE-2021-21350.html
https://x-stream.github.io/security.html#workaround
|
| com.thoughtworks.xstream:xstream |
CVE-2021-21351 |
MEDIUM |
1.4.9 |
1.4.16 |
http://x-stream.github.io/changes.html#1.4.16
https://access.redhat.com/security/cve/CVE-2021-21351
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-hrcp-8f3q-4w2c
https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd@%3Cusers.activemq.apache.org%3E
https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0@%3Cdev.jmeter.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-21351
https://security.netapp.com/advisory/ntap-20210430-0002
https://security.netapp.com/advisory/ntap-20210430-0002/
https://ubuntu.com/security/notices/USN-4943-1
https://ubuntu.com/security/notices/USN-6978-1
https://www.cve.org/CVERecord?id=CVE-2021-21351
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://x-stream.github.io/CVE-2021-21351.html
https://x-stream.github.io/security.html#workaround
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39140 |
MEDIUM |
1.4.9 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39140
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-6wf9-jmg9-vxcc
https://linux.oracle.com/cve/CVE-2021-39140.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39140
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39140
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39140.html
|
| commons-fileupload:commons-fileupload |
CVE-2016-1000031 |
CRITICAL |
1.3.2 |
1.3.3 |
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00036.html
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
http://www.securityfocus.com/bid/93604
http://www.tenable.com/security/research/tra-2016-12
http://www.zerodayinitiative.com/advisories/ZDI-16-570
http://www.zerodayinitiative.com/advisories/ZDI-16-570/
https://access.redhat.com/security/cve/CVE-2016-1000031
https://github.com/advisories/GHSA-7x9j-7223-rg5m
https://issues.apache.org/jira/browse/FILEUPLOAD-279
https://issues.apache.org/jira/browse/WW-4812
https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E
https://lists.apache.org/thread.html/d66657323fd25e437face5e84899c8ca404ccd187e81c3f2fa8b6080@%3Cannounce.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2016-1000031
https://security.netapp.com/advisory/ntap-20190212-0001
https://security.netapp.com/advisory/ntap-20190212-0001/
https://www.cve.org/CVERecord?id=CVE-2016-1000031
https://www.oracle.com/security-alerts/cpuapr2020.html
https://www.oracle.com/security-alerts/cpujan2020.html
https://www.oracle.com/security-alerts/cpujan2021.html
https://www.oracle.com/security-alerts/cpujul2020.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.oracle.com/security-alerts/cpuoct2020.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
https://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
https://www.tenable.com/security/research/tra-2016-12
https://www.tenable.com/security/research/tra-2016-23
https://www.tenable.com/security/research/tra-2016-30
|
| commons-fileupload:commons-fileupload |
CVE-2023-24998 |
HIGH |
1.3.2 |
1.5 |
http://www.openwall.com/lists/oss-security/2023/05/22/1
https://access.redhat.com/errata/RHSA-2023:6570
https://access.redhat.com/security/cve/CVE-2023-24998
https://bugzilla.redhat.com/2172298
https://bugzilla.redhat.com/2180856
https://bugzilla.redhat.com/2210321
https://commons.apache.org/proper/commons-fileupload/security-reports.html
https://commons.apache.org/proper/commons-fileupload/security-reports.html#Fixed_in_Apache_Commons_FileUpload_1.5
https://errata.almalinux.org/9/ALSA-2023-6570.html
https://github.com/apache/commons-fileupload
https://github.com/apache/commons-fileupload/commit/e20c04990f7420ca917e96a84cec58b13a1b3d17
https://github.com/apache/tomcat/commit/8a2285f13affa961cc65595aad999db5efae45ce
https://github.com/apache/tomcat/commit/9ca96c8c1eba86c0aaa2e6be581ba2a7d4d4ae6e
https://github.com/apache/tomcat/commit/cf77cc545de0488fb89e24294151504a7432df74
https://github.com/apache/tomcat/commit/d53d8e7f77042cc32a3b98f589496a1ef5088e38
https://github.com/search?q=repo%3Aapache%2Ftomcat+util.http+path%3A%2F%5Eres%5C%2Fbnd%5C%2F%2F&type=code
https://linux.oracle.com/cve/CVE-2023-24998.html
https://linux.oracle.com/errata/ELSA-2023-7065.html
https://lists.apache.org/thread/4xl4l09mhwg4vgsk7dxqogcjrobrrdoy
https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html
https://lists.debian.org/debian-lts-announce/2025/07/msg00008.html
https://nvd.nist.gov/vuln/detail/CVE-2023-24998
https://security.gentoo.org/glsa/202305-37
https://security.netapp.com/advisory/ntap-20230302-0013
https://security.netapp.com/advisory/ntap-20230302-0013/
https://security.netapp.com/advisory/ntap-20241108-0002
https://security.netapp.com/advisory/ntap-20241108-0002/
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-8.html
https://tomcat.apache.org/security-9.html
https://www.cve.org/CVERecord?id=CVE-2023-24998
https://www.debian.org/security/2023/dsa-5522
|
| commons-fileupload:commons-fileupload |
CVE-2025-48976 |
HIGH |
1.3.2 |
1.6.0 |
http://www.openwall.com/lists/oss-security/2025/06/16/4
https://access.redhat.com/errata/RHSA-2025:14177
https://access.redhat.com/errata/RHSA-2025:14181
https://access.redhat.com/security/cve/CVE-2025-48976
https://bugzilla.redhat.com/2373015
https://bugzilla.redhat.com/2373018
https://bugzilla.redhat.com/2373020
https://bugzilla.redhat.com/2373309
https://bugzilla.redhat.com/2379374
https://bugzilla.redhat.com/2379382
https://bugzilla.redhat.com/2379386
https://bugzilla.redhat.com/show_bug.cgi?id=2373015
https://bugzilla.redhat.com/show_bug.cgi?id=2373018
https://bugzilla.redhat.com/show_bug.cgi?id=2373020
https://bugzilla.redhat.com/show_bug.cgi?id=2373309
https://bugzilla.redhat.com/show_bug.cgi?id=2379374
https://bugzilla.redhat.com/show_bug.cgi?id=2379382
https://bugzilla.redhat.com/show_bug.cgi?id=2379386
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48976
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48988
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48989
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49125
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52434
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52520
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53506
https://errata.almalinux.org/9/ALSA-2025-14181.html
https://errata.rockylinux.org/RLSA-2025:14177
https://github.com/apache/commons-fileupload
https://github.com/apache/commons-fileupload/commit/2108495a4775910b8559f18ed5a779d60542ee96%20%28commons-fileupload-1.6.0-RC1%29
https://github.com/apache/commons-fileupload/commit/b247774a72a044f5d5380ae947140ee80af4e78b
https://github.com/apache/commons-fileupload/commit/bf68f63cfb312ef4710fb3dfb4d8e4e1665f4497
https://github.com/apache/tomcat/commit/667ddd76e2a0e762f3a784d86f0d25e7fd7cdb86%20%2810.1.42%29
https://github.com/apache/tomcat/commit/74f69ffaf61e54c727603e7e831fe20f0ac5d2a7%20%2811.0.8%29
https://github.com/apache/tomcat/commit/97790a35a27d236fa053e660676c3f8196284d93
https://github.com/apache/tomcat/commit/97790a35a27d236fa053e660676c3f8196284d93%20%289.0.106%29
https://linux.oracle.com/cve/CVE-2025-48976.html
https://linux.oracle.com/errata/ELSA-2025-14181.html
https://lists.apache.org/thread/fbs3wrr3p67vkjcxogqqqqz45pqtso12
https://lists.apache.org/thread/w7dbnfyqn1yc05kbqqbbyct7wbomv7lf
https://lists.debian.org/debian-lts-announce/2025/07/msg00008.html
https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html
https://nvd.nist.gov/vuln/detail/CVE-2025-48976
https://www.cve.org/CVERecord?id=CVE-2025-48976
|
| commons-httpclient:commons-httpclient |
CVE-2012-5783 |
MEDIUM |
3.1 |
4.0 |
http://lists.opensuse.org/opensuse-updates/2013-02/msg00078.html
http://lists.opensuse.org/opensuse-updates/2013-04/msg00040.html
http://lists.opensuse.org/opensuse-updates/2013-04/msg00041.html
http://lists.opensuse.org/opensuse-updates/2013-04/msg00053.html
http://rhn.redhat.com/errata/RHSA-2013-0270.html
http://rhn.redhat.com/errata/RHSA-2013-0679.html
http://rhn.redhat.com/errata/RHSA-2013-0680.html
http://rhn.redhat.com/errata/RHSA-2013-0681.html
http://rhn.redhat.com/errata/RHSA-2013-0682.html
http://rhn.redhat.com/errata/RHSA-2013-1147.html
http://rhn.redhat.com/errata/RHSA-2013-1853.html
http://rhn.redhat.com/errata/RHSA-2014-0224.html
http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
http://www.securityfocus.com/bid/58073
http://www.ubuntu.com/usn/USN-2769-1
https://access.redhat.com/errata/RHSA-2017:0868
https://access.redhat.com/security/cve/CVE-2012-5783
https://exchange.xforce.ibmcloud.com/vulnerabilities/79984
https://github.com/apache/httpcomponents-client
https://issues.apache.org/jira/browse/HTTPCLIENT-1265
https://linux.oracle.com/cve/CVE-2012-5783.html
https://linux.oracle.com/errata/ELSA-2013-0270.html
https://nvd.nist.gov/vuln/detail/CVE-2012-5783
https://ubuntu.com/security/notices/USN-2769-1
https://www.cve.org/CVERecord?id=CVE-2012-5783
|
| commons-net:commons-net |
CVE-2021-37533 |
MEDIUM |
3.5 |
3.9.0 |
http://www.openwall.com/lists/oss-security/2022/12/03/1
https://access.redhat.com/security/cve/CVE-2021-37533
https://github.com/apache/commons-net
https://github.com/apache/commons-net/commit/4fe1bae56e53f32756b1ca3296f3dd2c45e3e060
https://github.com/apache/commons-net/commit/b0bff89f70cfea70009e22f87639816cc3993974%20%28commons-net-3.9.0-RC1%29
https://issues.apache.org/jira/browse/NET-711
https://lists.apache.org/thread/o6yn9r9x6s94v97264hmgol1sf48mvx7
https://lists.debian.org/debian-lts-announce/2022/12/msg00038.html
https://nvd.nist.gov/vuln/detail/CVE-2021-37533
https://ubuntu.com/security/notices/USN-6037-1
https://www.cve.org/CVERecord?id=CVE-2021-37533
https://www.debian.org/security/2022/dsa-5307
|
| io.netty:netty |
CVE-2019-20444 |
CRITICAL |
3.10.5.Final |
4.0.0 |
https://access.redhat.com/errata/RHSA-2020:0497
https://access.redhat.com/errata/RHSA-2020:0567
https://access.redhat.com/errata/RHSA-2020:0601
https://access.redhat.com/errata/RHSA-2020:0605
https://access.redhat.com/errata/RHSA-2020:0606
https://access.redhat.com/errata/RHSA-2020:0804
https://access.redhat.com/errata/RHSA-2020:0805
https://access.redhat.com/errata/RHSA-2020:0806
https://access.redhat.com/errata/RHSA-2020:0811
https://access.redhat.com/security/cve/CVE-2019-20444
https://github.com/elastic/elasticsearch/issues/49396
https://github.com/netty/netty
https://github.com/netty/netty/compare/netty-4.1.43.Final...netty-4.1.44.Final
https://github.com/netty/netty/issues/9866
https://github.com/netty/netty/pull/9871
https://github.com/netty/netty/pull/9871/files#diff-e26989b9171ef22c27c9f7d80689cfb059d568c9bd10e75970d96c02d0654878
https://github.com/poc-effectiveness/PoCAdaptation/tree/main/Adapted/CVE-2019-20444/5.0.0.Alpha1/exploit
https://lists.apache.org/thread.html/r059b042bca47be53ff8a51fd04d95eb01bb683f1afa209db136e8cb7@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r0aa8b28e76ec01c697b15e161e6797e88fc8d406ed762e253401106e@%3Ccommits.camel.apache.org%3E
https://lists.apache.org/thread.html/r0c3d49bfdbc62fd3915676433cc5899c5506d06da1c552ef1b7923a5@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r0f5e72d5f69b4720dfe64fcbc2da9afae949ed1e9cbffa84bb7d92d7@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E
https://lists.apache.org/thread.html/r1fcccf8bdb3531c28bc9aa605a6a1bea7e68cef6fc12e01faafb2fb5@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r205937c85817a911b0c72655c2377e7a2c9322d6ef6ce1b118d34d8d@%3Cdev.geode.apache.org%3E
https://lists.apache.org/thread.html/r2f2989b7815d809ff3fda8ce330f553e5f133505afd04ffbc135f35f@%3Cissues.spark.apache.org%3E
https://lists.apache.org/thread.html/r310d2ce22304d5298ff87f10134f918c87919b452734f9841d95682d@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r34912a9b1a5c269a77b8be94ef6fb6d1e9b3c69129719dc00f01cf0b@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r36fcf538b28f2029e8b4f6b9a772f3b107913a78f09b095c5b153a62@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r489886fe72a98768eed665474cba13bad8d6fe0654f24987706636c5@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r4c675b2d0cc2a5e506b11ee10d60a378859ee340aca052e4c7ef4749@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r4d3f1d3e333d9c2b2f6e6ae8ed8750d4de03410ac294bcd12c7eefa3@%3Ccommits.cassandra.apache.org%3E
https://lists.apache.org/thread.html/r640eb9b3213058a963e18291f903fc1584e577f60035f941e32f760a@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r6945f3c346b7af89bbd3526a7c9b705b1e3569070ebcd0964bcedd7d@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r70b1ff22ee80e8101805b9a473116dd33265709007d2deb6f8c80bf2@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r7790b9d99696d9eddce8a8c96f13bb68460984294ea6fea3800143e4@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r804895eedd72c9ec67898286eb185e04df852b0dd5fe53cf5b6138f9@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r819aaeb9944bdcfca438dcc51f05650dc728daf64dfd7d774fc2499b@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r832724df393a7ef25ca4c7c2eb83ad2d6c21c74569acda5233f9f1ec@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r8402d67fdfe9cf169f859d52a7670b28a08eff31e54b522cc1432532@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r86befa74c5cd1482c711134104aec339bf7ae879f2c4437d7ec477d4@%3Ccommon-commits.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r90030b0117490caed526e57271bf4d7f9b012091ac5083c895d16543@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r91e0fa345c86c128b75a4a791b4b503b53173ff4c13049ac7129d319@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r959474dcf7f88565ed89f6252ca5a274419006cb71348f14764b183d@%3Ccommits.cassandra.apache.org%3E
https://lists.apache.org/thread.html/r96e08f929234e8ba1ef4a93a0fd2870f535a1f9ab628fabc46115986@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r9b20cdac704cf9a583400350e2d5b576fa8417c18ddb961201676c60@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/ra1a71b576a45426af5ee65255be9596ff3181a342f4ba73b800db78f@%3Cdev.geode.apache.org%3E
https://lists.apache.org/thread.html/ra2ace4bcb5cf487f72cbcbfa0f8cc08e755ec2b93d7e69f276148b08@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/ra9fbfe7d4830ae675bf34c7c0f8c22fc8a4099f65706c1bc4f54c593@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/raaac04b7567c554786132144bea3dcb72568edd410c1e6f0101742e7@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/rb3361f6c6a5f834ad3db5e998c352760d393c0891b8d3bea90baa836@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rb84c57670ec48ef23f4d07973b7fa69f629b8e7fcfb48874362feb6f@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rc7eb5634b71d284483e58665b22bf274a69bd184d9bd7ede52015d91@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rcb2c59428f34d4757702f9ae739a8795bda7bea97b857e708a9c62c6@%3Ccommon-commits.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rce71d33747010d32d31d90f5d737dae26291d96552f513a266c92fbb@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/rd8f72411fb75b98d366400ae789966373b5c3eb3f511e717caf3e49e@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/rdb69125652311d0c41f6066ff44072a3642cf33a4b5e3c4f9c1ec9c2@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/rdd5d243a5f8ed8b83c0104e321aa420e5e98792a95749e3c9a54c0b9@%3Ccommon-commits.hadoop.apache.org%3E
https://lists.apache.org/thread.html/re0b78a3d0a4ba2cf9f4e14e1d05040bde9051d5c78071177186336c9@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/re45ee9256d3233c31d78e59ee59c7dc841c7fbd83d0769285b41e948@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/re78eaef7d01ad65c370df30e45c686fffff00b37f7bfd78b26a08762@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rf2bf8e2eb0a03227f5bc100b544113f8cafea01e887bb068e8d1fa41@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rf5b2dfb7401666a19915f8eaef3ba9f5c3386e2066fcd2ae66e16a2f@%3Cdev.flink.apache.org%3E
https://lists.apache.org/thread.html/rfb55f245b08d8a6ec0fb4dc159022227cd22de34c4419c2fbb18802b@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rff210a24f3a924829790e69eaefa84820902b7b31f17c3bf2def9114@%3Ccommits.druid.apache.org%3E
https://lists.debian.org/debian-lts-announce/2020/02/msg00017.html
https://lists.debian.org/debian-lts-announce/2020/02/msg00018.html
https://lists.debian.org/debian-lts-announce/2020/09/msg00003.html
https://lists.debian.org/debian-lts-announce/2020/09/msg00004.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TS6VX7OMXPDJIU5LRGUAHRK6MENAVJ46
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TS6VX7OMXPDJIU5LRGUAHRK6MENAVJ46/
https://nvd.nist.gov/vuln/detail/CVE-2019-20444
https://ubuntu.com/security/notices/USN-4532-1
https://ubuntu.com/security/notices/USN-4600-1
https://ubuntu.com/security/notices/USN-4600-2
https://usn.ubuntu.com/4532-1
https://usn.ubuntu.com/4532-1/
https://www.cve.org/CVERecord?id=CVE-2019-20444
https://www.debian.org/security/2021/dsa-4885
|
| io.netty:netty |
CVE-2019-16869 |
HIGH |
3.10.5.Final |
|
https://access.redhat.com/errata/RHSA-2019:3892
https://access.redhat.com/errata/RHSA-2019:3901
https://access.redhat.com/errata/RHSA-2020:0159
https://access.redhat.com/errata/RHSA-2020:0160
https://access.redhat.com/errata/RHSA-2020:0161
https://access.redhat.com/errata/RHSA-2020:0164
https://access.redhat.com/errata/RHSA-2020:0445
https://access.redhat.com/security/cve/CVE-2019-16869
https://github.com/netty/netty
https://github.com/netty/netty/commit/39cafcb05c99f2aa9fce7e6597664c9ed6a63a95
https://github.com/netty/netty/compare/netty-4.1.41.Final...netty-4.1.42.Final
https://github.com/netty/netty/issues/9571
https://github.com/poc-effectiveness/PoCAdaptation/tree/main/Adapted/CVE-2019-16869/5.0.0.Alpha1/exploit
https://lists.apache.org/thread.html/0acadfb96176768caac79b404110df62d14d30aa9d53b6dbdb1407ac@%3Cissues.spark.apache.org%3E
https://lists.apache.org/thread.html/19fed892608db1efe5a5ce14372137669ff639df0205323959af7de3@%3Cdev.olingo.apache.org%3E
https://lists.apache.org/thread.html/2494a2ac7f66af6e4646a4937b17972a4ec7cd3c7333c66ffd6c639d@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/2e1cf538b502713c2c42ffa46d81f4688edb5676eb55bd9fc4b4fed7@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/35961d1ae00849974353a932b4fef12ebce074541552eceefa04f1fd@%3Cdev.olingo.apache.org%3E
https://lists.apache.org/thread.html/37ed432b8eb35d8bd757f53783ec3e334bd51f514534432bea7f1c3d@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/380f6d2730603a2cd6b0a8bea9bcb21a86c199147e77e448c5f7390b@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/3e6d7aae1cca10257e3caf2d69b22f74c875f12a1314155af422569d@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/51923a9ba513b2e816e02a9d1fd8aa6f12e3e4e99bbd9dc884bccbbe@%3Cissues.spark.apache.org%3E
https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/6063699b87b501ecca8dd3b0e82251bfc85f29363a9b46ac5ace80cf@%3Cdev.olingo.apache.org%3E
https://lists.apache.org/thread.html/64b10f49c68333aaecf00348c5670fe182e49fd60d45c4a3ab241f8b@%3Cissues.spark.apache.org%3E
https://lists.apache.org/thread.html/681493a2f9b63f5b468f741d88d1aa51b2cfcf7a1c5b74ea8c4343fb@%3Cissues.spark.apache.org%3E
https://lists.apache.org/thread.html/6e1e34c0d5635a987d595df9e532edac212307243bb1b49eead6d55b@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/76540c8b0ed761bfa6c81fa28c13057f13a5448aed079d656f6a3c79@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/799eb85d67cbddc1851a3e63a07b55e95b2f44f1685225d38570ce89@%3Cissues.spark.apache.org%3E
https://lists.apache.org/thread.html/860acce024d79837e963a51a42bab2cef8e8d017aad2b455ecd1dcf0@%3Cissues.spark.apache.org%3E
https://lists.apache.org/thread.html/9128111213b7b734ffc85db08d8f789b00a85a7f241b708e55debbd0@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/a0f77c73af32cbe4ff0968bfcbbe80ae6361f3dccdd46f3177547266@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/af6e9c2d716868606523857a4cd7a5ee506e6d1710f5fb0d567ec030@%3Cdev.olingo.apache.org%3E
https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/b264fa5801e87698e9f43f2b5585fbc5ebdc26c6f4aad861b258fb69@%3Cdev.olingo.apache.org%3E
https://lists.apache.org/thread.html/b2cd51795f938632c6f60a4c59d9e587fbacd7f7d0e0a3684850a30f@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/b3dda6399a0ea2b647624b899fd330fca81834e41b13e3e11e1002d8@%3Cdev.olingo.apache.org%3E
https://lists.apache.org/thread.html/b3ddeebbfaf8a288d7de8ab2611cf2609ab76b9809f0633248546b7c@%3Cissues.spark.apache.org%3E
https://lists.apache.org/thread.html/bdf7a5e597346a75d2d884ca48c767525e35137ad59d8f10b8fc943c@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/cbf6e6a04cb37e9320ad20e437df63beeab1755fc0761918ed5c5a6e@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/cf5aa087632ead838f8ac3a42e9837684e7afe6e0fcb7704e0c73bc0@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/d14f721e0099b914daebe29bca199fde85d8354253be9d6d3d46507a@%3Ccommits.cassandra.apache.org%3E
https://lists.apache.org/thread.html/d3eb0dbea75ef5c400bd49dfa1901ad50be606cca3cb29e0d01b6a54@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/d7d530599dc7813056c712213e367b68cdf56fb5c9b73f864870bc4c@%3Cdev.olingo.apache.org%3E
https://lists.apache.org/thread.html/e192fe8797c192679759ffa6b15e4d0806546945a41d8ebfbc6ee3ac@%3Ccommits.tinkerpop.apache.org%3E
https://lists.apache.org/thread.html/e39931d7cdd17241e69a0a09a89d99d7435bcc59afee8a9628d67769@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/ee6faea9e542c0b90afd70297a9daa203e20d41aa2ac7fca6703662f@%3Cissues.spark.apache.org%3E
https://lists.apache.org/thread.html/f6c5ebfb018787c764f000362d59e4b231c0a36b6253aa866de8c64e@%3Ccommits.cassandra.apache.org%3E
https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
https://lists.apache.org/thread.html/r0aa8b28e76ec01c697b15e161e6797e88fc8d406ed762e253401106e@%3Ccommits.camel.apache.org%3E
https://lists.apache.org/thread.html/r0c3d49bfdbc62fd3915676433cc5899c5506d06da1c552ef1b7923a5@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r131e572d003914843552fa45c4398b9903fb74144986e8b107c0a3a7@%3Ccommits.cassandra.apache.org%3E
https://lists.apache.org/thread.html/r3225f7dfe6b8a37e800ecb8e31abd7ac6c4312dbd3223dd8139c37bb@%3Ccommits.cassandra.apache.org%3E
https://lists.apache.org/thread.html/r4d3f1d3e333d9c2b2f6e6ae8ed8750d4de03410ac294bcd12c7eefa3@%3Ccommits.cassandra.apache.org%3E
https://lists.apache.org/thread.html/r73c400ab66d79821dec9e3472f0e2c048d528672bdb0f8bf44d7cb1f@%3Ccommits.cassandra.apache.org%3E
https://lists.apache.org/thread.html/r7790b9d99696d9eddce8a8c96f13bb68460984294ea6fea3800143e4@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r831e0548fad736a98140d0b3b7dc575af0c50faea0b266434ba813cc@%3Cdev.rocketmq.apache.org%3E
https://lists.apache.org/thread.html/r832724df393a7ef25ca4c7c2eb83ad2d6c21c74569acda5233f9f1ec@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r8402d67fdfe9cf169f859d52a7670b28a08eff31e54b522cc1432532@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r86befa74c5cd1482c711134104aec339bf7ae879f2c4437d7ec477d4@%3Ccommon-commits.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r90030b0117490caed526e57271bf4d7f9b012091ac5083c895d16543@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r959474dcf7f88565ed89f6252ca5a274419006cb71348f14764b183d@%3Ccommits.cassandra.apache.org%3E
https://lists.apache.org/thread.html/raaac04b7567c554786132144bea3dcb72568edd410c1e6f0101742e7@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/rb25b42f666d2cac5e6e6b3f771faf60d1f1aa58073dcdd8db14edf8a@%3Cdev.rocketmq.apache.org%3E
https://lists.apache.org/thread.html/rb3361f6c6a5f834ad3db5e998c352760d393c0891b8d3bea90baa836@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rc7eb5634b71d284483e58665b22bf274a69bd184d9bd7ede52015d91@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rc8d554aad889d12b140d9fd7d2d6fc2e8716e9792f6f4e4b2cdc2d05@%3Ccommits.cassandra.apache.org%3E
https://lists.apache.org/thread.html/rcb2c59428f34d4757702f9ae739a8795bda7bea97b857e708a9c62c6@%3Ccommon-commits.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rcddf723a4b4117f8ed6042e9ac25e8c5110a617bab77694b61b14833@%3Cdev.rocketmq.apache.org%3E
https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/rdb69125652311d0c41f6066ff44072a3642cf33a4b5e3c4f9c1ec9c2@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/rdd5d243a5f8ed8b83c0104e321aa420e5e98792a95749e3c9a54c0b9@%3Ccommon-commits.hadoop.apache.org%3E
https://lists.apache.org/thread.html/re0b78a3d0a4ba2cf9f4e14e1d05040bde9051d5c78071177186336c9@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/re45ee9256d3233c31d78e59ee59c7dc841c7fbd83d0769285b41e948@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/re78eaef7d01ad65c370df30e45c686fffff00b37f7bfd78b26a08762@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rf2bf8e2eb0a03227f5bc100b544113f8cafea01e887bb068e8d1fa41@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rf5b2dfb7401666a19915f8eaef3ba9f5c3386e2066fcd2ae66e16a2f@%3Cdev.flink.apache.org%3E
https://lists.debian.org/debian-lts-announce/2019/09/msg00035.html
https://lists.debian.org/debian-lts-announce/2020/02/msg00018.html
https://lists.debian.org/debian-lts-announce/2020/09/msg00004.html
https://nvd.nist.gov/vuln/detail/CVE-2019-16869
https://seclists.org/bugtraq/2020/Jan/6
https://ubuntu.com/security/notices/USN-4532-1
https://ubuntu.com/security/notices/USN-4600-1
https://usn.ubuntu.com/4532-1
https://usn.ubuntu.com/4532-1/
https://www.cve.org/CVERecord?id=CVE-2019-16869
https://www.debian.org/security/2020/dsa-4597
|
| io.netty:netty |
CVE-2021-37136 |
HIGH |
3.10.5.Final |
4.0.0 |
https://access.redhat.com/security/cve/CVE-2021-37136
https://github.com/netty/netty
https://github.com/netty/netty/blob/4.1/codec/src/main/java/io/netty/handler/codec/compression/Bzip2Decoder.java#L294
https://github.com/netty/netty/blob/4.1/codec/src/main/java/io/netty/handler/codec/compression/Bzip2Decoder.java#L305
https://github.com/netty/netty/blob/4.1/codec/src/main/java/io/netty/handler/codec/compression/Bzip2Decoder.java#L80
https://github.com/netty/netty/commit/41d3d61a61608f2223bb364955ab2045dd5e4020
https://github.com/netty/netty/security/advisories/GHSA-grg4-wf29-r9vv
https://lists.apache.org/thread.html/r06a145c9bd41a7344da242cef07977b24abe3349161ede948e30913d@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r5406eaf3b07577d233b9f07cfc8f26e28369e6bab5edfcab41f28abb@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r5e05eba32476c580412f9fbdfc9b8782d5b40558018ac4ac07192a04@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r75490c61c2cb7b6ae2c81238fd52ae13636c60435abcd732d41531a0@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/rd262f59b1586a108e320e5c966feeafbb1b8cdc96965debc7cc10b16@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/rfb2bf8597e53364ccab212fbcbb2a4e9f0a9e1429b1dc08023c6868e@%3Cdev.tinkerpop.apache.org%3E
https://lists.debian.org/debian-lts-announce/2023/01/msg00008.html
https://nvd.nist.gov/vuln/detail/CVE-2021-37136
https://security.netapp.com/advisory/ntap-20220210-0012
https://security.netapp.com/advisory/ntap-20220210-0012/
https://ubuntu.com/security/notices/USN-6049-1
https://www.cve.org/CVERecord?id=CVE-2021-37136
https://www.debian.org/security/2023/dsa-5316
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
|
| io.netty:netty |
CVE-2021-37137 |
HIGH |
3.10.5.Final |
4.0.0 |
https://access.redhat.com/security/cve/CVE-2021-37137
https://github.com/netty/netty
https://github.com/netty/netty/blob/4.1/codec/src/main/java/io/netty/handler/codec/compression/SnappyFrameDecoder.java#L171
https://github.com/netty/netty/blob/4.1/codec/src/main/java/io/netty/handler/codec/compression/SnappyFrameDecoder.java#L185
https://github.com/netty/netty/blob/4.1/codec/src/main/java/io/netty/handler/codec/compression/SnappyFrameDecoder.java#L79
https://github.com/netty/netty/commit/6da4956b31023ae967451e1d94ff51a746a9194f
https://github.com/netty/netty/security/advisories/GHSA-9vjp-v76f-g363
https://github.com/netty/netty/security/advisories/GHSA-grg4-wf29-r9vv
https://lists.apache.org/thread.html/r06a145c9bd41a7344da242cef07977b24abe3349161ede948e30913d@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r5406eaf3b07577d233b9f07cfc8f26e28369e6bab5edfcab41f28abb@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r5e05eba32476c580412f9fbdfc9b8782d5b40558018ac4ac07192a04@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r75490c61c2cb7b6ae2c81238fd52ae13636c60435abcd732d41531a0@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/rd262f59b1586a108e320e5c966feeafbb1b8cdc96965debc7cc10b16@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/rfb2bf8597e53364ccab212fbcbb2a4e9f0a9e1429b1dc08023c6868e@%3Cdev.tinkerpop.apache.org%3E
https://lists.debian.org/debian-lts-announce/2023/01/msg00008.html
https://nvd.nist.gov/vuln/detail/CVE-2021-37137
https://security.netapp.com/advisory/ntap-20220210-0012
https://security.netapp.com/advisory/ntap-20220210-0012/
https://ubuntu.com/security/notices/USN-6049-1
https://www.cve.org/CVERecord?id=CVE-2021-37137
https://www.debian.org/security/2023/dsa-5316
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
|
| io.netty:netty |
CVE-2019-20445 |
MEDIUM |
3.10.5.Final |
4.0.0 |
https://access.redhat.com/errata/RHSA-2020:0497
https://access.redhat.com/errata/RHSA-2020:0567
https://access.redhat.com/errata/RHSA-2020:0601
https://access.redhat.com/errata/RHSA-2020:0605
https://access.redhat.com/errata/RHSA-2020:0606
https://access.redhat.com/errata/RHSA-2020:0804
https://access.redhat.com/errata/RHSA-2020:0805
https://access.redhat.com/errata/RHSA-2020:0806
https://access.redhat.com/errata/RHSA-2020:0811
https://access.redhat.com/security/cve/CVE-2019-20445
https://github.com/netty/netty
https://github.com/netty/netty/compare/netty-4.1.43.Final...netty-4.1.44.Final
https://github.com/netty/netty/issues/9861
https://github.com/netty/netty/pull/9865
https://lists.apache.org/thread.html/r030beff88aeb6d7a2d6cd21342bd18686153ce6e26a4171d0e035663@%3Cissues.flume.apache.org%3E
https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E
https://lists.apache.org/thread.html/r1fcccf8bdb3531c28bc9aa605a6a1bea7e68cef6fc12e01faafb2fb5@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r205937c85817a911b0c72655c2377e7a2c9322d6ef6ce1b118d34d8d@%3Cdev.geode.apache.org%3E
https://lists.apache.org/thread.html/r2f2989b7815d809ff3fda8ce330f553e5f133505afd04ffbc135f35f@%3Cissues.spark.apache.org%3E
https://lists.apache.org/thread.html/r310d2ce22304d5298ff87f10134f918c87919b452734f9841d95682d@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r36fcf538b28f2029e8b4f6b9a772f3b107913a78f09b095c5b153a62@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r46f93de62b1e199f3f9babb18128681677c53493546f532ed88c359d@%3Creviews.spark.apache.org%3E
https://lists.apache.org/thread.html/r4d3f1d3e333d9c2b2f6e6ae8ed8750d4de03410ac294bcd12c7eefa3@%3Ccommits.cassandra.apache.org%3E
https://lists.apache.org/thread.html/r4ff40646e9ccce13560458419accdfc227b8b6ca4ead3a8a91decc74@%3Cissues.flume.apache.org%3E
https://lists.apache.org/thread.html/r640eb9b3213058a963e18291f903fc1584e577f60035f941e32f760a@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r6945f3c346b7af89bbd3526a7c9b705b1e3569070ebcd0964bcedd7d@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r70b1ff22ee80e8101805b9a473116dd33265709007d2deb6f8c80bf2@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r7790b9d99696d9eddce8a8c96f13bb68460984294ea6fea3800143e4@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r804895eedd72c9ec67898286eb185e04df852b0dd5fe53cf5b6138f9@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r81700644754e66ffea465c869cb477de25f8041e21598e8818fc2c45@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r819aaeb9944bdcfca438dcc51f05650dc728daf64dfd7d774fc2499b@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r832724df393a7ef25ca4c7c2eb83ad2d6c21c74569acda5233f9f1ec@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r959474dcf7f88565ed89f6252ca5a274419006cb71348f14764b183d@%3Ccommits.cassandra.apache.org%3E
https://lists.apache.org/thread.html/r96e08f929234e8ba1ef4a93a0fd2870f535a1f9ab628fabc46115986@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r9b20cdac704cf9a583400350e2d5b576fa8417c18ddb961201676c60@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/ra1a71b576a45426af5ee65255be9596ff3181a342f4ba73b800db78f@%3Cdev.geode.apache.org%3E
https://lists.apache.org/thread.html/ra2ace4bcb5cf487f72cbcbfa0f8cc08e755ec2b93d7e69f276148b08@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/ra9fbfe7d4830ae675bf34c7c0f8c22fc8a4099f65706c1bc4f54c593@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/raaac04b7567c554786132144bea3dcb72568edd410c1e6f0101742e7@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/rb5c065e7bd701b0744f9f28ad769943f91745102716c1eb516325f11@%3Cissues.spark.apache.org%3E
https://lists.apache.org/thread.html/rb84c57670ec48ef23f4d07973b7fa69f629b8e7fcfb48874362feb6f@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rbdb59c683d666130906a9c05a1d2b034c4cc08cda7ed41322bd54fe2@%3Cissues.flume.apache.org%3E
https://lists.apache.org/thread.html/rce71d33747010d32d31d90f5d737dae26291d96552f513a266c92fbb@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/rd8f72411fb75b98d366400ae789966373b5c3eb3f511e717caf3e49e@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/rdb69125652311d0c41f6066ff44072a3642cf33a4b5e3c4f9c1ec9c2@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/re45ee9256d3233c31d78e59ee59c7dc841c7fbd83d0769285b41e948@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/rf5b2dfb7401666a19915f8eaef3ba9f5c3386e2066fcd2ae66e16a2f@%3Cdev.flink.apache.org%3E
https://lists.apache.org/thread.html/rfb55f245b08d8a6ec0fb4dc159022227cd22de34c4419c2fbb18802b@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rff210a24f3a924829790e69eaefa84820902b7b31f17c3bf2def9114@%3Ccommits.druid.apache.org%3E
https://lists.debian.org/debian-lts-announce/2020/02/msg00017.html
https://lists.debian.org/debian-lts-announce/2020/02/msg00018.html
https://lists.debian.org/debian-lts-announce/2020/09/msg00003.html
https://lists.debian.org/debian-lts-announce/2020/09/msg00004.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TS6VX7OMXPDJIU5LRGUAHRK6MENAVJ46
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TS6VX7OMXPDJIU5LRGUAHRK6MENAVJ46/
https://nvd.nist.gov/vuln/detail/CVE-2019-20445
https://ubuntu.com/security/notices/USN-4532-1
https://ubuntu.com/security/notices/USN-4600-1
https://ubuntu.com/security/notices/USN-4600-2
https://usn.ubuntu.com/4532-1
https://usn.ubuntu.com/4532-1/
https://www.cve.org/CVERecord?id=CVE-2019-20445
https://www.debian.org/security/2021/dsa-4885
|
| io.netty:netty |
CVE-2021-21290 |
MEDIUM |
3.10.5.Final |
4.0.0 |
https://access.redhat.com/security/cve/CVE-2021-21290
https://github.com/netty/netty
https://github.com/netty/netty/commit/c735357bf29d07856ad171c6611a2e1a0e0000ec
https://github.com/netty/netty/security/advisories/GHSA-5mcr-gq6c-3hq2
https://lists.apache.org/thread.html/r0053443ce19ff125981559f8c51cf66e3ab4350f47812b8cf0733a05@%3Cdev.kafka.apache.org%3E
https://lists.apache.org/thread.html/r02e467123d45006a1dda20a38349e9c74c3a4b53e2e07be0939ecb3f@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/r0857b613604c696bf9743f0af047360baaded48b1c75cf6945a083c5@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r10308b625e49d4e9491d7e079606ca0df2f0a4d828f1ad1da64ba47b@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r1908a34b9cc7120e5c19968a116ddbcffea5e9deb76c2be4fa461904@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r2748097ea4b774292539cf3de6e3b267fc7a88d6c8ec40f4e2e87bd4@%3Cdev.kafka.apache.org%3E
https://lists.apache.org/thread.html/r2936730ef0a06e724b96539bc7eacfcd3628987c16b1b99c790e7b87@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r2fda4dab73097051977f2ab818f75e04fbcb15bb1003c8530eac1059@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r326ec431f06eab7cb7113a7a338e59731b8d556d05258457f12bac1b@%3Cdev.kafka.apache.org%3E
https://lists.apache.org/thread.html/r4efed2c501681cb2e8d629da16e48d9eac429624fd4c9a8c6b8e7020@%3Cdev.tinkerpop.apache.org%3E
https://lists.apache.org/thread.html/r584cf871f188c406d8bd447ff4e2fd9817fca862436c064d0951a071@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r59bac5c09f7a4179b9e2460e8f41c278aaf3b9a21cc23678eb893e41@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r5bf303d7c04da78f276765da08559fdc62420f1df539b277ca31f63b@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r5c701840aa2845191721e39821445e1e8c59711e71942b7796a6ec29@%3Cusers.activemq.apache.org%3E
https://lists.apache.org/thread.html/r5e4a540089760c8ecc2c411309d74264f1dad634ad93ad583ca16214@%3Ccommits.kafka.apache.org%3E
https://lists.apache.org/thread.html/r5e66e286afb5506cdfe9bbf68a323e8d09614f6d1ddc806ed0224700@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r71dbb66747ff537640bb91eb0b2b24edef21ac07728097016f58b01f@%3Ccommits.kafka.apache.org%3E
https://lists.apache.org/thread.html/r743149dcc8db1de473e6bff0b3ddf10140a7357bc2add75f7d1fbb12@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r790c2926efcd062067eb18fde2486527596d7275381cfaff2f7b3890@%3Cissues.bookkeeper.apache.org%3E
https://lists.apache.org/thread.html/r7bb3cdc192e9a6f863d3ea05422f09fa1ae2b88d4663e63696ee7ef5@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/r9924ef9357537722b28d04c98a189750b80694a19754e5057c34ca48@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/ra0fc2b4553dd7aaf75febb61052b7f1243ac3a180a71c01f29093013@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/ra503756ced78fdc2136bd33e87cb7553028645b261b1f5c6186a121e@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/rb06c1e766aa45ee422e8261a8249b561784186483e8f742ea627bda4@%3Cdev.kafka.apache.org%3E
https://lists.apache.org/thread.html/rb51d6202ff1a773f96eaa694b7da4ad3f44922c40b3d4e1a19c2f325@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/rb592033a2462548d061a83ac9449c5ff66098751748fcd1e2d008233@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rc0087125cb15b4b78e44000f841cd37fefedfda942fd7ddf3ad1b528@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rc488f80094872ad925f0c73d283d4c00d32def81977438e27a3dc2bb@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/rcd163e421273e8dca1c71ea298dce3dd11b41d51c3a812e0394e6a5d@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/rdba4f78ac55f803893a1a2265181595e79e3aa027e2e651dfba98c18@%3Cjira.kafka.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/02/msg00016.html
https://nvd.nist.gov/vuln/detail/CVE-2021-21290
https://security.netapp.com/advisory/ntap-20220210-0011
https://security.netapp.com/advisory/ntap-20220210-0011/
https://ubuntu.com/security/notices/USN-6049-1
https://www.cve.org/CVERecord?id=CVE-2021-21290
https://www.debian.org/security/2021/dsa-4885
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| io.netty:netty |
CVE-2021-21295 |
MEDIUM |
3.10.5.Final |
4.0.0 |
https://access.redhat.com/security/cve/CVE-2021-21295
https://github.com/Netflix/zuul/pull/980
https://github.com/netty/netty
https://github.com/netty/netty/commit/89c241e3b1795ff257af4ad6eadc616cb2fb3dc4
https://github.com/netty/netty/security/advisories/GHSA-wm47-8v5p-wjpj
https://lists.apache.org/thread.html/r02e467123d45006a1dda20a38349e9c74c3a4b53e2e07be0939ecb3f@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/r040a5e4d9cca2f98354b58a70b27099672276f66995c4e2e39545d0b@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r04a3e0d9f53421fb946c60cc54762b7151dc692eb4e39970a7579052@%3Ccommits.servicecomb.apache.org%3E
https://lists.apache.org/thread.html/r0b09f3e31e004fe583f677f7afa46bd30110904576c13c5ac818ac2c@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r15f66ada9a5faf4bac69d9e7c4521cedfefa62df9509881603791969@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r16c4b55ac82be72f28adad4f8061477e5f978199d5725691dcc82c24@%3Ccommits.servicecomb.apache.org%3E
https://lists.apache.org/thread.html/r1908a34b9cc7120e5c19968a116ddbcffea5e9deb76c2be4fa461904@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r1bca0b81193b74a451fc6d687ab58ef3a1f5ec40f6c61561d8dd9509@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r22adb45fe902aeafcd0a1c4db13984224a667676c323c66db3af38a1@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r22b2f34447d71c9a0ad9079b7860323d5584fb9b40eb42668c21eaf1@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r268850f26639ebe249356ed6d8edb54ee8943be6f200f770784fb190@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r27b7e5a588ec826b15f38c40be500c50073400019ce7b8adfd07fece@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r2936730ef0a06e724b96539bc7eacfcd3628987c16b1b99c790e7b87@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r2e93ce23e04c3f0a61e987d1111d0695cb668ac4ec4edbf237bd3e80@%3Ccommits.servicecomb.apache.org%3E
https://lists.apache.org/thread.html/r312ce5bd3c6bf08c138349b507b6f1c25fe9cf40b6f2b0014c9d12b1@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r32b0b640ad2be3b858f0af51c68a7d5c5a66a462c8bbb93699825cd3@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r33eb06b05afbc7df28d31055cae0cb3fd36cab808c884bf6d680bea5@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r393a339ab0b63ef9e6502253eeab26e7643b3e69738d5948b2b1d064@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r3c293431c781696681abbfe1c573c2d9dcdae6fd3ff330ea22f0433f@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r3c4596b9b37f5ae91628ccf169d33cd5a0da4b16b6c39d5bad8e03f3@%3Cdev.jackrabbit.apache.org%3E
https://lists.apache.org/thread.html/r3ff9e735ca33612d900607dc139ebd38a64cadc6bce292e53eb86d7f@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r490ca5611c150d193b320a2608209180713b7c68e501b67b0cffb925@%3Ccommits.servicecomb.apache.org%3E
https://lists.apache.org/thread.html/r4ea2f1a9d79d4fc1896e085f31fb60a21b1770d0a26a5250f849372d@%3Cissues.kudu.apache.org%3E
https://lists.apache.org/thread.html/r5232e33a1f3b310a3e083423f736f3925ebdb150844d60ac582809f8@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r5470456cf1409a99893ae9dd57439799f6dc1a60fda90e11570f66fe@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r57245853c7245baab09eae08728c52b58fd77666538092389cc3e882@%3Ccommits.servicecomb.apache.org%3E
https://lists.apache.org/thread.html/r584cf871f188c406d8bd447ff4e2fd9817fca862436c064d0951a071@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r59bac5c09f7a4179b9e2460e8f41c278aaf3b9a21cc23678eb893e41@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r5baac01f9e06c40ff7aab209d5751b3b58802c63734e33324b70a06a@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r5e66e286afb5506cdfe9bbf68a323e8d09614f6d1ddc806ed0224700@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r5fc5786cdd640b1b0a3c643237ce0011f0a08a296b11c0e2c669022c@%3Cdev.kafka.apache.org%3E
https://lists.apache.org/thread.html/r602e98daacc98934f097f07f2eed6eb07c18bfc1949c8489dc7bfcf5@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r67c4f90658fde875521c949448c54c98517beecdc7f618f902c620ec@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r67e6a636cbc1958383a1cd72b7fd0cd7493360b1dd0e6c12f5761798@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r6a122c25e352eb134d01e7f4fc4d345a491c5ee9453fef6fc754d15b@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r6a29316d758db628a1df49ca219d64caf493999b52cc77847bfba675@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r6aee7e3566cb3e51eeed2fd8786704d91f80a7581e00a787ba9f37f6@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r6d32fc3cd547f7c9a288a57c7f525f5d00a00d5d163613e0d10a23ef@%3Ccommits.servicecomb.apache.org%3E
https://lists.apache.org/thread.html/r70cebada51bc6d49138272437d8a28fe971d0197334ef906b575044c@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r790c2926efcd062067eb18fde2486527596d7275381cfaff2f7b3890@%3Cissues.bookkeeper.apache.org%3E
https://lists.apache.org/thread.html/r7bb3cdc192e9a6f863d3ea05422f09fa1ae2b88d4663e63696ee7ef5@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/r837bbcbf12e335e83ab448b1bd2c1ad7e86efdc14034b23811422e6a@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r855b4b6814ac829ce2d48dd9d8138d07f33387e710de798ee92c011e@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r86cd38a825ab2344f3e6cad570528852f29a4ffdf56ab67d75c36edf@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/r8bcaf7821247b1836b10f6a1a3a3212b06272fd4cde4a859de1b78cf@%3Ccommits.servicecomb.apache.org%3E
https://lists.apache.org/thread.html/r8db1d7b3b9acc9e8d2776395e280eb9615dd7790e1da8c57039963de@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r9051e4f484a970b5566dc1870ecd9c1eb435214e2652cf3ea4d0c0cc@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r905b92099998291956eebf4f1c5d95f5a0cbcece2946cc46d32274fd@%3Cdev.hbase.apache.org%3E
https://lists.apache.org/thread.html/r96ce18044880c33634c4b3fcecc57b8b90673c9364d63eba00385523@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r9924ef9357537722b28d04c98a189750b80694a19754e5057c34ca48@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/ra64d56a8a331ffd7bdcd24a9aaaeeedeacd5d639f5a683389123f898@%3Cdev.flink.apache.org%3E
https://lists.apache.org/thread.html/ra655e5cec74d1ddf62adacb71d398abd96f3ea2c588f6bbf048348eb@%3Cissues.kudu.apache.org%3E
https://lists.apache.org/thread.html/ra83096bcbfe6e1f4d54449f8a013117a0536404e9d307ab4a0d34f81@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/ra96c74c37ed7252f78392e1ad16442bd16ae72a4d6c8db50dd55c88b@%3Ccommits.servicecomb.apache.org%3E
https://lists.apache.org/thread.html/racc191a1f70a4f13155e8002c61bddef2870b26441971c697436ad5d@%3Ccommits.servicecomb.apache.org%3E
https://lists.apache.org/thread.html/rae198f44c3f7ac5264045e6ba976be1703cff38dcf1609916e50210d@%3Ccommits.servicecomb.apache.org%3E
https://lists.apache.org/thread.html/rb06c1e766aa45ee422e8261a8249b561784186483e8f742ea627bda4@%3Cdev.kafka.apache.org%3E
https://lists.apache.org/thread.html/rb51d6202ff1a773f96eaa694b7da4ad3f44922c40b3d4e1a19c2f325@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/rb523bb6c60196c5f58514b86a8585c2069a4852039b45de3818b29d2@%3Ccommits.servicecomb.apache.org%3E
https://lists.apache.org/thread.html/rb592033a2462548d061a83ac9449c5ff66098751748fcd1e2d008233@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rb95d42ce220ed4a4683aa17833b5006d657bc4254bc5cb03cd5e6bfb@%3Cissues.hbase.apache.org%3E
https://lists.apache.org/thread.html/rbadcbcb50195f00bbd196403865ced521ca70787999583c07be38d0e@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rbed09768f496244a2e138dbbe6d2847ddf796c9c8ef9e50f2e3e30d9@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rc0087125cb15b4b78e44000f841cd37fefedfda942fd7ddf3ad1b528@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rc165e36ca7cb5417aec3f21bbc4ec00fb38ecebdd96a82cfab9bd56f@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/rc73b8dd01b1be276d06bdf07883ecd93fe1a01f139a99ef30ba4308c@%3Ccommits.servicecomb.apache.org%3E
https://lists.apache.org/thread.html/rca0978b634a0c3ebee4126ec29c7f570b165fae3f8f3658754c1cbd3@%3Cissues.kudu.apache.org%3E
https://lists.apache.org/thread.html/rcd163e421273e8dca1c71ea298dce3dd11b41d51c3a812e0394e6a5d@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/rcf3752209a8b04996373bf57fdc808b3bfaa2be8702698a0323641f8@%3Ccommits.hbase.apache.org%3E
https://lists.apache.org/thread.html/rcfc154eb2de23d2dc08a56100341161e1a40a8ea86c693735437e8f2@%3Ccommits.servicecomb.apache.org%3E
https://lists.apache.org/thread.html/rcfc535afd413d9934d6ee509dce234dac41fa3747a7555befb17447e@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rd25c88aad0e76240dd09f0eb34bdab924933946429e068a167adcb73@%3Ccommits.servicecomb.apache.org%3E
https://lists.apache.org/thread.html/rd4a6b7dec38ea6cd28b6f94bd4b312629a52b80be3786d5fb0e474bc@%3Cissues.kudu.apache.org%3E
https://lists.apache.org/thread.html/rd8f72411fb75b98d366400ae789966373b5c3eb3f511e717caf3e49e@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/rdb4db3f5a9c478ca52a7b164680b88877a5a9c174e7047676c006b2c@%3Ccommits.servicecomb.apache.org%3E
https://lists.apache.org/thread.html/rdc096e13ac4501ea2e2b03a197682a313b85d3d3ec89d5ae5551b384@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rddbb4f8d5db23265bb63d14ef4b3723b438abc1589f877db11d35450@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/re4f70b62843e92163fab03b65e2aa8078693293a0c36f1cc260079ed@%3Ccommits.servicecomb.apache.org%3E
https://lists.apache.org/thread.html/re6207ebe2ca4d44f2a6deee695ad6f27fd29d78980f1d46ed1574f91@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/re7c69756a102bebce8b8681882844a53e2f23975a189363e68ad0324@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/reafc834062486adfc7be5bb8f7b7793be0d33f483678a094c3f9d468@%3Ccommits.servicecomb.apache.org%3E
https://lists.apache.org/thread.html/rf36f1114e84a3379b20587063686148e2d5a39abc0b8a66ff2a9087a@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rf87b870a22aa5c77c27900967b518a71a7d954c2952860fce3794b60@%3Ccommits.servicecomb.apache.org%3E
https://lists.apache.org/thread.html/rf934292a4a1c189827f625d567838d2c1001e4739b158638d844105b@%3Cissues.kudu.apache.org%3E
https://lists.apache.org/thread.html/rfff6ff8ffb31e8a32619c79774def44b6ffbb037c128c5ad3eab7171@%3Cissues.zookeeper.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2021-21295
https://security.netapp.com/advisory/ntap-20210604-0003
https://security.netapp.com/advisory/ntap-20210604-0003/
https://ubuntu.com/security/notices/USN-6049-1
https://www.cve.org/CVERecord?id=CVE-2021-21295
https://www.debian.org/security/2021/dsa-4885
https://www.oracle.com/security-alerts/cpuapr2022.html
|
| io.netty:netty |
CVE-2021-21409 |
MEDIUM |
3.10.5.Final |
4.0.0 |
https://access.redhat.com/security/cve/CVE-2021-21409
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21295
https://github.com/netty/netty
https://github.com/netty/netty/commit/b0fa4d5aab4215f3c22ce6123dd8dd5f38dc0432
https://github.com/netty/netty/security/advisories/GHSA-f256-j965-7f32
https://github.com/netty/netty/security/advisories/GHSA-wm47-8v5p-wjpj
https://lists.apache.org/thread.html/r0b09f3e31e004fe583f677f7afa46bd30110904576c13c5ac818ac2c@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r0ca82fec33334e571fe5b388272260778883e307e15415d7b1443de2@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r101f82d8f3b5af0bf79aecbd5b2dd3b404f6bb51d1a54c2c3d29bed9@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r1b3cb056364794f919aaf26ceaf7423de64e7fdd05a914066e7d5219@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r2732aa3884cacfecac4c54cfaa77c279ba815cad44b464a567216f83@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r31044fb995e894749cb821c6fe56f487c16a97028e6e360e59f09d58@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r4a98827bb4a7edbd69ef862f2351391845697c40711820d10df52ca5@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r4b8be87acf5b9c098a2ee350b5ca5716fe7afeaf0a21a4ee45a90687@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r4ea2f1a9d79d4fc1896e085f31fb60a21b1770d0a26a5250f849372d@%3Cissues.kudu.apache.org%3E
https://lists.apache.org/thread.html/r584cf871f188c406d8bd447ff4e2fd9817fca862436c064d0951a071@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r5baac01f9e06c40ff7aab209d5751b3b58802c63734e33324b70a06a@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r5cbea8614812289a9b98d0cfc54b47f54cef424ac98d5e315b791795@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r5f2f120b2b8d099226473db1832ffb4d7c1d6dc2d228a164bf293a8e@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r602e98daacc98934f097f07f2eed6eb07c18bfc1949c8489dc7bfcf5@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r61564d86a75403b854cdafee67fc69c8b88c5f6802c2c838f4282cc8@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r69efd8ef003f612c43e4154e788ca3b1f837feaacd16d97854402355@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r6dac9bd799ceac499c7a7e152a9b0dc7f2fe7f89ec5605d129bb047b@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r70c3a7bfa904f06a1902f4df20ee26e4f09a46b8fd3eb304dc57a2de@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r7879ddcb990c835c6b246654770d836f9d031dee982be836744e50ed@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r7b54563abebe3dbbe421e1ba075c2030d8d460372f8c79b7789684b6@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r823d4b27fcba8dad5fe945bdefce3ca5a0031187966eb6ef3cc22ba9@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r855b4b6814ac829ce2d48dd9d8138d07f33387e710de798ee92c011e@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r967002f0939e69bdec58f070735a19dd57c1f2b8f817949ca17cddae@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r9ec78dc409f3f1edff88f21cab53737f36aad46f582a9825389092e0@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r9fe840c36b74f92b8d4a089ada1f9fd1d6293742efa18b10e06b66d2@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/ra64d56a8a331ffd7bdcd24a9aaaeeedeacd5d639f5a683389123f898@%3Cdev.flink.apache.org%3E
https://lists.apache.org/thread.html/ra655e5cec74d1ddf62adacb71d398abd96f3ea2c588f6bbf048348eb@%3Cissues.kudu.apache.org%3E
https://lists.apache.org/thread.html/ra66e93703e3f4bd31bdfd0b6fb0c32ae96b528259bb1aa2b6d38e401@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/raa413040db6d2197593cc03edecfd168732e697119e6447b0a25d525@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rac8cf45a1bab9ead5c9a860cbadd6faaeb7792203617b6ec3874736d@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rafc77f9f03031297394f3d372ccea751b23576f8a2ae9b6b053894c5@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rba2a9ef1d0af882ab58fadb336a58818495245dda43d32a7d7837187@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rbde2f13daf4911504f0eaea43eee4f42555241b5f6d9d71564b6c5fa@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/rca0978b634a0c3ebee4126ec29c7f570b165fae3f8f3658754c1cbd3@%3Cissues.kudu.apache.org%3E
https://lists.apache.org/thread.html/rcae42fba06979934208bbd515584b241d3ad01d1bb8b063512644362@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rd4a6b7dec38ea6cd28b6f94bd4b312629a52b80be3786d5fb0e474bc@%3Cissues.kudu.apache.org%3E
https://lists.apache.org/thread.html/rd8f72411fb75b98d366400ae789966373b5c3eb3f511e717caf3e49e@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/rdd206d9dd7eb894cc089b37fe6edde2932de88d63a6d8368b44f5101@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rdd5715f3ee5e3216d5e0083a07994f67da6dbb9731ce9e7a6389b18e@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/re1911e05c08f3ec2bab85744d788773519a0afb27272a31ac2a0b4e8@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/re39391adcb863f0e9f3f15e7986255948f263f02e4700b82453e7102@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/re4b0141939370304d676fe23774d0c6fbc584b648919825402d0cb39@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/re7c69756a102bebce8b8681882844a53e2f23975a189363e68ad0324@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/re9e6ed60941da831675de2f8f733c026757fb4fa28a7b6c9f3dfb575@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/redef0fb5474fd686781007de9ddb852b24f1b04131a248d9a4789183@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rf148b2bf6c2754153a8629bc7495e216bd0bd4c915695486542a10b4@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rf38e4dcdefc7c59f7ba0799a399d6d6e37b555d406a1dfc2fcbf0b35@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/rf521ff2be2e2dd38984174d3451e6ee935c845948845c8fccd86371d@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rf934292a4a1c189827f625d567838d2c1001e4739b158638d844105b@%3Cissues.kudu.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2021-21409
https://security.netapp.com/advisory/ntap-20210604-0003
https://security.netapp.com/advisory/ntap-20210604-0003/
https://ubuntu.com/security/notices/USN-6049-1
https://www.cve.org/CVERecord?id=CVE-2021-21409
https://www.debian.org/security/2021/dsa-4885
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| io.netty:netty |
CVE-2021-43797 |
MEDIUM |
3.10.5.Final |
4.0.0 |
https://access.redhat.com/security/cve/CVE-2021-43797
https://github.com/netty/netty
https://github.com/netty/netty/commit/07aa6b5938a8b6ed7a6586e066400e2643897323
https://github.com/netty/netty/commit/07aa6b5938a8b6ed7a6586e066400e2643897323%20%28netty-4.1.71.Final%29
https://github.com/netty/netty/pull/11891
https://github.com/netty/netty/security/advisories/GHSA-wx5j-54mm-rqqq
https://lists.debian.org/debian-lts-announce/2023/01/msg00008.html
https://nvd.nist.gov/vuln/detail/CVE-2021-43797
https://security.netapp.com/advisory/ntap-20220107-0003
https://security.netapp.com/advisory/ntap-20220107-0003/
https://ubuntu.com/security/notices/USN-6049-1
https://www.cve.org/CVERecord?id=CVE-2021-43797
https://www.debian.org/security/2023/dsa-5316
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
|
| net.sf.jasperreports:jasperreports |
CVE-2025-10492 |
HIGH |
6.4.0 |
7.0.4 |
https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6
https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6/
https://community.jaspersoft.com/forums/topic/69926-cve-2025-10492-%E2%80%93-no-fix-available-after-jasperreports-upgrade-community-edition
https://github.com/Jaspersoft/jasperreports
https://github.com/Jaspersoft/jasperreports/commit/3541a3e2b1ad8b78388ac505091da75cb652a647
https://github.com/Jaspersoft/jasperreports/commit/827c2f27c4ca8e2c5b3142d76df9c1c8575f3569
https://github.com/Jaspersoft/jasperreports/issues/542
https://nvd.nist.gov/vuln/detail/CVE-2025-10492
|
| net.sf.jasperreports:jasperreports |
CVE-2026-6009 |
HIGH |
6.4.0 |
7.0.7 |
https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11
https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11/
https://github.com/Jaspersoft/jasperreports
https://nvd.nist.gov/vuln/detail/CVE-2026-6009
|
| org.apache.commons:commons-lang3 |
CVE-2025-48924 |
MEDIUM |
3.5 |
3.18.0 |
http://www.openwall.com/lists/oss-security/2025/07/11/1
https://access.redhat.com/security/cve/CVE-2025-48924
https://github.com/apache/commons-lang
https://github.com/apache/commons-lang/commit/b424803abdb2bec818e4fbcb251ce031c22aca53
https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1
https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html
https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html
https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html
https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html
https://nvd.nist.gov/vuln/detail/CVE-2025-48924
https://ubuntu.com/security/notices/USN-8364-1
https://www.cve.org/CVERecord?id=CVE-2025-48924
https://www.openwall.com/lists/oss-security/2025/07/11/1
|
| org.apache.commons:commons-vfs2 |
CVE-2025-27553 |
HIGH |
2.1 |
2.10.0 |
http://www.openwall.com/lists/oss-security/2025/03/23/1
https://access.redhat.com/security/cve/CVE-2025-27553
https://github.com/apache/commons-vfs
https://linux.oracle.com/cve/CVE-2025-27553.html
https://linux.oracle.com/errata/ELSA-2025-10548.html
https://lists.apache.org/thread/cnzqowyw9r2pl263cylmxhnvh41hyjcb
https://lists.debian.org/debian-lts-announce/2025/04/msg00006.html
https://nvd.nist.gov/vuln/detail/CVE-2025-27553
https://www.cve.org/CVERecord?id=CVE-2025-27553
|
| org.apache.commons:commons-vfs2 |
CVE-2025-30474 |
MEDIUM |
2.1 |
2.10.0 |
http://www.openwall.com/lists/oss-security/2025/03/23/2
https://github.com/apache/commons-vfs
https://issues.apache.org/jira/browse/VFS-169
https://lists.apache.org/thread/w6ztgnbk6ccry3470x191g3xwrpgy6f4
https://nvd.nist.gov/vuln/detail/CVE-2025-30474
|
| org.apache.httpcomponents:httpclient |
CVE-2020-13956 |
MEDIUM |
4.5.1 |
4.5.13, 5.0.3 |
https://access.redhat.com/security/cve/CVE-2020-13956
https://bugzilla.redhat.com/show_bug.cgi?id=1886587
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13956
https://errata.almalinux.org/8/ALSA-2022-1861.html
https://errata.rockylinux.org/RLSA-2022:1861
https://github.com/apache/httpcomponents-client
https://linux.oracle.com/cve/CVE-2020-13956.html
https://linux.oracle.com/errata/ELSA-2022-1861.html
https://lists.apache.org/thread.html/r03bbc318c81be21f5c8a9b85e34f2ecc741aa804a8e43b0ef2c37749@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/r043a75acdeb52b15dd5e9524cdadef4202e6a5228644206acf9363f9@%3Cdev.hive.apache.org%3E
https://lists.apache.org/thread.html/r06cf3ca5c8ceb94b39cd24a73d4e96153b485a7dac88444dd876accb@%3Cissues.drill.apache.org%3E
https://lists.apache.org/thread.html/r0a75b8f0f72f3e18442dc56d33f3827b905f2fe5b7ba48997436f5d1@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r0bebe6f9808ac7bdf572873b4fa96a29c6398c90dab29f131f3ebffe@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r12cb62751b35bdcda0ae2a08b67877d665a1f4d41eee0fa7367169e0@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/r132e4c6a560cfc519caa1aaee63bdd4036327610eadbd89f76dd5457@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r2835543ef0f91adcc47da72389b816e36936f584c7be584d2314fac3@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/r2a03dc210231d7e852ef73015f71792ac0fcaca6cccc024c522ef17d@%3Ccommits.creadur.apache.org%3E
https://lists.apache.org/thread.html/r2dc7930b43eadc78220d269b79e13ecd387e4bee52db67b2f47d4303@%3Cgitbox.hive.apache.org%3E
https://lists.apache.org/thread.html/r34178ab6ef106bc940665fd3f4ba5026fac3603b3fa2aefafa0b619d@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/r34efec51cb817397ccf9f86e25a75676d435ba5f83ee7b2eabdad707@%3Ccommits.creadur.apache.org%3E
https://lists.apache.org/thread.html/r3cecd59fba74404cbf4eb430135e1080897fb376f111406a78bed13a@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/r3f740e4c38bba1face49078aa5cbeeb558c27be601cc9712ad2dcd1e@%3Ccommits.creadur.apache.org%3E
https://lists.apache.org/thread.html/r4850b3fbaea02fde2886e461005e4af8d37c80a48b3ce2a6edca0e30@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r549ac8c159bf0c568c19670bedeb8d7c0074beded951d34b1c1d0d05@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r55b2a1d1e9b1ec9db792b93da8f0f99a4fd5a5310b02673359d9b4d1@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r5b55f65c123a7481104d663a915ec45a0d103e6aaa03f42ed1c07a89@%3Cdev.jackrabbit.apache.org%3E
https://lists.apache.org/thread.html/r5de3d3808e7b5028df966e45115e006456c4e8931dc1e29036f17927@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r5fec9c1d67f928179adf484b01e7becd7c0a6fdfe3a08f92ea743b90@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r63296c45d5d84447babaf39bd1487329d8a80d8d563e67a4b6f3d8a7@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/r69a94e2f302d1b778bdfefe90fcb4b8c50b226438c3c8c1d0de85a19@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/r6a3cda38d050ebe13c1bc9a28d0a8ec38945095d07eca49046bcb89f@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r6d672b46622842e565e00f6ef6bef83eb55d8792aac2bee75bff9a2a@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/r6dab7da30f8bf075f79ee189e33b45a197502e2676481bb8787fc0d7@%3Cdev.hc.apache.org%3E
https://lists.apache.org/thread.html/r6eb2dae157dbc9af1f30d1f64e9c60d4ebef618f3dce4a0e32d6ea4d@%3Ccommits.drill.apache.org%3E
https://lists.apache.org/thread.html/r70c429923100c5a4fae8e5bc71c8a2d39af3de4888f50a0ac3755e6f@%3Ccommits.creadur.apache.org%3E
https://lists.apache.org/thread.html/r87ddc09295c27f25471269ad0a79433a91224045988b88f0413a97ec@%3Cissues.bookkeeper.apache.org%3E
https://lists.apache.org/thread.html/r8aa1e5c343b89aec5b69961471950e862f15246cb6392910161c389b@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/r9e52a6c72c8365000ecd035e48cc9fee5a677a150350d4420c46443d@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/ra539f20ef0fb0c27ee39945b5f56bf162e5c13d1c60f7344dab8de3b@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/ra8bc6b61c5df301a6fe5a716315528ecd17ccb8a7f907e24a47a1a5e@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/rad6222134183046f3928f733bf680919e0c390739bfbfe6c90049673@%3Cissues.drill.apache.org%3E
https://lists.apache.org/thread.html/rae14ae25ff4a60251e3ba2629c082c5ba3851dfd4d21218b99b56652@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/rb33212dab7beccaf1ffef9b88610047c644f644c7a0ebdc44d77e381@%3Ccommits.turbine.apache.org%3E
https://lists.apache.org/thread.html/rb4ba262d6f08ab9cf8b1ebbcd9b00b0368ffe90dad7ad7918b4b56fc@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/rb725052404fabffbe093c83b2c46f3f87e12c3193a82379afbc529f8@%3Csolr-user.lucene.apache.org%3E
https://lists.apache.org/thread.html/rc0863892ccfd9fd0d0ae10091f24ee769fb39b8957fe4ebabfc11f17@%3Cdev.jackrabbit.apache.org%3E
https://lists.apache.org/thread.html/rc3739e0ad4bcf1888c6925233bfc37dd71156bbc8416604833095c42@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/rc505fee574fe8d18f9b0c655a4d120b0ae21bb6a73b96003e1d9be35@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/rc5c6ccb86d2afe46bbd4b71573f0448dc1f87bbcd5a0d8c7f8f904b2@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/rc990e2462ec32b09523deafb2c73606208599e196fa2d7f50bdbc587@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/rcced7ed3237c29cd19c1e9bf465d0038b8b2e967b99fc283db7ca553@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/rcd9ad5dda60c82ab0d0c9bd3e9cb1dc740804451fc20c7f451ef5cc4@%3Cgitbox.hive.apache.org%3E
https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/rd5ab56beb2ac6879f6ab427bc4e5f7691aed8362d17b713f61779858@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/re504acd4d63b8df2a7353658f45c9a3137e5f80e41cf7de50058b2c1@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/rea3dbf633dde5008d38bf6600a3738b9216e733e03f9ff7becf79625@%3Cissues.drill.apache.org%3E
https://lists.apache.org/thread.html/ree942561f4620313c75982a4e5f3b74fe6f7062b073210779648eec2@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/reef569c2419705754a3acf42b5f19b2a158153cef0e448158bc54917@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/rf03228972e56cb4a03e6d9558188c2938078cf3ceb23a3fead87c9ca@%3Cissues.bookkeeper.apache.org%3E
https://lists.apache.org/thread.html/rf43d17ed0d1fb4fb79036b582810ef60b18b1ef3add0d5dea825af1e@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/rf4db88c22e1be9eb60c7dc623d0528642c045fb196a24774ac2fa3a3@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/rf7ca60f78f05b772cc07d27e31bcd112f9910a05caf9095e38ee150f@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/rfb35f6db9ba1f1e061b63769a4eff5abadcc254ebfefc280e5a0dcf1@%3Ccommits.creadur.apache.org%3E
https://lists.apache.org/thread.html/rfbedcb586a1e7dfce87ee03c720e583fc2ceeafa05f35c542cecc624@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/rfc00884c7b7ca878297bffe45fcb742c362b00b26ba37070706d44c3@%3Cissues.hive.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2020-13956
https://priyankn.github.io/2021-02-26-CVE-2020-13956/
https://security.netapp.com/advisory/ntap-20220210-0002
https://security.netapp.com/advisory/ntap-20220210-0002/
https://ubuntu.com/security/notices/USN-5239-1
https://www.cve.org/CVERecord?id=CVE-2020-13956
https://www.openwall.com/lists/oss-security/2020/10/08/4
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| org.apache.mina:mina-core |
CVE-2024-52046 |
CRITICAL |
2.0.16 |
2.2.4, 2.1.10, 2.0.27 |
http://www.openwall.com/lists/oss-security/2024/12/25/1
https://access.redhat.com/security/cve/CVE-2024-52046
https://github.com/apache/mina
https://lists.apache.org/thread/4wxktgjpggdbto15d515wdctohb0qmv8
https://nvd.nist.gov/vuln/detail/CVE-2024-52046
https://security.netapp.com/advisory/ntap-20250103-0001
https://security.netapp.com/advisory/ntap-20250103-0001/
https://www.cve.org/CVERecord?id=CVE-2024-52046
|
| org.apache.mina:mina-core |
CVE-2026-41409 |
CRITICAL |
2.0.16 |
2.0.28, 2.1.11, 2.2.6 |
https://access.redhat.com/security/cve/CVE-2026-41409
https://github.com/advisories/GHSA-76h9-2vwh-w278
https://github.com/apache/mina
https://lists.apache.org/thread/9ddvsq6c4l5bhwq8l14sob4f8qjvx5c9
https://nvd.nist.gov/vuln/detail/CVE-2026-41409
https://www.cve.org/CVERecord?id=CVE-2026-41409
|
| org.apache.mina:mina-core |
CVE-2026-41635 |
CRITICAL |
2.0.16 |
2.0.28, 2.1.11, 2.2.6 |
http://www.openwall.com/lists/oss-security/2026/04/27/4
https://access.redhat.com/security/cve/CVE-2026-41635
https://github.com/apache/mina
https://lists.apache.org/thread/1l91w1mqsb3lwfd504fs045ylxntt2tm
https://nvd.nist.gov/vuln/detail/CVE-2026-41635
https://www.cve.org/CVERecord?id=CVE-2026-41635
|
| org.apache.mina:mina-core |
CVE-2026-47065 |
CRITICAL |
2.0.16 |
2.2.8, 2.1.13, 2.0.29 |
https://access.redhat.com/security/cve/CVE-2026-47065
https://github.com/apache/mina
https://lists.apache.org/thread/y7xj1bl8qo47p9bktb11hg5v6k1d4dyj
https://nvd.nist.gov/vuln/detail/CVE-2026-47065
https://www.cve.org/CVERecord?id=CVE-2026-47065
|
| org.apache.mina:mina-core |
CVE-2019-0231 |
HIGH |
2.0.16 |
2.0.21, 2.1.1 |
http://mina.apache.org/mina-project/index.html#mina-211-mina-2021-released-posted-on-april-14-2019
https://access.redhat.com/security/cve/CVE-2019-0231
https://nvd.nist.gov/vuln/detail/CVE-2019-0231
https://www.cve.org/CVERecord?id=CVE-2019-0231
https://www.openwall.com/lists/oss-security/2019/04/14/1
|
| org.apache.mina:mina-core |
CVE-2021-41973 |
MEDIUM |
2.0.16 |
2.1.5, 2.0.22 |
http://www.openwall.com/lists/oss-security/2021/11/01/2
http://www.openwall.com/lists/oss-security/2021/11/01/8
https://access.redhat.com/security/cve/CVE-2021-41973
https://lists.apache.org/thread.html/r0b907da9340d5ff4e6c1a4798ef4e79700a668657f27cca8a39e9250@%3Cdev.mina.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2021-41973
https://www.cve.org/CVERecord?id=CVE-2021-41973
https://www.oracle.com/security-alerts/cpuapr2022.html
|
| org.apache.poi:poi |
CVE-2017-12626 |
HIGH |
3.15 |
3.17 |
http://www.securityfocus.com/bid/102879
https://access.redhat.com/errata/RHSA-2018:1322
https://access.redhat.com/security/cve/CVE-2017-12626
https://bz.apache.org/bugzilla/show_bug.cgi?id=52372
https://bz.apache.org/bugzilla/show_bug.cgi?id=61294
https://bz.apache.org/bugzilla/show_bug.cgi?id=61295
https://bz.apache.org/bugzilla/show_bug.cgi?id=61338
https://github.com/apache/poi
https://lists.apache.org/thread.html/453d9af5dbabaccd9afb58d27279a9dbfe8e35f4e5ea1645ddd6960b@%3Cdev.poi.apache.org%3E
https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2017-12626
https://www.cve.org/CVERecord?id=CVE-2017-12626
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpuapr2020.html
https://www.oracle.com/security-alerts/cpujan2020.html
https://www.oracle.com/security-alerts/cpujan2021.html
https://www.oracle.com/security-alerts/cpujul2020.html
https://www.oracle.com/security-alerts/cpuoct2020.html
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
|
| org.apache.poi:poi |
CVE-2019-12415 |
MEDIUM |
3.15 |
4.1.1 |
https://access.redhat.com/security/cve/CVE-2019-12415
https://github.com/apache/poi
https://lists.apache.org/thread.html/13a54b6a03369cfb418a699180ffb83bd727320b6ddfec198b9b728e@%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/2ac0327748de0c2b3c1c012481b79936797c711724e0b7da83cf564c@%3Cuser.tika.apache.org%3E
https://lists.apache.org/thread.html/895164e03a3c327449069e2fd6ced0367561878b3ae6a8ec740c2007@%3Cuser.tika.apache.org%3E
https://lists.apache.org/thread.html/d88b8823867033514d7ec05d66f88c70dc207604d3dcbd44fd88464c@%3Cuser.tika.apache.org%3E
https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2019-12415
https://www.cve.org/CVERecord?id=CVE-2019-12415
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpuapr2020.html
https://www.oracle.com/security-alerts/cpujan2020.html
https://www.oracle.com/security-alerts/cpujan2021.html
https://www.oracle.com/security-alerts/cpujul2020.html
https://www.oracle.com/security-alerts/cpuoct2020.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| org.apache.poi:poi-ooxml |
CVE-2025-31672 |
MEDIUM |
3.15 |
5.4.0 |
http://www.openwall.com/lists/oss-security/2025/04/08/2
https://access.redhat.com/security/cve/CVE-2025-31672
https://bz.apache.org/bugzilla/show_bug.cgi?id=69620
https://github.com/apache/poi
https://lists.apache.org/thread/k14w8vcjqy4h34hh5kzldko78kpylkq5
https://nvd.nist.gov/vuln/detail/CVE-2025-31672
https://security.netapp.com/advisory/ntap-20250523-0004
https://security.netapp.com/advisory/ntap-20250523-0004/
https://www.cve.org/CVERecord?id=CVE-2025-31672
|
| org.apache.xmlbeans:xmlbeans |
CVE-2021-23926 |
CRITICAL |
2.6.0 |
3.0.0 |
https://access.redhat.com/security/cve/CVE-2021-23926
https://issues.apache.org/jira/browse/XMLBEANS-517
https://lists.apache.org/thread.html/r2dc5588009dc9f0310b7382269f932cc96cae4c3901b747dda1a7fed@%3Cjava-dev.axis.apache.org%3E
https://lists.apache.org/thread.html/rbb01d10512098894cd5f22325588197532c64f1c818ea7e4120d40c1@%3Cjava-dev.axis.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/06/msg00024.html
https://nvd.nist.gov/vuln/detail/CVE-2021-23926
https://poi.apache.org
https://poi.apache.org/
https://security.netapp.com/advisory/ntap-20210513-0004
https://security.netapp.com/advisory/ntap-20210513-0004/
https://www.cve.org/CVERecord?id=CVE-2021-23926
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| org.codehaus.groovy:groovy-all |
CVE-2020-17521 |
MEDIUM |
2.4.8 |
2.4.21, 2.5.14, 3.0.7 |
https://access.redhat.com/security/cve/CVE-2020-17521
https://github.com/apache/groovy
https://github.com/apache/groovy/commit/bcbe5c4c76db83736166530647c024ac1e47ef28
https://github.com/apache/groovy/pull/1425
https://groovy-lang.org/security.html#CVE-2020-17521
https://lists.apache.org/thread.html/r4b2f13c302eec98838ff7475253091fb9b75bc1038016ba00ebf6c08@%3Cdev.atlas.apache.org%3E
https://lists.apache.org/thread.html/ra9dab34bf8625511f23692ad0fcee2725f782e9aad6c5cdff6cf4465@%3Cnotifications.groovy.apache.org%3E
https://lists.apache.org/thread.html/rea63a4666ba245d2892471307772a2d8ce0f0741f341d6576625c1b3@%3Cdev.atlas.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2020-17521
https://security.netapp.com/advisory/ntap-20201218-0006
https://security.netapp.com/advisory/ntap-20201218-0006/
https://www.cve.org/CVERecord?id=CVE-2020-17521
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2021.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| org.elasticsearch:elasticsearch |
CVE-2019-7611 |
HIGH |
2.3.3 |
5.6.15, 6.6.1 |
https://access.redhat.com/security/cve/CVE-2019-7611
https://discuss.elastic.co/t/elastic-stack-6-6-1-and-5-6-15-security-update/169077
https://github.com/elastic/elasticsearch
https://nvd.nist.gov/vuln/detail/CVE-2019-7611
https://www.cve.org/CVERecord?id=CVE-2019-7611
https://www.elastic.co/community/security
|
| org.elasticsearch:elasticsearch |
CVE-2023-31418 |
HIGH |
2.3.3 |
7.17.13, 8.9.0 |
https://access.redhat.com/security/cve/CVE-2023-31418
https://discuss.elastic.co/t/elasticsearch-8-9-0-7-17-13-security-update/343616
https://nvd.nist.gov/vuln/detail/CVE-2023-31418
https://security.netapp.com/advisory/ntap-20231130-0005
https://security.netapp.com/advisory/ntap-20231130-0005/
https://www.cve.org/CVERecord?id=CVE-2023-31418
https://www.elastic.co/community/security
|
| org.elasticsearch:elasticsearch |
CVE-2018-3824 |
MEDIUM |
2.3.3 |
5.6.9, 6.2.4 |
https://discuss.elastic.co/t/elastic-stack-6-2-4-and-5-6-9-security-update/128422
https://nvd.nist.gov/vuln/detail/CVE-2018-3824
https://www.elastic.co/community/security
|
| org.elasticsearch:elasticsearch |
CVE-2019-7614 |
MEDIUM |
2.3.3 |
6.8.2, 7.2.1 |
https://access.redhat.com/security/cve/CVE-2019-7614
https://github.com/elastic/elasticsearch
https://nvd.nist.gov/vuln/detail/CVE-2019-7614
https://www.cve.org/CVERecord?id=CVE-2019-7614
https://www.elastic.co/community/security
https://www.elastic.co/community/security/
|
| org.elasticsearch:elasticsearch |
CVE-2020-7019 |
MEDIUM |
2.3.3 |
7.9.0, 6.8.12 |
https://access.redhat.com/security/cve/CVE-2020-7019
https://discuss.elastic.co/t/elastic-stack-7-9-0-and-6-8-12-security-update/245456
https://github.com/elastic/elasticsearch
https://nvd.nist.gov/vuln/detail/CVE-2020-7019
https://security.netapp.com/advisory/ntap-20200827-0001
https://security.netapp.com/advisory/ntap-20200827-0001/
https://www.cve.org/CVERecord?id=CVE-2020-7019
https://www.elastic.co/community/security/
|
| org.elasticsearch:elasticsearch |
CVE-2020-7021 |
MEDIUM |
2.3.3 |
6.8.14, 7.10.0 |
https://access.redhat.com/security/cve/CVE-2020-7021
https://discuss.elastic.co/t/elastic-stack-7-11-0-and-6-8-14-security-update/263915
https://github.com/elastic/elasticsearch
https://nvd.nist.gov/vuln/detail/CVE-2020-7021
https://security.netapp.com/advisory/ntap-20210319-0003
https://security.netapp.com/advisory/ntap-20210319-0003/
https://www.cve.org/CVERecord?id=CVE-2020-7021
|
| org.elasticsearch:elasticsearch |
CVE-2021-22135 |
MEDIUM |
2.3.3 |
7.11.2, 6.8.15 |
https://access.redhat.com/security/cve/CVE-2021-22135
https://discuss.elastic.co/t/elastic-stack-7-12-0-and-6-8-15-security-update/268125
https://nvd.nist.gov/vuln/detail/CVE-2021-22135
https://security.netapp.com/advisory/ntap-20210625-0003
https://security.netapp.com/advisory/ntap-20210625-0003/
https://www.cve.org/CVERecord?id=CVE-2021-22135
|
| org.elasticsearch:elasticsearch |
CVE-2021-22137 |
MEDIUM |
2.3.3 |
7.11.2, 6.8.15 |
https://access.redhat.com/security/cve/CVE-2021-22137
https://discuss.elastic.co/t/elastic-stack-7-12-0-and-6-8-15-security-update/268125
https://github.com/elastic/elasticsearch
https://nvd.nist.gov/vuln/detail/CVE-2021-22137
https://security.netapp.com/advisory/ntap-20210625-0003
https://security.netapp.com/advisory/ntap-20210625-0003/
https://www.cve.org/CVERecord?id=CVE-2021-22137
|
| org.elasticsearch:elasticsearch |
CVE-2021-22144 |
MEDIUM |
2.3.3 |
6.8.17, 7.13.3 |
https://access.redhat.com/security/cve/CVE-2021-22144
https://discuss.elastic.co/t/elasticsearch-7-13-3-and-6-8-17-security-update/278100
https://nvd.nist.gov/vuln/detail/CVE-2021-22144
https://security.netapp.com/advisory/ntap-20210827-0006
https://security.netapp.com/advisory/ntap-20210827-0006/
https://www.cve.org/CVERecord?id=CVE-2021-22144
https://www.oracle.com/security-alerts/cpuapr2022.html
|
| org.elasticsearch:elasticsearch |
CVE-2023-49921 |
MEDIUM |
2.3.3 |
7.17.16, 8.11.2 |
https://access.redhat.com/security/cve/CVE-2023-49921
https://discuss.elastic.co/t/elasticsearch-8-11-2-7-17-16-security-update-esa-2023-29/349179
https://github.com/elastic/elasticsearch
https://nvd.nist.gov/vuln/detail/CVE-2023-49921
https://www.cve.org/CVERecord?id=CVE-2023-49921
|
| org.elasticsearch:elasticsearch |
CVE-2024-23444 |
MEDIUM |
2.3.3 |
8.13.0, 7.17.23 |
https://discuss.elastic.co/t/elasticsearch-8-13-0-7-17-23-security-update-esa-2024-12/364157
https://github.com/elastic/elasticsearch
https://github.com/elastic/elasticsearch/commit/07296d596a1dee24730e33ad40b6726f70c6fc23
https://github.com/elastic/elasticsearch/commit/321c4e1e6b738bf80faa41dbb9881489a4ab44e5
https://github.com/elastic/elasticsearch/commit/bb1eddada3678257838b0590090ff9eb68acaa1b
https://github.com/elastic/elasticsearch/pull/106105
https://github.com/elastic/elasticsearch/pull/109834
https://nvd.nist.gov/vuln/detail/CVE-2024-23444
https://security.netapp.com/advisory/ntap-20250404-0001
https://security.netapp.com/advisory/ntap-20250404-0001/
|
| org.elasticsearch:elasticsearch |
CVE-2024-43709 |
MEDIUM |
2.3.3 |
7.17.21, 8.13.3 |
https://access.redhat.com/security/cve/CVE-2024-43709
https://discuss.elastic.co/t/elasticsearch-7-17-21-and-8-13-3-security-update-esa-2024-25/373442
https://github.com/elastic/elasticsearch
https://nvd.nist.gov/vuln/detail/CVE-2024-43709
https://security.netapp.com/advisory/ntap-20250221-0007
https://security.netapp.com/advisory/ntap-20250221-0007/
https://www.cve.org/CVERecord?id=CVE-2024-43709
|
| org.elasticsearch:elasticsearch |
CVE-2024-52979 |
MEDIUM |
2.3.3 |
7.17.25, 8.16.0 |
https://access.redhat.com/security/cve/CVE-2024-52979
https://discuss.elastic.co/t/elasticsearch-7-17-25-and-8-16-0-security-update-esa-2024-40/377709
https://github.com/elastic/elasticsearch
https://github.com/elastic/elasticsearch/commit/cbde7f456d7ccd98556302fccf3238bb4557fc91
https://github.com/elastic/elasticsearch/commit/f9b6b57d1d0f76e2d14291c04fb50abeb642cfbf
https://github.com/elastic/elasticsearch/pull/114002
https://nvd.nist.gov/vuln/detail/CVE-2024-52979
https://www.cve.org/CVERecord?id=CVE-2024-52979
|
| org.elasticsearch:elasticsearch |
CVE-2020-7020 |
LOW |
2.3.3 |
6.8.13, 7.9.2 |
https://access.redhat.com/security/cve/CVE-2020-7020
https://discuss.elastic.co/t/elastic-stack-7-9-3-and-6-8-13-security-update/253033
https://github.com/elastic/elasticsearch
https://nvd.nist.gov/vuln/detail/CVE-2020-7020
https://security.netapp.com/advisory/ntap-20201123-0001
https://security.netapp.com/advisory/ntap-20201123-0001/
https://staging-website.elastic.co/community/security
https://staging-website.elastic.co/community/security/
https://www.cve.org/CVERecord?id=CVE-2020-7020
https://www.elastic.co/community/security/
|
| org.omnifaces:omnifaces |
CVE-2026-41883 |
HIGH |
2.6 |
1.14.2, 2.7.32, 3.14.16, 4.7.5, 5.2.3 |
https://github.com/omnifaces/omnifaces
https://github.com/omnifaces/omnifaces/security/advisories/GHSA-vp6r-9m58-5xv8
https://nvd.nist.gov/vuln/detail/CVE-2026-41883
|
| org.omnifaces:omnifaces |
GHSA-fp43-vj7g-pg92 |
HIGH |
2.6 |
1.14.3, 2.7.33, 3.14.23, 4.7.12, 5.4.2 |
https://github.com/omnifaces/omnifaces
https://github.com/omnifaces/omnifaces/commit/59d6c5188c39418546fe500d05036645987a77d1
https://github.com/omnifaces/omnifaces/commit/a52b92461cf39d983f51ce8724fe7e6b944073e4
https://github.com/omnifaces/omnifaces/commit/aa42da361821ddfbb85b126564e71587347d2786
https://github.com/omnifaces/omnifaces/commit/c43eef01174a4dc09cec44eff553ff6284150af7
https://github.com/omnifaces/omnifaces/commit/d5cae243c4692555efaa4ba774e0f8f60e3f4db5
https://github.com/omnifaces/omnifaces/security/advisories/GHSA-fp43-vj7g-pg92
|
| org.primefaces:primefaces |
CVE-2020-10544 |
MEDIUM |
6.1 |
8.0 |
https://github.com/primefaces/primefaces
https://github.com/primefaces/primefaces/commit/9982c4f7a83f75e3ab06168fa283e3d6128dfd1f
https://github.com/primefaces/primefaces/issues/5642
https://nvd.nist.gov/vuln/detail/CVE-2020-10544
|
| org.springframework:spring-beans |
CVE-2022-22965 |
CRITICAL |
3.0.6.RELEASE |
5.2.20.RELEASE, 5.3.18 |
http://packetstormsecurity.com/files/166713/Spring4Shell-Code-Execution.html
http://packetstormsecurity.com/files/167011/Spring4Shell-Spring-Framework-Class-Property-Remote-Code-Execution.html
https://access.redhat.com/security/cve/CVE-2022-22965
https://bugalert.org/content/notices/2022-03-30-spring.html
https://cert-portal.siemens.com/productcert/pdf/ssa-254054.pdf
https://github.com/spring-projects/spring-boot/releases/tag/v2.5.12
https://github.com/spring-projects/spring-boot/releases/tag/v2.6.6
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/002546b3e4b8d791ea6acccb81eb3168f51abb15
https://github.com/spring-projects/spring-framework/issues/28260
https://github.com/spring-projects/spring-framework/releases/tag/v5.2.20.RELEASE
https://github.com/spring-projects/spring-framework/releases/tag/v5.3.18
https://nvd.nist.gov/vuln/detail/CVE-2022-22965
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0005
https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement
https://tanzu.vmware.com/security/cve-2022-22965
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67
https://ubuntu.com/security/notices/USN-7165-1
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22965
https://www.cve.org/CVERecord?id=CVE-2022-22965
https://www.cyberkendra.com/2022/03/spring4shell-details-and-exploit-code.html
https://www.kb.cert.org/vuls/id/970766
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.praetorian.com/blog/spring-core-jdk9-rce/
|
| org.springframework:spring-beans |
CVE-2022-22970 |
HIGH |
3.0.6.RELEASE |
5.2.22.RELEASE, 5.3.20 |
https://access.redhat.com/security/cve/CVE-2022-22970
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/50177b1ad3485bd44239b1756f6c14607476fcf2
https://github.com/spring-projects/spring-framework/commit/83186b689f11f5e6efe7ccc08fdeb92f66fcd583
https://nvd.nist.gov/vuln/detail/CVE-2022-22970
https://security.netapp.com/advisory/ntap-20220616-0006
https://security.netapp.com/advisory/ntap-20220616-0006/
https://tanzu.vmware.com/security/cve-2022-22970
https://www.cve.org/CVERecord?id=CVE-2022-22970
https://www.oracle.com/security-alerts/cpujul2022.html
|
| org.springframework:spring-context |
CVE-2022-22968 |
HIGH |
3.0.6.RELEASE |
5.3.19, 5.2.21.RELEASE |
https://access.redhat.com/security/cve/CVE-2022-22968
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/833e750175349ab4fd502109a8b41af77e25cdea
https://github.com/spring-projects/spring-framework/commit/a7cf19cec5ebd270f97a194d749e2d5701ad2ab7
https://nvd.nist.gov/vuln/detail/CVE-2022-22968
https://security.netapp.com/advisory/ntap-20220602-0004
https://security.netapp.com/advisory/ntap-20220602-0004/
https://tanzu.vmware.com/security/cve-2022-22968
https://www.cve.org/CVERecord?id=CVE-2022-22968
https://www.oracle.com/security-alerts/cpujul2022.html
|
| org.springframework:spring-context |
CVE-2024-38820 |
MEDIUM |
3.0.6.RELEASE |
6.1.14 |
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/23656aebc6c7d0f9faff1080981eb4d55eff296c
https://github.com/spring-projects/spring-framework/commits/v6.2.0-RC2
https://nvd.nist.gov/vuln/detail/CVE-2024-38820
https://security.netapp.com/advisory/ntap-20241129-0003
https://security.netapp.com/advisory/ntap-20241129-0003/
https://spring.io/security/cve-2024-38820
|
| org.springframework:spring-context |
CVE-2025-22233 |
LOW |
3.0.6.RELEASE |
6.2.7, 6.1.20 |
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/edfcc6ffb188e4614ec9b212e3208b666981851c
https://github.com/spring-projects/spring-framework/commit/ee62701f5634e904e42e218baad142cea2bcd332
https://github.com/spring-projects/spring-framework/issues/34801
https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N&version=3.1
https://nvd.nist.gov/vuln/detail/CVE-2025-22233
https://spring.io/security/cve-2025-22233
|
| org.springframework:spring-core |
CVE-2015-5211 |
HIGH |
3.0.6.RELEASE |
4.2.2, 4.1.8, 3.2.15 |
https://github.com/advisories/GHSA-pgf9-h69p-pcgf
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/03f547
https://github.com/spring-projects/spring-framework/commit/03f547eb9868f48f44d59b56067d4ac4740672c3
https://github.com/spring-projects/spring-framework/commit/2bd1da
https://github.com/spring-projects/spring-framework/commit/2bd1daa75ee0b8ec33608ca6ab065ef3e1815543
https://github.com/spring-projects/spring-framework/commit/a95c3d
https://github.com/spring-projects/spring-framework/commit/a95c3d820dbc4c3ae752f1b3ee22ee860b162402
https://jira.spring.io/browse/SPR-13548
https://lists.debian.org/debian-lts-announce/2019/07/msg00012.html
https://nvd.nist.gov/vuln/detail/CVE-2015-5211
https://pivotal.io/security/cve-2015-5211
https://ubuntu.com/security/notices/USN-4774-1
https://www.cve.org/CVERecord?id=CVE-2015-5211
https://www.trustwave.com/Resources/SpiderLabs-Blog/Reflected-File-Download---A-New-Web-Attack-Vector
https://www.trustwave.com/Resources/SpiderLabs-Blog/Reflected-File-Download---A-New-Web-Attack-Vector/
|
| org.springframework:spring-core |
CVE-2016-5007 |
HIGH |
3.0.6.RELEASE |
4.3.1 |
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
http://www.securityfocus.com/bid/91687
https://access.redhat.com/security/cve/CVE-2016-5007
https://github.com/advisories/GHSA-8crv-49fr-2h6j
https://github.com/spring-projects/spring-framework/commit/a30ab30e4e9ae021fdda04e9abfc228476b846b5
https://github.com/spring-projects/spring-security/commit/e4c13e3c0ee7f06f59d3b43ca6734215ad7d8974
https://github.com/spring-projects/spring-security/issues/3964
https://nvd.nist.gov/vuln/detail/CVE-2016-5007
https://pivotal.io/security/cve-2016-5007
https://www.cve.org/CVERecord?id=CVE-2016-5007
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
|
| org.springframework:spring-core |
CVE-2018-1272 |
HIGH |
3.0.6.RELEASE |
4.3.15, 5.0.5 |
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
http://www.securityfocus.com/bid/103697
https://access.redhat.com/errata/RHSA-2018:1320
https://access.redhat.com/errata/RHSA-2018:2669
https://access.redhat.com/security/cve/CVE-2018-1272
https://github.com/advisories/GHSA-4487-x383-qpph
https://github.com/spring-projects/spring-framework/commit/ab2410c754b67902f002bfcc0c3895bd7772d39
https://github.com/spring-projects/spring-framework/commit/e02ff3a0da50744b0980d5d665fd242eedea767
https://nvd.nist.gov/vuln/detail/CVE-2018-1272
https://pivotal.io/security/cve-2018-1272
https://www.cve.org/CVERecord?id=CVE-2018-1272
https://www.oracle.com/security-alerts/cpujul2020.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
|
| org.springframework:spring-core |
CVE-2014-3578 |
MEDIUM |
3.0.6.RELEASE |
3.2.9, 4.0.5 |
http://jvn.jp/en/jp/JVN49154900/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000054
http://pivotal.io/security/cve-2014-3578
http://rhn.redhat.com/errata/RHSA-2015-0720.html
http://www.pivotal.io/security/cve-2014-3578
http://www.securityfocus.com/bid/68042
https://access.redhat.com/security/cve/CVE-2014-3578
https://bugzilla.redhat.com/show_bug.cgi?id=1131882
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/748167bfa33c3c69db2d8dbdc3a0e9da692da3a0
https://github.com/spring-projects/spring-framework/commit/8ee465103850a3dca018273fe5952e40d5c45a66
https://github.com/spring-projects/spring-framework/commit/f6fddeb6eb7da625fd711ab371ff16512f431e8d
https://github.com/spring-projects/spring-framework/issues/16414
https://jvn.jp/en/jp/JVN49154900/
https://lists.debian.org/debian-lts-announce/2019/07/msg00012.html
https://nvd.nist.gov/vuln/detail/CVE-2014-3578
https://rhn.redhat.com/errata/RHSA-2015-0234.html
https://rhn.redhat.com/errata/RHSA-2015-0235.html
https://ubuntu.com/security/notices/USN-4774-1
https://www.cve.org/CVERecord?id=CVE-2014-3578
|
| org.springframework:spring-core |
CVE-2018-1257 |
MEDIUM |
3.0.6.RELEASE |
5.0.6, 4.3.17 |
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
http://www.securityfocus.com/bid/104260
https://access.redhat.com/errata/RHSA-2018:1809
https://access.redhat.com/errata/RHSA-2018:3768
https://access.redhat.com/security/cve/CVE-2018-1257
https://github.com/advisories/GHSA-rcpf-vj53-7h2m
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/246a6db1cad205ca9b6fca00c544ab7443ba202
https://github.com/spring-projects/spring-framework/commit/ff2228fdaf131d57b5c8c5918ee8d07c6dd9bba
https://nvd.nist.gov/vuln/detail/CVE-2018-1257
https://pivotal.io/security/cve-2018-1257
https://www.cve.org/CVERecord?id=CVE-2018-1257
https://www.oracle.com/security-alerts/cpujan2020.html
https://www.oracle.com/security-alerts/cpujul2020.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
|
| org.springframework:spring-core |
CVE-2018-1271 |
MEDIUM |
3.0.6.RELEASE |
5.0.5, 4.3.15 |
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
http://www.securityfocus.com/bid/103699
https://access.redhat.com/errata/RHSA-2018:1320
https://access.redhat.com/errata/RHSA-2018:2669
https://access.redhat.com/errata/RHSA-2018:2939
https://access.redhat.com/security/cve/CVE-2018-1271
https://github.com/advisories/GHSA-g8hw-794c-4j9g
https://github.com/spring-projects/spring-framework/commit/0e28bee0f155b9bf240b4bafc4646e4810cb23f8
https://github.com/spring-projects/spring-framework/commit/13356a7ee2240f740737c5c83bdccdacc30603ab
https://github.com/spring-projects/spring-framework/commit/695bf2961feffd35b5560ccc982a2189dcca611f
https://github.com/spring-projects/spring-framework/commit/91b803a2310344d925e5d4b1709bbcea90375548
https://github.com/spring-projects/spring-framework/commit/98ad23bef8e2e04143f8f5b201380543a8d8c0c3
https://github.com/spring-projects/spring-framework/commit/b9ebdaaf3710db473a2e1fec8641c316483a22aa
https://github.com/spring-projects/spring-framework/commit/f046a066eceefa0799d1bc89bd6e1318f39bdf69
https://github.com/spring-projects/spring-framework/commit/f59ea610dfcf55cd0b42f6dd76a9b3dab0218aaa
https://nvd.nist.gov/vuln/detail/CVE-2018-1271
https://pivotal.io/security/cve-2018-1271
https://www.cve.org/CVERecord?id=CVE-2018-1271
https://www.oracle.com/security-alerts/cpujul2020.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
|
| org.springframework:spring-core |
CVE-2026-41848 |
LOW |
3.0.6.RELEASE |
7.0.8, 6.2.19 |
https://access.redhat.com/security/cve/CVE-2026-41848
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/12b44f2545a1bec6150c7a05e66092c732597a94
https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19
https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8
https://nvd.nist.gov/vuln/detail/CVE-2026-41848
https://spring.io/security/cve-2026-41848
https://www.cve.org/CVERecord?id=CVE-2026-41848
|
| org.springframework:spring-expression |
CVE-2023-20863 |
HIGH |
3.0.6.RELEASE |
6.0.8, 5.3.27, 5.2.24.RELEASE |
https://access.redhat.com/security/cve/CVE-2023-20863
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/965a6392757d20f9db19241126fcc719a51eac15
https://github.com/spring-projects/spring-framework/commit/b73f5fcac22555f844cf27a7eeb876cb9d7f7f7e
https://github.com/spring-projects/spring-framework/commit/ebc82654282bda547fbc20a9749ab1bda886a46f
https://nvd.nist.gov/vuln/detail/CVE-2023-20863
https://security.netapp.com/advisory/ntap-20240524-0015
https://security.netapp.com/advisory/ntap-20240524-0015/
https://spring.io/security/cve-2023-20863
https://www.cve.org/CVERecord?id=CVE-2023-20863
|
| org.springframework:spring-expression |
CVE-2026-41849 |
HIGH |
3.0.6.RELEASE |
|
https://access.redhat.com/security/cve/CVE-2026-41849
https://github.com/spring-projects/spring-framework
https://nvd.nist.gov/vuln/detail/CVE-2026-41849
https://spring.io/security/cve-2026-41849
https://www.cve.org/CVERecord?id=CVE-2026-41849
|
| org.springframework:spring-expression |
CVE-2026-41850 |
HIGH |
3.0.6.RELEASE |
7.0.8, 6.2.19 |
https://access.redhat.com/security/cve/CVE-2026-41850
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19
https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8
https://nvd.nist.gov/vuln/detail/CVE-2026-41850
https://spring.io/security/cve-2026-41850
https://www.cve.org/CVERecord?id=CVE-2026-41850
|
| org.springframework:spring-expression |
CVE-2022-22950 |
MEDIUM |
3.0.6.RELEASE |
5.3.17, 5.2.20.RELEASE |
https://access.redhat.com/security/cve/CVE-2022-22950
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/83ac65915871067c39a4fb255e0d484c785c0c11
https://github.com/spring-projects/spring-framework/issues/28145
https://github.com/spring-projects/spring-framework/issues/28257
https://github.com/spring-projects/spring-framework/releases/tag/v5.2.20.RELEASE
https://github.com/spring-projects/spring-framework/releases/tag/v5.3.17
https://nvd.nist.gov/vuln/detail/CVE-2022-22950
https://tanzu.vmware.com/security/cve-2022-22950
https://www.cve.org/CVERecord?id=CVE-2022-22950
|
| org.springframework:spring-expression |
CVE-2023-20861 |
MEDIUM |
3.0.6.RELEASE |
6.0.7, 5.3.26, 5.2.23.RELEASE |
https://access.redhat.com/security/cve/CVE-2023-20861
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/430fc25acad2e85cbdddcd52b64481691f03ebd1
https://github.com/spring-projects/spring-framework/commit/52c93b1c4b24d70de233a958e60e7c5822bd274f
https://github.com/spring-projects/spring-framework/commit/935c29e3ddba5b19951e54f6685c70ed45d9cbe5
https://nvd.nist.gov/vuln/detail/CVE-2023-20861
https://security.netapp.com/advisory/ntap-20230420-0007
https://security.netapp.com/advisory/ntap-20230420-0007/
https://spring.io/blog/2023/03/20/spring-framework-6-0-7-and-5-3-26-fix-cve-2023-20860-and-cve-2023-20861
https://spring.io/security/cve-2023-20861
https://www.cve.org/CVERecord?id=CVE-2023-20861
|
| org.springframework:spring-expression |
CVE-2024-38808 |
MEDIUM |
3.0.6.RELEASE |
5.3.39 |
https://access.redhat.com/security/cve/CVE-2024-38808
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/26f2dad388499faecf99e75b8856788e95d8d658
https://github.com/spring-projects/spring-framework/commit/f44d13cb7816e586b86c02421af4f5498391111c
https://nvd.nist.gov/vuln/detail/CVE-2024-38808
https://security.netapp.com/advisory/ntap-20240920-0002
https://security.netapp.com/advisory/ntap-20240920-0002/
https://spring.io/security/cve-2024-38808
https://www.cve.org/CVERecord?id=CVE-2024-38808
|
| org.springframework:spring-expression |
CVE-2026-41851 |
MEDIUM |
3.0.6.RELEASE |
7.0.8, 6.2.19 |
https://access.redhat.com/security/cve/CVE-2026-41851
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/2c18c33ce0f89bf718c184190cfb7ed49b4276fb
https://github.com/spring-projects/spring-framework/commit/76a36dfd707cddbe7118a81c2e055b36501d2cff
https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19
https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8
https://nvd.nist.gov/vuln/detail/CVE-2026-41851
https://spring.io/security/cve-2026-41851
https://www.cve.org/CVERecord?id=CVE-2026-41851
|
| org.springframework:spring-expression |
CVE-2026-41852 |
LOW |
3.0.6.RELEASE |
7.0.8, 6.2.19 |
https://access.redhat.com/security/cve/CVE-2026-41852
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19
https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8
https://nvd.nist.gov/vuln/detail/CVE-2026-41852
https://spring.io/security/cve-2026-41852
https://www.cve.org/CVERecord?id=CVE-2026-41852
|
| No Misconfigurations found |
|---|