Java - Trivy Report - 2026-10-28 03:13:23.614586125 +0000 UTC m=+56.595656054

jar
Package Vulnerability ID Severity Installed Version Fixed Version Links
com.esotericsoftware.yamlbeans:yamlbeans CVE-2023-24621 HIGH 1.15 https://contrastsecurity.com https://github.com/Contrast-Security-OSS/yamlbeans/blob/main/SECURITY.md https://github.com/EsotericSoftware https://github.com/EsotericSoftware/yamlbeans https://nvd.nist.gov/vuln/detail/CVE-2023-24621
com.esotericsoftware.yamlbeans:yamlbeans CVE-2023-24620 MEDIUM 1.15 https://contrastsecurity.com https://github.com/Contrast-Security-OSS/yamlbeans/blob/main/SECURITY.md https://github.com/EsotericSoftware https://github.com/EsotericSoftware/yamlbeans https://nvd.nist.gov/vuln/detail/CVE-2023-24620
com.fasterxml.jackson.core:jackson-core CVE-2025-52999 HIGH 2.10.2 2.15.0 https://access.redhat.com/errata/RHSA-2025:12280 https://access.redhat.com/security/cve/CVE-2025-52999 https://advisory.echohq.com/cve/CVE-2025-52999 https://bugzilla.redhat.com/2374804 https://bugzilla.redhat.com/show_bug.cgi?id=2374804 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52999 https://errata.almalinux.org/9/ALSA-2025-12280.html https://errata.rockylinux.org/RLSA-2025:12280 https://github.com/FasterXML/jackson-core https://github.com/FasterXML/jackson-core/pull/943 https://github.com/FasterXML/jackson-core/security/advisories/GHSA-h46c-h94j-95f3 https://github.com/advisories/GHSA-h46c-h94j-95f3 https://linux.oracle.com/cve/CVE-2025-52999.html https://linux.oracle.com/errata/ELSA-2025-14126.html https://nvd.nist.gov/vuln/detail/CVE-2025-52999 https://www.cve.org/CVERecord?id=CVE-2025-52999
com.fasterxml.jackson.core:jackson-core CVE-2026-68494 HIGH 2.10.2 2.18.8, 2.21.4 https://access.redhat.com/security/cve/CVE-2026-68494 https://advisory.echohq.com/cve/CVE-2026-68494 https://github.com/FasterXML/jackson-core https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641 https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8 https://github.com/FasterXML/jackson-core/pull/1611 https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9 https://github.com/advisories/GHSA-72hv-8253-57qq https://nvd.nist.gov/vuln/detail/CVE-2026-68494 https://www.cve.org/CVERecord?id=CVE-2026-18401 https://www.cve.org/CVERecord?id=CVE-2026-68494
com.fasterxml.jackson.core:jackson-core CVE-2026-89425 HIGH 2.10.2 2.21.7, 2.22.3, 2.18.11 https://access.redhat.com/errata/RHSA-2026:86706 https://access.redhat.com/security/cve/CVE-2026-89425 https://advisory.echohq.com/cve/CVE-2026-89425 https://bugzilla.redhat.com/2538720 https://bugzilla.redhat.com/2539084 https://bugzilla.redhat.com/show_bug.cgi?id=2538720 https://bugzilla.redhat.com/show_bug.cgi?id=2539084 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89407 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89425 https://errata.almalinux.org/9/ALSA-2026-86706.html https://errata.rockylinux.org/RLSA-2026:86706 https://github.com/FasterXML/jackson-core https://github.com/FasterXML/jackson-core/commit/211cf2c5d91abbec38067f37efc1363cd4e88ee3 https://github.com/FasterXML/jackson-core/pull/1698 https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-2.18.11 https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-3.2.3 https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf https://linux.oracle.com/cve/CVE-2026-89425.html https://linux.oracle.com/errata/ELSA-2026-86706.html https://nvd.nist.gov/vuln/detail/CVE-2026-89425 https://www.cve.org/CVERecord?id=CVE-2026-89425
com.fasterxml.jackson.core:jackson-core CVE-2025-49128 MEDIUM 2.10.2 2.13.0 https://access.redhat.com/security/cve/CVE-2025-49128 https://advisory.echohq.com/cve/CVE-2025-49128 https://github.com/FasterXML/jackson-core https://github.com/FasterXML/jackson-core/commit/a6c297682737dde13337cb7c3020f299518609a8 https://github.com/FasterXML/jackson-core/pull/652 https://github.com/FasterXML/jackson-core/security/advisories/GHSA-wf8f-6423-gfxg https://github.com/advisories/GHSA-wf8f-6423-gfxg https://nvd.nist.gov/vuln/detail/CVE-2021-22145 https://nvd.nist.gov/vuln/detail/CVE-2025-49128 https://www.cve.org/CVERecord?id=CVE-2025-49128
com.fasterxml.jackson.core:jackson-databind CVE-2020-25649 HIGH 2.10.2 2.6.7.4, 2.9.10.7, 2.10.5.1 https://access.redhat.com/security/cve/CVE-2020-25649 https://bugzilla.redhat.com/show_bug.cgi?id=1887664 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/3d932709abd0b5390efe67451653fc9efa9db677 https://github.com/FasterXML/jackson-databind/commit/612f971b78c60202e9cd75a299050c8f2d724a59 https://github.com/FasterXML/jackson-databind/commit/612f971b78c60202e9cd75a299050c8f2d724a59%20%28jackson-databind-2.11.0.rc1%29 https://github.com/FasterXML/jackson-databind/issues/2589 https://lists.apache.org/thread.html/r011d1430e8f40dff9550c3bc5d0f48b14c01ba8aecabd91d5e495386@%3Ccommits.turbine.apache.org%3E https://lists.apache.org/thread.html/r024b7bda9c43c5560d81238748775c5ecfe01b57280f90df1f773949@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r04529cedaca40c2ff90af4880493f9c88a8ebf4d1d6c861d23108a5a@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r0881e23bd9034c8f51fdccdc8f4d085ba985dcd738f8520569ca5c3d@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r0b8dc3acd4503e4ecb6fbd6ea7d95f59941168d8452ac0ab1d1d96bb@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r1b7ed0c4b6c4301d4dfd6fdbc5581b0a789d3240cab55d766f33c6c6@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r2882fc1f3032cd7be66e28787f04ec6f1874ac68d47e310e30ff7eb1@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r2b6ddb3a4f4cd11d8f6305011e1b7438ba813511f2e3ab3180c7ffda@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/r2eb66c182853c69ecfb52f63d3dec09495e9b65be829fd889a081ae1@%3Cdev.hive.apache.org%3E https://lists.apache.org/thread.html/r2f5c5479f99398ef344b7ebd4d90bc3316236c45d0f3bc42090efcd7@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r31f4ee7d561d56a0c2c2c6eb1d6ce3e05917ff9654fdbfec05dc2b83@%3Ccommits.servicecomb.apache.org%3E https://lists.apache.org/thread.html/r3e6ae311842de4e64c5d560a475b7f9cc7e0a9a8649363c6cf7537eb@%3Ccommits.karaf.apache.org%3E https://lists.apache.org/thread.html/r407538adec3185dd35a05c9a26ae2f74425b15132470cf540f41d85b@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r45e7350dfc92bb192f3f88e9971c11ab2be0953cc375be3dda5170bd@%3Cissues.flink.apache.org%3E https://lists.apache.org/thread.html/r5b130fe668503c4b7e2caf1b16f86b7f2070fd1b7ef8f26195a2ffbd@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r5f8a1608d758936bd6bbc5eed980777437b611537bf6fff40663fc71@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r605764e05e201db33b3e9c2e66ff620658f07ad74f296abe483f7042@%3Creviews.iotdb.apache.org%3E https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc@%3Cdev.kafka.apache.org%3E https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc@%3Cusers.kafka.apache.org%3E https://lists.apache.org/thread.html/r63c87aab97155f3f3cbe11d030c4a184ea0de440ee714977db02e956@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r68d029ee74ab0f3b0569d0c05f5688cb45dd3abe96a6534735252805@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r6a4f3ef6edfed2e0884269d84798f766779bbbc1005f7884e0800d61@%3Cdev.knox.apache.org%3E https://lists.apache.org/thread.html/r6a6df5647583541e3cb71c75141008802f7025cee1c430d4ed78f4cc@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r6b11eca1d646f45eb0d35d174e6b1e47cfae5295b92000856bfb6304@%3Cdev.kafka.apache.org%3E https://lists.apache.org/thread.html/r6b11eca1d646f45eb0d35d174e6b1e47cfae5295b92000856bfb6304@%3Cusers.kafka.apache.org%3E https://lists.apache.org/thread.html/r6cbd599b80e787f02ff7a1391d9278a03f37d6a6f4f943f0f01a62fb@%3Creviews.iotdb.apache.org%3E https://lists.apache.org/thread.html/r6e3d4f7991542119a4ca6330271d7fbf7b9fb3abab24ada82ddf1ee4@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r73bef1bb601a9f093f915f8075eb49fcca51efade57b817afd5def07@%3Ccommits.iotdb.apache.org%3E https://lists.apache.org/thread.html/r765283e145049df9b8998f14dcd444345555aae02b1610cfb3188bf8@%3Cnotifications.iotdb.apache.org%3E https://lists.apache.org/thread.html/r78d53a0a269c18394daf5940105dc8c7f9a2399503c2e78be20abe7e@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r7cb5b4b3e4bd41a8042e5725b7285877a17bcbf07f4eb3f7b316af60@%3Creviews.iotdb.apache.org%3E https://lists.apache.org/thread.html/r86c78bf7656fdb2dab69cbf17f3d7492300f771025f1a3a65d5e5ce5@%3Ccommits.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r8764bb835bcb8e311c882ff91dd3949c9824e905e880930be56f6ba3@%3Cuser.spark.apache.org%3E https://lists.apache.org/thread.html/r8937a7160717fe8b2221767163c4de4f65bc5466405cb1c5310f9080@%3Cdev.kafka.apache.org%3E https://lists.apache.org/thread.html/r8937a7160717fe8b2221767163c4de4f65bc5466405cb1c5310f9080@%3Cusers.kafka.apache.org%3E https://lists.apache.org/thread.html/r8ae961c80930e2717c75025414ce48a432cea1137c02f648b1fb9524@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r900d4408c4189b376d1ec580ea7740ea6f8710dc2f0b7e9c9eeb5ae0@%3Cdev.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r90d1e97b0a743cf697d89a792a9b669909cc5a1692d1e0083a22e66c@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r91722ecfba688b0c565675f8bf380269fde8ec62b54d6161db544c22@%3Ccommits.karaf.apache.org%3E https://lists.apache.org/thread.html/r94c7e86e546120f157264ba5ba61fd29b3a8d530ed325a9b4fa334d7@%3Ccommits.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r95a297eb5fd1f2d3a2281f15340e2413f952e9d5503296c3adc7201a@%3Ccommits.tomee.apache.org%3E https://lists.apache.org/thread.html/r98bfe3b90ea9408f12c4b447edcb5638703d80bc782430aa0c210a54@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/ra1157e57a01d25e36b0dc17959ace758fc21ba36746de29ba1d8b130@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/ra409f798a1e5a6652b7097429b388650ccd65fd958cee0b6f69bba00@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/ra95faf968f3463acb3f31a6fbec31453fc5045325f99f396961886d3@%3Cissues.flink.apache.org%3E https://lists.apache.org/thread.html/raf13235de6df1d47a717199e1ecd700dff3236632f5c9a1488d9845b@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/rb674520b9f6c808c1bf263b1369e14048ec3243615f35cfd24e33604@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7@%3Cdev.kafka.apache.org%3E https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7@%3Cusers.kafka.apache.org%3E https://lists.apache.org/thread.html/rc15e90bbef196a5c6c01659e015249d6c9a73581ca9afb8aeecf00d2@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/rc82ff47853289e9cd17f5cfbb053c04cafc75ee32e3d7223963f83bb@%3Cdev.knox.apache.org%3E https://lists.apache.org/thread.html/rc88f2fa2b7bd6443921727aeee7704a1fb02433e722e2abf677e0d3d@%3Ccommits.zookeeper.apache.org%3E https://lists.apache.org/thread.html/rc959cdb57c4fe198316130ff4a5ecbf9d680e356032ff2e9f4f05d54@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/rd317f15a675d114dbf5b488d27eeb2467b4424356b16116eb18a652d@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/rd57c7582adc90e233f23f3727db3df9115b27a823b92374f11453f34@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/rd6f6bf848c2d47fa4a85c27d011d948778b8f7e58ba495968435a0b3@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/rdca8711bb7aa5d47a44682606cd0ea3497e2e922f22b7ee83e81e6c1@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/rdf9a34726482222c90d50ae1b9847881de67dde8cfde4999633d2cdc@%3Ccommits.zookeeper.apache.org%3E https://lists.apache.org/thread.html/re16f81d3ad49a93dd2f0cba9f8fc88e5fb89f30bf9a2ad7b6f3e69c1@%3Ccommits.karaf.apache.org%3E https://lists.apache.org/thread.html/re96dc7a13e13e56190a5d80f9e5440a0d0c83aeec6467b562fbf2dca@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/rf1809a1374041a969d77afab21fc38925de066bc97e86157d3ac3402@%3Ccommits.karaf.apache.org%3E https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6X2UT4X6M7DLQYBOOHMXBWGYJ65RL2CT https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6X2UT4X6M7DLQYBOOHMXBWGYJ65RL2CT/ https://nvd.nist.gov/vuln/detail/CVE-2020-25649 https://security.netapp.com/advisory/ntap-20210108-0007 https://security.netapp.com/advisory/ntap-20210108-0007/ https://www.cve.org/CVERecord?id=CVE-2020-25649 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
com.fasterxml.jackson.core:jackson-databind CVE-2020-36518 HIGH 2.10.2 2.13.2.1, 2.12.6.1 https://access.redhat.com/errata/RHSA-2023:2312 https://access.redhat.com/errata/RHSA-2024:3061 https://access.redhat.com/security/cve/CVE-2020-36518 https://bugzilla.redhat.com/2064698 https://bugzilla.redhat.com/show_bug.cgi?id=2064698 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36518 https://errata.almalinux.org/9/ALSA-2023-2312.html https://errata.rockylinux.org/RLSA-2024:3061 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/0a8157c6ca478b1bc7be4ba7dccdb3863275f0de https://github.com/FasterXML/jackson-databind/commit/3cc52f82ecf943e06c1d7c3b078e405fb3923d2b https://github.com/FasterXML/jackson-databind/commit/8238ab41d0350fb915797c89d46777b4496b74fd https://github.com/FasterXML/jackson-databind/commit/b3587924ee5d8695942f364d0d404d48d0ea6126 https://github.com/FasterXML/jackson-databind/commit/fcfc4998ec23f0b1f7f8a9521c2b317b6c25892b https://github.com/FasterXML/jackson-databind/issues/2816 https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12 https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.13 https://github.com/advisories/GHSA-57j2-w4cx-62h2 https://linux.oracle.com/cve/CVE-2020-36518.html https://linux.oracle.com/errata/ELSA-2024-3061.html https://lists.debian.org/debian-lts-announce/2022/05/msg00001.html https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html https://nvd.nist.gov/vuln/detail/CVE-2020-36518 https://security.netapp.com/advisory/ntap-20220506-0004 https://security.netapp.com/advisory/ntap-20220506-0004/ https://www.cve.org/CVERecord?id=CVE-2020-36518 https://www.debian.org/security/2022/dsa-5283 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujul2022.html
com.fasterxml.jackson.core:jackson-databind CVE-2021-46877 HIGH 2.10.2 2.12.6, 2.13.1 https://access.redhat.com/security/cve/CVE-2021-46877 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/3ccde7d938fea547e598fdefe9a82cff37fed5cb https://github.com/FasterXML/jackson-databind/commit/3ccde7d938fea547e598fdefe9a82cff37fed5cb%20%28jackson-databind-2.12.6%29 https://github.com/FasterXML/jackson-databind/commit/3ccde7d938fea547e598fdefe9a82cff37fed5cb%20%28jackson-databind-3.13.1%29 https://github.com/FasterXML/jackson-databind/issues/3328 https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12.6 https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.13.1 https://groups.google.com/g/jackson-user/c/OsBsirPM_Vw https://nvd.nist.gov/vuln/detail/CVE-2021-46877 https://www.cve.org/CVERecord?id=CVE-2021-46877
com.fasterxml.jackson.core:jackson-databind CVE-2022-42003 HIGH 2.10.2 2.12.7.1, 2.13.4.2 https://access.redhat.com/security/cve/CVE-2022-42003 https://advisory.echohq.com/cve/CVE-2022-42003 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51020 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/blob/2.13/release-notes/VERSION-2.x https://github.com/FasterXML/jackson-databind/commit/0e37a39502439ecbaa1a5b5188387c01bf7f7fa1 https://github.com/FasterXML/jackson-databind/commit/2c4a601c626f7790cad9d3c322d244e182838288 https://github.com/FasterXML/jackson-databind/commit/7ba9ac5b87a9d6ac0d2815158ecbeb315ad4dcdc https://github.com/FasterXML/jackson-databind/commit/cd090979b7ea78c75e4de8a4aed04f7e9fa8deea https://github.com/FasterXML/jackson-databind/commit/d499f2e7bbc5ebd63af11e1f5cf1989fa323aa45 https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33 https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33%20%28jackson-databind-2.14.0-rc1%29 https://github.com/FasterXML/jackson-databind/commits/jackson-databind-2.4.0-rc1?after=75b97b8519f0d50c62523ad85170d80a197a2c86+174&branch=jackson-databind-2.4.0-rc1&qualified_name=refs%2Ftags%2Fjackson-databind-2.4.0-rc1 https://github.com/FasterXML/jackson-databind/compare/jackson-databind-2.13.4.1...jackson-databind-2.13.4.2 https://github.com/FasterXML/jackson-databind/issues/3590 https://github.com/FasterXML/jackson-databind/issues/3627 https://github.com/advisories/GHSA-jjjh-jjxp-wpff https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html https://nvd.nist.gov/vuln/detail/CVE-2022-42003 https://security.gentoo.org/glsa/202210-21 https://security.netapp.com/advisory/ntap-20221124-0004 https://security.netapp.com/advisory/ntap-20221124-0004/ https://www.cve.org/CVERecord?id=CVE-2022-42003 https://www.debian.org/security/2022/dsa-5283
com.fasterxml.jackson.core:jackson-databind CVE-2022-42004 HIGH 2.10.2 2.12.7.1, 2.13.4 https://access.redhat.com/security/cve/CVE-2022-42004 https://advisory.echohq.com/cve/CVE-2022-42004 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50490 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/063183589218fec19a9293ed2f17ec53ea80ba88 https://github.com/FasterXML/jackson-databind/commit/063183589218fec19a9293ed2f17ec53ea80ba88%20%28jackson-databind-2.13.4%29 https://github.com/FasterXML/jackson-databind/commit/0e37a39502439ecbaa1a5b5188387c01bf7f7fa1 https://github.com/FasterXML/jackson-databind/commit/35de19e7144c4df8ab178b800ba86e80c3d84252 https://github.com/FasterXML/jackson-databind/commit/cd090979b7ea78c75e4de8a4aed04f7e9fa8deea https://github.com/FasterXML/jackson-databind/issues/3582 https://github.com/advisories/GHSA-rgv9-q543-rqg4 https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html https://nvd.nist.gov/vuln/detail/CVE-2022-42004 https://security.gentoo.org/glsa/202210-21 https://security.netapp.com/advisory/ntap-20221118-0008 https://security.netapp.com/advisory/ntap-20221118-0008/ https://www.cve.org/CVERecord?id=CVE-2022-42004 https://www.debian.org/security/2022/dsa-5283
com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 HIGH 2.10.2 2.18.8, 3.1.4, 2.21.4 https://access.redhat.com/errata/RHSA-2026:40895 https://access.redhat.com/security/cve/CVE-2026-54512 https://advisory.echohq.com/cve/CVE-2026-54512 https://bugzilla.redhat.com/2492010 https://bugzilla.redhat.com/2492015 https://bugzilla.redhat.com/show_bug.cgi?id=2492010 https://bugzilla.redhat.com/show_bug.cgi?id=2492015 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54512 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54513 https://errata.almalinux.org/9/ALSA-2026-40895.html https://errata.rockylinux.org/RLSA-2026:40895 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5 https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5%20%28jackson-databind-2.18.8%29 https://github.com/FasterXML/jackson-databind/issues/5988 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm https://linux.oracle.com/cve/CVE-2026-54512.html https://linux.oracle.com/errata/ELSA-2026-43400.html https://nvd.nist.gov/vuln/detail/CVE-2026-54512 https://www.cve.org/CVERecord?id=CVE-2026-54512
com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 HIGH 2.10.2 2.18.8, 2.21.4, 3.1.4 https://access.redhat.com/errata/RHSA-2026:36839 https://access.redhat.com/errata/RHSA-2026:40895 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:43218 https://access.redhat.com/errata/RHSA-2026:43400 https://access.redhat.com/errata/RHSA-2026:44061 https://access.redhat.com/errata/RHSA-2026:44062 https://access.redhat.com/errata/RHSA-2026:44063 https://access.redhat.com/errata/RHSA-2026:44064 https://access.redhat.com/errata/RHSA-2026:44065 https://access.redhat.com/errata/RHSA-2026:44066 https://access.redhat.com/errata/RHSA-2026:44271 https://access.redhat.com/errata/RHSA-2026:48095 https://access.redhat.com/errata/RHSA-2026:48151 https://access.redhat.com/errata/RHSA-2026:50846 https://access.redhat.com/errata/RHSA-2026:50847 https://access.redhat.com/errata/RHSA-2026:50848 https://access.redhat.com/errata/RHSA-2026:50849 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:54622 https://access.redhat.com/errata/RHSA-2026:62260 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-54513 https://advisory.echohq.com/cve/CVE-2026-54513 https://bugzilla.redhat.com/2492010 https://bugzilla.redhat.com/2492015 https://bugzilla.redhat.com/show_bug.cgi?id=2492010 https://bugzilla.redhat.com/show_bug.cgi?id=2492015 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54512 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54513 https://errata.almalinux.org/9/ALSA-2026-40895.html https://errata.rockylinux.org/RLSA-2026:40895 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5 https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e https://github.com/FasterXML/jackson-databind/issues/5981 https://github.com/FasterXML/jackson-databind/issues/5983 https://github.com/FasterXML/jackson-databind/pull/5984 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f https://linux.oracle.com/cve/CVE-2026-54513.html https://linux.oracle.com/errata/ELSA-2026-43400.html https://nvd.nist.gov/vuln/detail/CVE-2026-54513 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54513.json https://www.cve.org/CVERecord?id=CVE-2026-54513
com.fasterxml.jackson.core:jackson-databind CVE-2026-91776 HIGH 2.10.2 2.18.11, 2.21.7, 2.22.3 https://access.redhat.com/security/cve/CVE-2026-91776 https://advisory.echohq.com/cve/CVE-2026-91776 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/2870d1d6dc1b7e1c07ee11dd5b04ab71cddbb577 https://github.com/FasterXML/jackson-databind/issues/6203 https://github.com/FasterXML/jackson-databind/pull/6203 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54 https://nvd.nist.gov/vuln/detail/CVE-2026-91776 https://www.cve.org/CVERecord?id=CVE-2026-91776
com.fasterxml.jackson.core:jackson-databind CVE-2026-91777 HIGH 2.10.2 2.21.7, 2.18.11, 2.22.3 https://access.redhat.com/errata/RHSA-2026:85231 https://access.redhat.com/security/cve/CVE-2026-91777 https://advisory.echohq.com/cve/CVE-2026-91777 https://bugzilla.redhat.com/2539085 https://bugzilla.redhat.com/show_bug.cgi?id=2539085 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91777 https://errata.almalinux.org/9/ALSA-2026-85231.html https://errata.rockylinux.org/RLSA-2026:85231 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/37ad9b81712cbb9fb62c2d2c1813593252a24b67 https://github.com/FasterXML/jackson-databind/issues/6204 https://github.com/FasterXML/jackson-databind/pull/6204 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24 https://linux.oracle.com/cve/CVE-2026-91777.html https://linux.oracle.com/errata/ELSA-2026-85231.html https://nvd.nist.gov/vuln/detail/CVE-2026-91777 https://www.cve.org/CVERecord?id=CVE-2026-91777
com.fasterxml.jackson.core:jackson-databind CVE-2026-19032 MEDIUM 2.10.2 2.18.10, 2.21.6, 2.22.2 https://access.redhat.com/security/cve/CVE-2026-19032 https://advisory.echohq.com/cve/CVE-2026-19032 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551 https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166 https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d https://github.com/FasterXML/jackson-databind/pull/6129 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf https://nvd.nist.gov/vuln/detail/CVE-2026-19032 https://www.cve.org/CVERecord?id=CVE-2026-19032
com.fasterxml.jackson.core:jackson-databind CVE-2026-50193 MEDIUM 2.10.2 2.14.0 https://access.redhat.com/security/cve/CVE-2026-50193 https://advisory.echohq.com/cve/CVE-2026-50193 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/a1fa4ae4ecf5cee16da465985f135f3e81816f8c https://github.com/FasterXML/jackson-databind/issues/3447 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3wrr-7qpf-2prh https://nvd.nist.gov/vuln/detail/CVE-2026-50193 https://www.cve.org/CVERecord?id=CVE-2026-50193
com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 MEDIUM 2.10.2 2.18.8, 2.21.4, 3.1.4 https://access.redhat.com/security/cve/CVE-2026-54514 https://advisory.echohq.com/cve/CVE-2026-54514 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/1f5a1037b1e9e05920e755cb35f198bcd46667e4 https://github.com/FasterXML/jackson-databind/pull/5951 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-hgj6-7826-r7m5 https://nvd.nist.gov/vuln/detail/CVE-2026-54514 https://www.cve.org/CVERecord?id=CVE-2026-54514
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 MEDIUM 2.10.2 3.1.4, 2.18.9, 2.21.5, 2.22.1 https://access.redhat.com/security/cve/CVE-2026-54515 https://advisory.echohq.com/cve/CVE-2026-54515 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/0e1b0b211f7a53baa62ba2f4c9bd006c7bf4d5fa https://github.com/FasterXML/jackson-databind/issues/5962 https://github.com/FasterXML/jackson-databind/issues/5964 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5jmj-h7xm-6q6v https://nvd.nist.gov/vuln/detail/CVE-2026-54515 https://www.cve.org/CVERecord?id=CVE-2026-54515
com.fasterxml.jackson.core:jackson-databind CVE-2026-59889 MEDIUM 2.10.2 2.21.5, 2.18.9, 2.22.1 https://access.redhat.com/security/cve/CVE-2026-59889 https://advisory.echohq.com/cve/CVE-2026-59889 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/d627a8a86fcb062429282f79f3f256f181ed2c7b https://github.com/FasterXML/jackson-databind/issues/6060 https://github.com/FasterXML/jackson-databind/pull/6056 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5gvw-p9qm-jgwh https://nvd.nist.gov/vuln/detail/CVE-2026-59889 https://www.cve.org/CVERecord?id=CVE-2026-59889
com.fasterxml.jackson.core:jackson-databind CVE-2026-77310 MEDIUM 2.10.2 2.18.9, 2.21.5, 2.22.1 https://access.redhat.com/security/cve/CVE-2026-77310 https://advisory.echohq.com/cve/CVE-2026-77310 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/2fc7bd9057dd051d7dea0e5fcad89822d0fa5ebd https://github.com/FasterXML/jackson-databind/pull/6058 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.9 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.5 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.1 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.5 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.1 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-vvgp-rfg2-7rr6 https://nvd.nist.gov/vuln/detail/CVE-2026-77310 https://www.cve.org/CVERecord?id=CVE-2026-77310
com.jayway.jsonpath:json-path CVE-2023-51074 MEDIUM 2.7.0 2.9.0 https://access.redhat.com/security/cve/CVE-2023-51074 https://github.com/json-path/JsonPath https://github.com/json-path/JsonPath/commit/71a09c1193726c010917f1157ecbb069ad6c3e3b https://github.com/json-path/JsonPath/issues/973 https://github.com/json-path/JsonPath/releases/tag/json-path-2.9.0 https://nvd.nist.gov/vuln/detail/CVE-2023-51074 https://www.cve.org/CVERecord?id=CVE-2023-51074
com.thoughtworks.xstream:xstream CVE-2024-47072 HIGH 1.4.20 1.4.21 https://access.redhat.com/security/cve/CVE-2024-47072 https://github.com/x-stream/xstream https://github.com/x-stream/xstream/commit/bb838ce2269cac47433e31c77b2b236466e9f266 https://github.com/x-stream/xstream/commit/fdd9f7d3de0d7ccf2f9979bcd09fbf3e6a0c881a https://github.com/x-stream/xstream/security/advisories/GHSA-hfq9-hggm-c56q https://lists.debian.org/debian-lts-announce/2024/12/msg00023.html https://nvd.nist.gov/vuln/detail/CVE-2024-47072 https://www.cve.org/CVERecord?id=CVE-2024-47072 https://x-stream.github.io/CVE-2024-47072.html
commons-beanutils:commons-beanutils CVE-2025-48734 HIGH 1.9.4 1.11.0 http://www.openwall.com/lists/oss-security/2025/05/28/6 https://access.redhat.com/errata/RHSA-2025:9114 https://access.redhat.com/errata/RHSA-2025:9318 https://access.redhat.com/security/cve/CVE-2025-48734 https://advisory.echohq.com/cve/CVE-2025-48734 https://bugzilla.redhat.com/2368956 https://bugzilla.redhat.com/show_bug.cgi?id=1767483 https://bugzilla.redhat.com/show_bug.cgi?id=2368956 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10086 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48734 https://dlcdn.apache.org/commons/beanutils/RELEASE-NOTES.txt https://errata.almalinux.org/9/ALSA-2025-9114.html https://errata.rockylinux.org/RLSA-2025:9318 https://github.com/advisories/GHSA-wxr5-93ph-8wr9 https://github.com/apache/commons-beanutils https://github.com/apache/commons-beanutils/commit/28ad955a1613ed5885870cc7da52093c1ce739dc https://github.com/apache/commons-beanutils/commit/bd20740da25b69552ddef8523beec0837297eaf9 https://linux.oracle.com/cve/CVE-2025-48734.html https://linux.oracle.com/errata/ELSA-2025-9318.html https://lists.apache.org/thread/s0hb3jkfj5f3ryx6c57zqtfohb0of1g9 https://lists.debian.org/debian-lts-announce/2025/06/msg00027.html https://nvd.nist.gov/vuln/detail/CVE-2025-48734 https://ubuntu.com/security/notices/USN-8322-1 https://www.cve.org/CVERecord?id=CVE-2025-48734 https://www.openwall.com/lists/oss-security/2025/05/28/6
commons-fileupload:commons-fileupload CVE-2023-24998 HIGH 1.4 1.5 http://www.openwall.com/lists/oss-security/2023/05/22/1 https://access.redhat.com/errata/RHSA-2023:6570 https://access.redhat.com/security/cve/CVE-2023-24998 https://bugzilla.redhat.com/2172298 https://bugzilla.redhat.com/2180856 https://bugzilla.redhat.com/2210321 https://commons.apache.org/proper/commons-fileupload/security-reports.html https://commons.apache.org/proper/commons-fileupload/security-reports.html#Fixed_in_Apache_Commons_FileUpload_1.5 https://errata.almalinux.org/9/ALSA-2023-6570.html https://github.com/apache/commons-fileupload https://github.com/apache/commons-fileupload/commit/e20c04990f7420ca917e96a84cec58b13a1b3d17 https://github.com/apache/tomcat/commit/8a2285f13affa961cc65595aad999db5efae45ce https://github.com/apache/tomcat/commit/9ca96c8c1eba86c0aaa2e6be581ba2a7d4d4ae6e https://github.com/apache/tomcat/commit/cf77cc545de0488fb89e24294151504a7432df74 https://github.com/apache/tomcat/commit/d53d8e7f77042cc32a3b98f589496a1ef5088e38 https://github.com/search?q=repo%3Aapache%2Ftomcat+util.http+path%3A%2F%5Eres%5C%2Fbnd%5C%2F%2F&type=code https://linux.oracle.com/cve/CVE-2023-24998.html https://linux.oracle.com/errata/ELSA-2023-7065.html https://lists.apache.org/thread/4xl4l09mhwg4vgsk7dxqogcjrobrrdoy https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html https://lists.debian.org/debian-lts-announce/2025/07/msg00008.html https://nvd.nist.gov/vuln/detail/CVE-2023-24998 https://security.gentoo.org/glsa/202305-37 https://security.netapp.com/advisory/ntap-20230302-0013 https://security.netapp.com/advisory/ntap-20230302-0013/ https://security.netapp.com/advisory/ntap-20241108-0002 https://security.netapp.com/advisory/ntap-20241108-0002/ https://tomcat.apache.org/security-10.html https://tomcat.apache.org/security-11.html https://tomcat.apache.org/security-8.html https://tomcat.apache.org/security-9.html https://www.cve.org/CVERecord?id=CVE-2023-24998 https://www.debian.org/security/2023/dsa-5522
commons-fileupload:commons-fileupload CVE-2025-48976 HIGH 1.4 1.6.0 http://www.openwall.com/lists/oss-security/2025/06/16/4 https://access.redhat.com/errata/RHSA-2025:14181 https://access.redhat.com/security/cve/CVE-2025-48976 https://advisory.echohq.com/cve/CVE-2025-48976 https://bugzilla.redhat.com/2373015 https://bugzilla.redhat.com/2373018 https://bugzilla.redhat.com/2373020 https://bugzilla.redhat.com/2373309 https://bugzilla.redhat.com/2379374 https://bugzilla.redhat.com/2379382 https://bugzilla.redhat.com/2379386 https://bugzilla.redhat.com/show_bug.cgi?id=2373015 https://bugzilla.redhat.com/show_bug.cgi?id=2373018 https://bugzilla.redhat.com/show_bug.cgi?id=2373020 https://bugzilla.redhat.com/show_bug.cgi?id=2373309 https://bugzilla.redhat.com/show_bug.cgi?id=2379374 https://bugzilla.redhat.com/show_bug.cgi?id=2379382 https://bugzilla.redhat.com/show_bug.cgi?id=2379386 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48976 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48988 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48989 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49125 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52434 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52520 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53506 https://errata.almalinux.org/9/ALSA-2025-14181.html https://errata.rockylinux.org/RLSA-2025:14181 https://github.com/advisories/GHSA-vv7r-c36w-3prj https://github.com/apache/commons-fileupload https://github.com/apache/commons-fileupload/commit/2108495a4775910b8559f18ed5a779d60542ee96%20%28commons-fileupload-1.6.0-RC1%29 https://github.com/apache/commons-fileupload/commit/b247774a72a044f5d5380ae947140ee80af4e78b https://github.com/apache/commons-fileupload/commit/bf68f63cfb312ef4710fb3dfb4d8e4e1665f4497 https://github.com/apache/tomcat/commit/667ddd76e2a0e762f3a784d86f0d25e7fd7cdb86%20%2810.1.42%29 https://github.com/apache/tomcat/commit/74f69ffaf61e54c727603e7e831fe20f0ac5d2a7%20%2811.0.8%29 https://github.com/apache/tomcat/commit/97790a35a27d236fa053e660676c3f8196284d93 https://github.com/apache/tomcat/commit/97790a35a27d236fa053e660676c3f8196284d93%20%289.0.106%29 https://linux.oracle.com/cve/CVE-2025-48976.html https://linux.oracle.com/errata/ELSA-2025-14181.html https://lists.apache.org/thread/fbs3wrr3p67vkjcxogqqqqz45pqtso12 https://lists.apache.org/thread/w7dbnfyqn1yc05kbqqbbyct7wbomv7lf https://lists.debian.org/debian-lts-announce/2025/07/msg00008.html https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html https://nvd.nist.gov/vuln/detail/CVE-2025-48976 https://www.cve.org/CVERecord?id=CVE-2025-48976
io.github.classgraph:classgraph CVE-2021-47621 MEDIUM 4.8.65 4.8.112 https://advisory.echohq.com/cve/CVE-2021-47621 https://docs.r3.com/en/platform/corda/4.8/enterprise/release-notes-enterprise.html https://github.com/advisories/GHSA-v2xm-76pq-phcf https://github.com/classgraph/classgraph https://github.com/classgraph/classgraph/commit/681362ad6b0b9d9abaffb2e07099ce54d7a41fa3 https://github.com/classgraph/classgraph/pull/539 https://github.com/classgraph/classgraph/releases/tag/classgraph-4.8.112 https://nvd.nist.gov/vuln/detail/CVE-2021-47621
io.netty:netty-codec CVE-2026-42583 HIGH 4.1.79.Final 4.1.133.Final https://access.redhat.com/security/cve/CVE-2026-42583 https://advisory.echohq.com/cve/CVE-2026-42583 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6 https://nvd.nist.gov/vuln/detail/CVE-2026-42583 https://www.cve.org/CVERecord?id=CVE-2026-42583
io.netty:netty-codec CVE-2026-59901 HIGH 4.1.79.Final 4.1.136.Final https://access.redhat.com/security/cve/CVE-2026-59901 https://advisory.echohq.com/cve/CVE-2026-59901 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-558v-64gr-wgg4 https://nvd.nist.gov/vuln/detail/CVE-2026-59901 https://www.cve.org/CVERecord?id=CVE-2026-59901
io.netty:netty-codec CVE-2025-58057 MEDIUM 4.1.79.Final 4.1.125.Final https://access.redhat.com/security/cve/CVE-2025-58057 https://advisory.echohq.com/cve/CVE-2025-58057 https://github.com/netty/netty https://github.com/netty/netty/commit/9d804c54ce962408ae6418255a83a13924f7145d https://github.com/netty/netty/commit/9d804c54ce962408ae6418255a83a13924f7145d%20%28netty-4.2.5.Final%29 https://github.com/netty/netty/security/advisories/GHSA-3p8m-j85q-pgmj https://nvd.nist.gov/vuln/detail/CVE-2025-58057 https://ubuntu.com/security/notices/USN-7918-1 https://www.cve.org/CVERecord?id=CVE-2025-58057
io.netty:netty-codec-http CVE-2026-33870 HIGH 4.1.86.Final 4.1.132.Final, 4.2.10.Final https://access.redhat.com/errata/RHSA-2026:10175 https://access.redhat.com/errata/RHSA-2026:10184 https://access.redhat.com/errata/RHSA-2026:13571 https://access.redhat.com/errata/RHSA-2026:14272 https://access.redhat.com/errata/RHSA-2026:14276 https://access.redhat.com/errata/RHSA-2026:17668 https://access.redhat.com/errata/RHSA-2026:17789 https://access.redhat.com/errata/RHSA-2026:18054 https://access.redhat.com/errata/RHSA-2026:18055 https://access.redhat.com/errata/RHSA-2026:18059 https://access.redhat.com/errata/RHSA-2026:22619 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:7109 https://access.redhat.com/errata/RHSA-2026:7380 https://access.redhat.com/errata/RHSA-2026:8159 https://access.redhat.com/errata/RHSA-2026:8509 https://access.redhat.com/security/cve/CVE-2026-33870 https://advisory.echohq.com/cve/CVE-2026-33870 https://bugzilla.redhat.com/show_bug.cgi?id=2452453 https://github.com/advisories/GHSA-pwqr-wmgm-9rr8 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8 https://nvd.nist.gov/vuln/detail/CVE-2026-33870 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33870.json https://w4ke.info/2025/06/18/funky-chunks.html https://w4ke.info/2025/10/29/funky-chunks-2.html https://www.cve.org/CVERecord?id=CVE-2026-33870 https://www.rfc-editor.org/rfc/rfc9110
io.netty:netty-codec-http CVE-2026-42584 HIGH 4.1.86.Final 4.2.13.Final, 4.1.133.Final https://access.redhat.com/errata/RHSA-2026:23808 https://access.redhat.com/errata/RHSA-2026:24502 https://access.redhat.com/errata/RHSA-2026:25123 https://access.redhat.com/errata/RHSA-2026:28010 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:42644 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-42584 https://advisory.echohq.com/cve/CVE-2026-42584 https://bugzilla.redhat.com/show_bug.cgi?id=2477224 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3 https://nvd.nist.gov/vuln/detail/CVE-2026-42584 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42584.json https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42584
io.netty:netty-codec-http CVE-2026-42587 HIGH 4.1.86.Final 4.2.13.Final, 4.1.133.Final https://access.redhat.com/errata/RHSA-2026:23808 https://access.redhat.com/errata/RHSA-2026:24502 https://access.redhat.com/errata/RHSA-2026:25123 https://access.redhat.com/errata/RHSA-2026:28010 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:42644 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:50085 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-42587 https://advisory.echohq.com/cve/CVE-2026-42587 https://bugzilla.redhat.com/show_bug.cgi?id=2477220 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv https://nvd.nist.gov/vuln/detail/CVE-2026-42587 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42587.json https://www.cve.org/CVERecord?id=CVE-2026-42587
io.netty:netty-codec-http CVE-2026-55831 HIGH 4.1.86.Final 4.2.16.Final, 4.1.136.Final https://access.redhat.com/security/cve/CVE-2026-55831 https://advisory.echohq.com/cve/CVE-2026-55831 https://github.com/netty/netty https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6 https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-6jqx-86gh-f27w https://nvd.nist.gov/vuln/detail/CVE-2026-55831 https://www.cve.org/CVERecord?id=CVE-2026-55831
io.netty:netty-codec-http CVE-2026-55833 HIGH 4.1.86.Final 4.2.16.Final, 4.1.136.Final https://access.redhat.com/security/cve/CVE-2026-55833 https://advisory.echohq.com/cve/CVE-2026-55833 https://github.com/netty/netty https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6 https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-mvh2-crg5-v77c https://nvd.nist.gov/vuln/detail/CVE-2026-55833 https://www.cve.org/CVERecord?id=CVE-2026-55833
io.netty:netty-codec-http CVE-2026-56745 HIGH 4.1.86.Final 4.2.16.Final, 4.1.136.Final https://access.redhat.com/security/cve/CVE-2026-56745 https://advisory.echohq.com/cve/CVE-2026-56745 https://github.com/netty/netty https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6 https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-jppx-w49h-x2qq https://nvd.nist.gov/vuln/detail/CVE-2026-56745 https://www.cve.org/CVERecord?id=CVE-2026-56745
io.netty:netty-codec-http CVE-2024-29025 MEDIUM 4.1.86.Final 4.1.108.Final https://access.redhat.com/security/cve/CVE-2024-29025 https://advisory.echohq.com/cve/CVE-2024-29025 https://gist.github.com/vietj/f558b8ea81ec6505f1e9a6ca283c9ae3 https://github.com/advisories/GHSA-5jpm-x58v-624v https://github.com/netty/netty https://github.com/netty/netty/commit/0d0c6ed782d13d423586ad0c71737b2c7d02058c https://github.com/netty/netty/commit/0d0c6ed782d13d423586ad0c71737b2c7d02058c%20%28netty-4.1.108.Final%29 https://github.com/netty/netty/security/advisories/GHSA-5jpm-x58v-624v https://github.com/vietj/netty/tree/post-request-decoder https://lists.debian.org/debian-lts-announce/2024/06/msg00015.html https://nvd.nist.gov/vuln/detail/CVE-2024-29025 https://security.snyk.io/vuln/SNYK-JAVA-IONETTY-6483812 https://ubuntu.com/security/notices/USN-7284-1 https://www.cve.org/CVERecord?id=CVE-2024-29025
io.netty:netty-codec-http CVE-2025-67735 MEDIUM 4.1.86.Final 4.2.8.Final, 4.1.129.Final https://access.redhat.com/security/cve/CVE-2025-67735 https://advisory.echohq.com/cve/CVE-2025-67735 https://github.com/netty/netty https://github.com/netty/netty/commit/77e81f1e5944d98b3acf887d3aa443b252752e94 https://github.com/netty/netty/security/advisories/GHSA-84h7-rjj3-6jx4 https://nvd.nist.gov/vuln/detail/CVE-2025-67735 https://ubuntu.com/security/notices/USN-8654-1 https://www.cve.org/CVERecord?id=CVE-2025-67735
io.netty:netty-codec-http CVE-2026-41417 MEDIUM 4.1.86.Final 4.1.133.Final, 4.2.13.Final https://access.redhat.com/security/cve/CVE-2026-41417 https://advisory.echohq.com/cve/CVE-2026-41417 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv https://nvd.nist.gov/vuln/detail/CVE-2026-41417 https://www.cve.org/CVERecord?id=CVE-2026-41417
io.netty:netty-codec-http CVE-2026-42580 MEDIUM 4.1.86.Final 4.2.13.Final, 4.1.133.Final https://access.redhat.com/security/cve/CVE-2026-42580 https://advisory.echohq.com/cve/CVE-2026-42580 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723 https://nvd.nist.gov/vuln/detail/CVE-2026-42580 https://www.cve.org/CVERecord?id=CVE-2026-42580
io.netty:netty-codec-http CVE-2026-42581 MEDIUM 4.1.86.Final 4.2.13.Final, 4.1.133.Final https://access.redhat.com/errata/RHSA-2026:23808 https://access.redhat.com/errata/RHSA-2026:24502 https://access.redhat.com/errata/RHSA-2026:25123 https://access.redhat.com/errata/RHSA-2026:28010 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:42644 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-42581 https://advisory.echohq.com/cve/CVE-2026-42581 https://bugzilla.redhat.com/show_bug.cgi?id=2477232 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9 https://nvd.nist.gov/vuln/detail/CVE-2026-42581 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42581.json https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42581
io.netty:netty-codec-http CVE-2026-42585 MEDIUM 4.1.86.Final 4.2.13.Final, 4.1.133.Final https://access.redhat.com/security/cve/CVE-2026-42585 https://advisory.echohq.com/cve/CVE-2026-42585 https://datatracker.ietf.org/doc/html/rfc9112#name-message-body-length https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv https://nvd.nist.gov/vuln/detail/CVE-2026-42585 https://ubuntu.com/security/notices/USN-8401-1 https://www.cve.org/CVERecord?id=CVE-2026-42585
io.netty:netty-codec-http CVE-2026-50020 MEDIUM 4.1.86.Final 4.2.15.Final, 4.1.135.Final https://access.redhat.com/security/cve/CVE-2026-50020 https://advisory.echohq.com/cve/CVE-2026-50020 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c https://nvd.nist.gov/vuln/detail/CVE-2026-50020 https://www.cve.org/CVERecord?id=CVE-2026-50020
io.netty:netty-codec-http CVE-2026-56746 MEDIUM 4.1.86.Final 4.2.16.Final, 4.1.136.Final https://access.redhat.com/security/cve/CVE-2026-56746 https://advisory.echohq.com/cve/CVE-2026-56746 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-6cqp-g7gg-8hr5 https://nvd.nist.gov/vuln/detail/CVE-2026-56746 https://www.cve.org/CVERecord?id=CVE-2026-56746
io.netty:netty-codec-http CVE-2026-59898 MEDIUM 4.1.86.Final 4.2.16.Final, 4.1.136.Final https://access.redhat.com/security/cve/CVE-2026-59898 https://advisory.echohq.com/cve/CVE-2026-59898 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-4mp9-239f-g9hg https://nvd.nist.gov/vuln/detail/CVE-2026-59898 https://www.cve.org/CVERecord?id=CVE-2026-59898
io.netty:netty-codec-http CVE-2026-59899 MEDIUM 4.1.86.Final 4.2.16.Final, 4.1.136.Final https://access.redhat.com/security/cve/CVE-2026-59899 https://advisory.echohq.com/cve/CVE-2026-59899 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-q4f6-jm68-57ww https://netty.io/news/2026/07/09/4-1-136-Final.html https://nvd.nist.gov/vuln/detail/CVE-2026-59899 https://www.cve.org/CVERecord?id=CVE-2026-59899
io.netty:netty-codec-http CVE-2026-59903 MEDIUM 4.1.86.Final 4.2.17.Final, 4.1.137.Final https://access.redhat.com/security/cve/CVE-2026-59903 https://advisory.echohq.com/cve/CVE-2026-59903 https://github.com/netty/netty https://github.com/netty/netty/pull/17213 https://github.com/netty/netty/pull/17217 https://github.com/netty/netty/releases/tag/netty-4.1.137.Final https://github.com/netty/netty/releases/tag/netty-4.2.17.Final https://github.com/netty/netty/security/advisories/GHSA-8c42-7qj2-3j46 https://nvd.nist.gov/vuln/detail/CVE-2026-59903 https://www.cve.org/CVERecord?id=CVE-2026-59903
io.netty:netty-codec-http CVE-2026-59921 MEDIUM 4.1.86.Final 4.2.16.Final, 4.1.136.Final https://access.redhat.com/security/cve/CVE-2026-59921 https://advisory.echohq.com/cve/CVE-2026-59921 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-gcjf-9mgh-3p7g https://nvd.nist.gov/vuln/detail/CVE-2026-59921 https://www.cve.org/CVERecord?id=CVE-2026-59921
io.netty:netty-codec-http CVE-2025-58056 LOW 4.1.86.Final 4.1.125.Final, 4.2.5.Final https://access.redhat.com/security/cve/CVE-2025-58056 https://advisory.echohq.com/cve/CVE-2025-58056 https://datatracker.ietf.org/doc/html/rfc9112#name-chunked-transfer-coding https://github.com/JLLeitschuh/unCVEed/issues/1 https://github.com/github/advisory-database/pull/6092 https://github.com/netty/netty https://github.com/netty/netty/commit/edb55fd8e0a3bcbd85881e423464f585183d1284 https://github.com/netty/netty/issues/15522 https://github.com/netty/netty/pull/15611 https://github.com/netty/netty/security/advisories/GHSA-fghv-69vj-qj49 https://nvd.nist.gov/vuln/detail/CVE-2025-58056 https://ubuntu.com/security/notices/USN-7918-1 https://w4ke.info/2025/06/18/funky-chunks.html https://www.cve.org/CVERecord?id=CVE-2025-58056
io.netty:netty-codec-http2 CVE-2025-55163 HIGH 4.1.86.Final 4.2.4.Final, 4.1.124.Final http://www.openwall.com/lists/oss-security/2025/08/16/1 https://access.redhat.com/security/cve/CVE-2025-55163 https://advisory.echohq.com/cve/CVE-2025-55163 https://github.com/advisories/GHSA-prj3-ccx8-p6x4 https://github.com/grpc/grpc-java/commit/6462ef9a11980e168c21d90bbc7245c728fd1a7a https://github.com/netty/netty https://github.com/netty/netty/commit/be53dc3c9acd9af2e20d0c3c07cd77115a594cf1 https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4 https://kb.cert.org/vuls/id/767506 https://nvd.nist.gov/vuln/detail/CVE-2025-55163 https://ubuntu.com/security/notices/USN-8654-1 https://www.cve.org/CVERecord?id=CVE-2025-55163 https://www.kb.cert.org/vuls/id/767506
io.netty:netty-codec-http2 CVE-2026-33871 HIGH 4.1.86.Final 4.1.132.Final, 4.2.11.Final https://access.redhat.com/errata/RHSA-2026:10175 https://access.redhat.com/errata/RHSA-2026:10184 https://access.redhat.com/errata/RHSA-2026:13571 https://access.redhat.com/errata/RHSA-2026:14272 https://access.redhat.com/errata/RHSA-2026:14276 https://access.redhat.com/errata/RHSA-2026:17668 https://access.redhat.com/errata/RHSA-2026:17789 https://access.redhat.com/errata/RHSA-2026:18054 https://access.redhat.com/errata/RHSA-2026:18055 https://access.redhat.com/errata/RHSA-2026:18059 https://access.redhat.com/errata/RHSA-2026:22619 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:7109 https://access.redhat.com/errata/RHSA-2026:7380 https://access.redhat.com/errata/RHSA-2026:8159 https://access.redhat.com/errata/RHSA-2026:8509 https://access.redhat.com/security/cve/CVE-2026-33871 https://advisory.echohq.com/cve/CVE-2026-33871 https://bugzilla.redhat.com/show_bug.cgi?id=2452456 https://github.com/advisories/GHSA-w9fj-cfpg-grvv https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv https://nvd.nist.gov/vuln/detail/CVE-2026-33871 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33871.json https://www.cve.org/CVERecord?id=CVE-2026-33871
io.netty:netty-codec-http2 CVE-2026-42587 HIGH 4.1.86.Final 4.2.13.Final, 4.1.133.Final https://access.redhat.com/errata/RHSA-2026:23808 https://access.redhat.com/errata/RHSA-2026:24502 https://access.redhat.com/errata/RHSA-2026:25123 https://access.redhat.com/errata/RHSA-2026:28010 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:42644 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:50085 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-42587 https://advisory.echohq.com/cve/CVE-2026-42587 https://bugzilla.redhat.com/show_bug.cgi?id=2477220 https://github.com/netty/netty https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv https://nvd.nist.gov/vuln/detail/CVE-2026-42587 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42587.json https://www.cve.org/CVERecord?id=CVE-2026-42587
io.netty:netty-codec-http2 CVE-2026-56819 HIGH 4.1.86.Final 4.2.16.Final, 4.1.136.Final https://access.redhat.com/security/cve/CVE-2026-56819 https://advisory.echohq.com/cve/CVE-2026-56819 https://github.com/netty/netty https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003bhttps://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6 https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-93wv-jw9v-4972 https://nvd.nist.gov/vuln/detail/CVE-2026-56819 https://www.cve.org/CVERecord?id=CVE-2026-56819
io.netty:netty-codec-http2 GHSA-xpw8-rcwv-8f8p HIGH 4.1.86.Final 4.1.100.Final https://advisory.echohq.com/cve/GHSA-xpw8-rcwv-8f8p https://github.com/advisories/GHSA-xpw8-rcwv-8f8p https://github.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3 https://github.com/netty/netty https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61 https://github.com/netty/netty/security/advisories/GHSA-xpw8-rcwv-8f8p https://nvd.nist.gov/vuln/detail/CVE-2023-44487 https://www.cve.org/CVERecord?id=CVE-2023-44487
io.netty:netty-codec-http2 CVE-2026-47244 MEDIUM 4.1.86.Final 4.2.15.Final, 4.1.135.Final https://access.redhat.com/security/cve/CVE-2026-47244 https://advisory.echohq.com/cve/CVE-2026-47244 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q https://nvd.nist.gov/vuln/detail/CVE-2026-47244 https://www.cve.org/CVERecord?id=CVE-2026-47244
io.netty:netty-codec-http2 CVE-2026-48043 MEDIUM 4.1.86.Final 4.1.135.Final, 4.2.15.Final https://access.redhat.com/errata/RHSA-2026:26017 https://access.redhat.com/errata/RHSA-2026:26018 https://access.redhat.com/errata/RHSA-2026:26586 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:48124 https://access.redhat.com/errata/RHSA-2026:48151 https://access.redhat.com/errata/RHSA-2026:50085 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:53806 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/security/cve/CVE-2026-48043 https://advisory.echohq.com/cve/CVE-2026-48043 https://bugzilla.redhat.com/show_bug.cgi?id=2488442 https://github.com/netty/netty https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca https://github.com/netty/netty/commit/db6138b168699736a6463c367e12ad0a4c36a25e https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j https://nvd.nist.gov/vuln/detail/CVE-2026-48043 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48043.json https://www.cve.org/CVERecord?id=CVE-2026-48043
io.netty:netty-codec-http2 CVE-2026-50560 MEDIUM 4.1.86.Final 4.2.15.Final, 4.1.135.Final https://access.redhat.com/security/cve/CVE-2026-50560 https://advisory.echohq.com/cve/CVE-2026-50560 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm https://nvd.nist.gov/vuln/detail/CVE-2026-50560 https://www.cve.org/CVERecord?id=CVE-2026-50560 https://www.rfc-editor.org/rfc/rfc9113.html#name-defined-settings
io.netty:netty-codec-http2 CVE-2026-59900 MEDIUM 4.1.86.Final 4.2.16.Final, 4.1.136.Final https://access.redhat.com/security/cve/CVE-2026-59900 https://advisory.echohq.com/cve/CVE-2026-59900 https://github.com/advisories/GHSA-c69g-56f8-xwqj https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.136.Final https://github.com/netty/netty/releases/tag/netty-4.2.16.Final https://github.com/netty/netty/security/advisories/GHSA-c69g-56f8-xwqj https://nvd.nist.gov/vuln/detail/CVE-2026-59900 https://www.cve.org/CVERecord?id=CVE-2026-59900
io.netty:netty-common CVE-2024-47535 MEDIUM 4.1.79.Final 4.1.115.Final https://access.redhat.com/security/cve/CVE-2024-47535 https://advisory.echohq.com/cve/CVE-2024-47535 https://github.com/advisories/GHSA-xq3w-v528-46rv https://github.com/netty/netty https://github.com/netty/netty/commit/fbf7a704a82e7449b48bd0bbb679f5661c6d61a3 https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv https://nvd.nist.gov/vuln/detail/CVE-2024-47535 https://www.cve.org/CVERecord?id=CVE-2024-47535
io.netty:netty-common CVE-2025-25193 MEDIUM 4.1.79.Final 4.1.118.Final https://access.redhat.com/security/cve/CVE-2025-25193 https://advisory.echohq.com/cve/CVE-2025-25193 https://github.com/advisories/GHSA-389x-839f-4rhx https://github.com/netty/netty https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386 https://github.com/netty/netty/security/advisories/GHSA-389x-839f-4rhx https://nvd.nist.gov/vuln/detail/CVE-2025-25193 https://security.netapp.com/advisory/ntap-20250221-0006 https://security.netapp.com/advisory/ntap-20250221-0006/ https://www.cve.org/CVERecord?id=CVE-2025-25193
io.netty:netty-handler CVE-2026-75595 CRITICAL 4.1.79.Final 4.2.17.Final, 4.1.137.Final https://access.redhat.com/security/cve/CVE-2026-75595 https://advisory.echohq.com/cve/CVE-2026-75595 https://github.com/netty/netty https://github.com/netty/netty/commit/1b5abc6443b63726c72cdd285af2feb7ddbb8ff7 https://github.com/netty/netty/commit/9e0519239108a69b7e9bbc5e9182ee139a0d7961 https://github.com/netty/netty/pull/17213 https://github.com/netty/netty/pull/17217 https://github.com/netty/netty/releases/tag/netty-4.1.137.Final https://github.com/netty/netty/releases/tag/netty-4.2.17.Final https://github.com/netty/netty/security/advisories/GHSA-c4c3-7fpv-j4q5 https://nvd.nist.gov/vuln/detail/CVE-2026-75595 https://www.cve.org/CVERecord?id=CVE-2026-75595
io.netty:netty-handler CVE-2026-44249 HIGH 4.1.79.Final 4.2.15.Final, 4.1.135.Final https://access.redhat.com/errata/RHSA-2026:26017 https://access.redhat.com/errata/RHSA-2026:26018 https://access.redhat.com/errata/RHSA-2026:26586 https://access.redhat.com/errata/RHSA-2026:28573 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:36820 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:48124 https://access.redhat.com/errata/RHSA-2026:48151 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:50085 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-44249 https://advisory.echohq.com/cve/CVE-2026-44249 https://bugzilla.redhat.com/show_bug.cgi?id=2488081 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86 https://nvd.nist.gov/vuln/detail/CVE-2026-44249 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44249.json https://www.cve.org/CVERecord?id=CVE-2026-44249
io.netty:netty-handler CVE-2026-45416 HIGH 4.1.79.Final 4.2.15.Final, 4.1.135.Final https://access.redhat.com/errata/RHSA-2026:26017 https://access.redhat.com/errata/RHSA-2026:26018 https://access.redhat.com/errata/RHSA-2026:26586 https://access.redhat.com/errata/RHSA-2026:28573 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:48151 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:50085 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:62260 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-45416 https://advisory.echohq.com/cve/CVE-2026-45416 https://bugzilla.redhat.com/show_bug.cgi?id=2488391 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh https://nvd.nist.gov/vuln/detail/CVE-2026-45416 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45416.json https://www.cve.org/CVERecord?id=CVE-2026-45416
io.netty:netty-handler CVE-2026-50010 HIGH 4.1.79.Final 4.2.15.Final, 4.1.135.Final https://access.redhat.com/errata/RHSA-2026:26017 https://access.redhat.com/errata/RHSA-2026:26018 https://access.redhat.com/errata/RHSA-2026:26586 https://access.redhat.com/errata/RHSA-2026:28573 https://access.redhat.com/errata/RHSA-2026:34608 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:48151 https://access.redhat.com/errata/RHSA-2026:49700 https://access.redhat.com/errata/RHSA-2026:49701 https://access.redhat.com/errata/RHSA-2026:50085 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:62260 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-50010 https://advisory.echohq.com/cve/CVE-2026-50010 https://bugzilla.redhat.com/show_bug.cgi?id=2488429 https://github.com/netty/netty https://github.com/netty/netty/releases/tag/netty-4.1.135.Final https://github.com/netty/netty/releases/tag/netty-4.2.15.Final https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9 https://nvd.nist.gov/vuln/detail/CVE-2026-50010 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50010.json https://www.cve.org/CVERecord?id=CVE-2026-50010
io.netty:netty-handler CVE-2023-34462 MEDIUM 4.1.79.Final 4.1.94.Final https://access.redhat.com/security/cve/CVE-2023-34462 https://advisory.echohq.com/cve/CVE-2023-34462 https://github.com/advisories/GHSA-6mjq-h674-j845 https://github.com/netty/netty https://github.com/netty/netty/commit/535da17e45201ae4278c0479e6162bb4127d4c32 https://github.com/netty/netty/security/advisories/GHSA-6mjq-h674-j845 https://nvd.nist.gov/vuln/detail/CVE-2023-34462 https://security.netapp.com/advisory/ntap-20230803-0001 https://security.netapp.com/advisory/ntap-20230803-0001/ https://security.netapp.com/advisory/ntap-20240621-0007 https://security.netapp.com/advisory/ntap-20240621-0007/ https://ubuntu.com/security/notices/USN-6994-1 https://www.cve.org/CVERecord?id=CVE-2023-34462 https://www.debian.org/security/2023/dsa-5558
io.netty:netty-handler CVE-2026-75596 MEDIUM 4.1.79.Final 4.2.17.Final, 4.1.137.Final https://advisory.echohq.com/cve/CVE-2026-75596 https://github.com/netty/netty https://github.com/netty/netty/commit/1b5abc6443b63726c72cdd285af2feb7ddbb8ff7 https://github.com/netty/netty/commit/9e0519239108a69b7e9bbc5e9182ee139a0d7961 https://github.com/netty/netty/pull/17213 https://github.com/netty/netty/pull/17217 https://github.com/netty/netty/releases/tag/netty-4.1.137.Final https://github.com/netty/netty/releases/tag/netty-4.2.17.Final https://github.com/netty/netty/security/advisories/GHSA-fccg-mwvh-qqg4 https://nvd.nist.gov/vuln/detail/CVE-2026-75596
net.minidev:json-smart CVE-2023-1370 HIGH 2.4.7 2.4.9 https://access.redhat.com/security/cve/CVE-2023-1370 https://advisory.echohq.com/cve/CVE-2023-1370 https://github.com/advisories/GHSA-493p-pfq6-5258 https://github.com/netplex/json-smart-v2/commit/5b3205d051952d3100aa0db1535f6ba6226bd87a https://github.com/netplex/json-smart-v2/commit/e2791ae506a57491bc856b439d706c81e45adcf8 https://github.com/netplex/json-smart-v2/issues/137 https://github.com/oswaldobapvicjr/jsonmerge https://nvd.nist.gov/vuln/detail/CVE-2023-1370 https://research.jfrog.com/vulnerabilities/stack-exhaustion-in-json-smart-leads-to-denial-of-service-when-parsing-malformed-json-xray-427633 https://research.jfrog.com/vulnerabilities/stack-exhaustion-in-json-smart-leads-to-denial-of-service-when-parsing-malformed-json-xray-427633/ https://security.netapp.com/advisory/ntap-20240621-0006 https://security.netapp.com/advisory/ntap-20240621-0006/ https://security.snyk.io/vuln/SNYK-JAVA-NETMINIDEV-3369748 https://ubuntu.com/security/notices/USN-6011-1 https://www.cve.org/CVERecord?id=CVE-2023-1370
net.sf.jasperreports:jasperreports CVE-2025-10492 HIGH 6.20.0 7.0.4 https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6 https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6/ https://community.jaspersoft.com/forums/topic/69926-cve-2025-10492-%E2%80%93-no-fix-available-after-jasperreports-upgrade-community-edition https://github.com/Jaspersoft/jasperreports https://github.com/Jaspersoft/jasperreports/commit/3541a3e2b1ad8b78388ac505091da75cb652a647 https://github.com/Jaspersoft/jasperreports/commit/827c2f27c4ca8e2c5b3142d76df9c1c8575f3569 https://github.com/Jaspersoft/jasperreports/issues/542 https://nvd.nist.gov/vuln/detail/CVE-2025-10492
net.sf.jasperreports:jasperreports CVE-2026-6009 HIGH 6.20.0 7.0.7 https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11 https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11/ https://github.com/Jaspersoft/jasperreports https://nvd.nist.gov/vuln/detail/CVE-2026-6009
org.apache.commons:commons-compress CVE-2023-42503 MEDIUM 1.22 1.24.0 https://access.redhat.com/security/cve/CVE-2023-42503 https://github.com/apache/commons-compress https://github.com/apache/commons-compress/commit/aae38bfb820159ae7a0b792e779571f6a46b3889 https://lists.apache.org/thread/5xwcyr600mn074vgxq92tjssrchmc93c https://nvd.nist.gov/vuln/detail/CVE-2023-42503 https://security.netapp.com/advisory/ntap-20231020-0003 https://security.netapp.com/advisory/ntap-20231020-0003/ https://www.cve.org/CVERecord?id=CVE-2023-42503
org.apache.commons:commons-compress CVE-2024-25710 MEDIUM 1.22 1.26.0 http://seclists.org/fulldisclosure/2024/Aug/37 http://www.openwall.com/lists/oss-security/2024/02/19/1 https://access.redhat.com/security/cve/CVE-2024-25710 https://advisory.echohq.com/cve/CVE-2024-25710 https://github.com/advisories/GHSA-4g9r-vxhx-9pgx https://github.com/apache/commons-compress https://lists.apache.org/thread/cz8qkcwphy4cx8gltn932ln51cbtq6kf https://nvd.nist.gov/vuln/detail/CVE-2024-25710 https://security.netapp.com/advisory/ntap-20240307-0010 https://security.netapp.com/advisory/ntap-20240307-0010/ https://www.cve.org/CVERecord?id=CVE-2024-25710
org.apache.commons:commons-compress CVE-2024-26308 MEDIUM 1.22 1.26.0 http://www.openwall.com/lists/oss-security/2024/02/19/2 https://access.redhat.com/security/cve/CVE-2024-26308 https://advisory.echohq.com/cve/CVE-2024-26308 https://github.com/advisories/GHSA-4265-ccf5-phj5 https://github.com/apache/commons-compress https://lists.apache.org/thread/ch5yo2d21p7vlqrhll9b17otbyq4npfg https://nvd.nist.gov/vuln/detail/CVE-2024-26308 https://security.netapp.com/advisory/ntap-20240307-0009 https://security.netapp.com/advisory/ntap-20240307-0009/ https://www.cve.org/CVERecord?id=CVE-2024-26308 https://www.openwall.com/lists/oss-security/2024/02/19/2
org.apache.commons:commons-lang3 CVE-2025-48924 MEDIUM 3.12.0 3.18.0 http://www.openwall.com/lists/oss-security/2025/07/11/1 https://access.redhat.com/security/cve/CVE-2025-48924 https://advisory.echohq.com/cve/CVE-2025-48924 https://github.com/apache/commons-lang https://github.com/apache/commons-lang/commit/b424803abdb2bec818e4fbcb251ce031c22aca53 https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1 https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html https://nvd.nist.gov/vuln/detail/CVE-2025-48924 https://ubuntu.com/security/notices/USN-8364-1 https://www.cve.org/CVERecord?id=CVE-2025-48924 https://www.openwall.com/lists/oss-security/2025/07/11/1
org.apache.commons:commons-vfs2 CVE-2025-27553 HIGH 2.9.0 2.10.0 http://www.openwall.com/lists/oss-security/2025/03/23/1 https://access.redhat.com/security/cve/CVE-2025-27553 https://github.com/apache/commons-vfs https://linux.oracle.com/cve/CVE-2025-27553.html https://linux.oracle.com/errata/ELSA-2025-10548.html https://lists.apache.org/thread/cnzqowyw9r2pl263cylmxhnvh41hyjcb https://lists.debian.org/debian-lts-announce/2025/04/msg00006.html https://nvd.nist.gov/vuln/detail/CVE-2025-27553 https://www.cve.org/CVERecord?id=CVE-2025-27553
org.apache.commons:commons-vfs2 CVE-2025-30474 MEDIUM 2.9.0 2.10.0 http://www.openwall.com/lists/oss-security/2025/03/23/2 https://github.com/apache/commons-vfs https://issues.apache.org/jira/browse/VFS-169 https://lists.apache.org/thread/w6ztgnbk6ccry3470x191g3xwrpgy6f4 https://nvd.nist.gov/vuln/detail/CVE-2025-30474
org.apache.logging.log4j:log4j-api CVE-2026-49844 MEDIUM 2.18.0 2.25.5, 2.26.1 https://access.redhat.com/security/cve/CVE-2026-49844 https://advisory.echohq.com/cve/CVE-2026-49844 https://github.com/apache/logging-log4j2 https://github.com/apache/logging-log4j2/commit/19edb23e162d6c728a8c2221a240037d389ed300 https://github.com/apache/logging-log4j2/commit/feadf8eb0b4acb6ddfa4c0ab2bbc6d88b8e12d82 https://github.com/apache/logging-log4j2/pull/4163 https://github.com/apache/logging-log4j2/releases/tag/rel/2.25.5 https://github.com/apache/logging-log4j2/releases/tag/rel/2.26.1 https://logging.apache.org/cyclonedx/vdr.xml https://logging.apache.org/log4j/2.x/manual/json-template-layout.html#event-template-resolver-message https://logging.apache.org/security.html#CVE-2026-49844 https://nvd.nist.gov/vuln/detail/CVE-2026-49844 https://www.cve.org/CVERecord?id=CVE-2026-49844
org.apache.logging.log4j:log4j-core CVE-2025-68161 MEDIUM 2.18.0 2.25.3 http://www.openwall.com/lists/oss-security/2025/12/18/1 https://access.redhat.com/security/cve/CVE-2025-68161 https://advisory.echohq.com/cve/CVE-2025-68161 https://github.com/apache/logging-log4j2 https://github.com/apache/logging-log4j2/commit/3b93748497e1adbbd027fda8a5e7268ec5d0d578 https://github.com/apache/logging-log4j2/pull/4002 https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx https://lists.debian.org/debian-lts-announce/2026/01/msg00015.html https://logging.apache.org/cyclonedx/vdr.xml https://logging.apache.org/log4j/2.x/manual/appenders/network.html#SslConfiguration-attr-verifyHostName https://logging.apache.org/log4j/2.x/manual/systemproperties.html#log4j2.sslVerifyHostName https://logging.apache.org/security.html#CVE-2025-68161 https://nvd.nist.gov/vuln/detail/CVE-2025-68161 https://www.cve.org/CVERecord?id=CVE-2025-68161
org.apache.logging.log4j:log4j-core CVE-2026-34477 MEDIUM 2.18.0 2.25.4 https://access.redhat.com/security/cve/CVE-2026-34477 https://advisory.echohq.com/cve/CVE-2026-34477 https://github.com/apache/logging-log4j2 https://github.com/apache/logging-log4j2/pull/4075 https://lists.apache.org/thread/lkx8cl46t2bvkcwfcb2pd43ygc097lq4 https://logging.apache.org/cyclonedx/vdr.xml https://logging.apache.org/log4j/2.x/manual/appenders/network.html#SslConfiguration-attr-verifyHostName https://logging.apache.org/security.html#CVE-2026-34477 https://nvd.nist.gov/vuln/detail/CVE-2026-34477 https://www.cve.org/CVERecord?id=CVE-2026-34477
org.apache.logging.log4j:log4j-core CVE-2026-34479 MEDIUM 2.18.0 2.25.4 http://www.openwall.com/lists/oss-security/2026/04/10/8 https://access.redhat.com/security/cve/CVE-2026-34479 https://advisory.echohq.com/cve/CVE-2026-34479 https://github.com/apache/logging-log4j2 https://github.com/apache/logging-log4j2/pull/4078 https://lists.apache.org/thread/gd0hp6mj17rn3kj279vgy4p7kd4zz5on https://logging.apache.org/cyclonedx/vdr.xml https://logging.apache.org/log4j/2.x/migrate-from-log4j1.html https://logging.apache.org/security.html#CVE-2026-34479 https://nvd.nist.gov/vuln/detail/CVE-2026-34479 https://www.cve.org/CVERecord?id=CVE-2026-34479
org.apache.logging.log4j:log4j-core CVE-2026-34480 MEDIUM 2.18.0 2.25.4 http://www.openwall.com/lists/oss-security/2026/04/10/9 https://access.redhat.com/security/cve/CVE-2026-34480 https://advisory.echohq.com/cve/CVE-2026-34480 https://github.com/apache/logging-log4j2 https://github.com/apache/logging-log4j2/pull/4077 https://lists.apache.org/thread/5x0hcnng0chhghp6jgjdp3qmbbhfjzhb https://logging.apache.org/cyclonedx/vdr.xml https://logging.apache.org/log4j/2.x/manual/layouts.html#XmlLayout https://logging.apache.org/security.html#CVE-2026-34480 https://nvd.nist.gov/vuln/detail/CVE-2026-34480 https://www.cve.org/CVERecord?id=CVE-2026-34480
org.apache.poi:poi-ooxml CVE-2025-31672 MEDIUM 5.2.3 5.4.0 http://www.openwall.com/lists/oss-security/2025/04/08/2 https://access.redhat.com/security/cve/CVE-2025-31672 https://advisory.echohq.com/cve/CVE-2025-31672 https://bz.apache.org/bugzilla/show_bug.cgi?id=69620 https://github.com/advisories/GHSA-gmg8-593g-7mv3 https://github.com/apache/poi https://lists.apache.org/thread/k14w8vcjqy4h34hh5kzldko78kpylkq5 https://nvd.nist.gov/vuln/detail/CVE-2025-31672 https://security.netapp.com/advisory/ntap-20250523-0004 https://security.netapp.com/advisory/ntap-20250523-0004/ https://www.cve.org/CVERecord?id=CVE-2025-31672
org.apache.tika:tika-core CVE-2025-66516 CRITICAL 2.6.0 3.2.2 https://access.redhat.com/security/cve/CVE-2025-66516 https://cve.org/CVERecord?id=CVE-2025-54988 https://github.com/apache/tika https://lists.apache.org/thread/s5x3k93nhbkqzztp1olxotoyjpdlps9k https://nvd.nist.gov/vuln/detail/CVE-2025-66516 https://ubuntu.com/security/notices/USN-8324-1 https://www.cve.org/CVERecord?id=CVE-2025-66516
org.bouncycastle:bcprov-jdk15on CVE-2023-33201 MEDIUM 1.70 https://access.redhat.com/security/cve/CVE-2023-33201 https://bouncycastle.org https://bouncycastle.org/releasenotes.html#r1rv74 https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/commit/ccf93ca736b89250ff4ce079a5aa56f5cbf0ebbd https://github.com/bcgit/bc-java/commit/e8c409a8389c815ea3fda5e8b94c92fdfe583bcc https://github.com/bcgit/bc-java/commits/main/prov/src/main/java/org/bouncycastle/jce/provider/X509LDAPCertStoreSpi.java https://github.com/bcgit/bc-java/wiki/CVE-2023-33201 https://lists.debian.org/debian-lts-announce/2023/08/msg00000.html https://nvd.nist.gov/vuln/detail/CVE-2023-33201 https://security.netapp.com/advisory/ntap-20230824-0008 https://security.netapp.com/advisory/ntap-20230824-0008/ https://ubuntu.com/security/notices/USN-8108-1 https://www.cve.org/CVERecord?id=CVE-2023-33201
org.bouncycastle:bcprov-jdk15on CVE-2024-29857 MEDIUM 1.70 1.78 https://access.redhat.com/security/cve/CVE-2024-29857 https://github.com/bcgit/bc-csharp/commit/56daa6eac526f165416d17f661422d60de0dfd63 https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9029857 https://github.com/bcgit/bc-java/commit/efc498ca4caa340ac2fe11f2efee06c1a294501f https://github.com/bcgit/bc-java/commit/fee80dd230e7fba132d03a34f1dd1d6aae0d0281 https://github.com/bcgit/bc-java/issues/1635 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9029857 https://nvd.nist.gov/vuln/detail/CVE-2024-29857 https://security.netapp.com/advisory/ntap-20241206-0008 https://security.netapp.com/advisory/ntap-20241206-0008/ https://ubuntu.com/security/notices/USN-8108-1 https://www.bouncycastle.org/latest_releases.html https://www.cve.org/CVERecord?id=CVE-2024-29857
org.bouncycastle:bcprov-jdk15on CVE-2024-30171 MEDIUM 1.70 1.78 https://access.redhat.com/security/cve/CVE-2024-30171 https://github.com/bcgit/bc-csharp/commit/c984b8bfd8544dfc55dba91a02cbbbb9c580c217 https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9030171 https://github.com/bcgit/bc-java/commit/d7d5e735abd64bf0f413f54fd9e495fc02400fb0 https://github.com/bcgit/bc-java/commit/e0569dcb1dea9d421d84fc4c5c5688fe101afa2d https://github.com/bcgit/bc-java/issues/1528 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9030171 https://nvd.nist.gov/vuln/detail/CVE-2024-30171 https://people.redhat.com/~hkario/marvin/ https://security.netapp.com/advisory/ntap-20240614-0008 https://security.netapp.com/advisory/ntap-20240614-0008/ https://ubuntu.com/security/notices/USN-8108-1 https://www.bouncycastle.org/latest_releases.html https://www.cve.org/CVERecord?id=CVE-2024-30171
org.bouncycastle:bcprov-jdk15on CVE-2024-34447 MEDIUM 1.70 1.78 http://security.netapp.com/advisory/ntap-20240614-0007 https://access.redhat.com/security/cve/CVE-2024-34447 https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/issues/1656 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9034447 https://nvd.nist.gov/vuln/detail/CVE-2024-34447 https://security.netapp.com/advisory/ntap-20240614-0007/ https://ubuntu.com/security/notices/USN-8108-1 https://www.bouncycastle.org/latest_releases.html https://www.cve.org/CVERecord?id=CVE-2024-34447
org.eclipse.angus:smtp CVE-2025-7962 MEDIUM 1.0.0 2.0.4 http://www.openwall.com/lists/oss-security/2025/09/03/4 https://access.redhat.com/security/cve/CVE-2025-7962 https://advisory.echohq.com/cve/CVE-2025-7962 https://github.com/advisories/GHSA-9342-92gg-6v29 https://github.com/eclipse-ee4j/angus-mail https://github.com/eclipse-ee4j/angus-mail/commit/269099b652a0a5c2fa140f1296a18f0fbbea0d44 https://github.com/jakartaee/mail-api/issues/765 https://github.com/jakartaee/mail-api/pull/760 https://gitlab.eclipse.org/security/cve-assignement/-/issues/67 https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/290 https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/290#note_5320539 https://nvd.nist.gov/vuln/detail/CVE-2025-7962 https://www.cve.org/CVERecord?id=CVE-2025-7962
org.json:json CVE-2022-45688 HIGH 20140107 20230227 https://github.com/dromara/hutool/commit/6a2b585de0a380e8c12016dbaa1620b69be11b8c https://github.com/dromara/hutool/issues/2748 https://github.com/dromara/hutool/releases/tag/5.8.25 https://github.com/stleary/JSON-java/commit/a6e412bded7a0ad605adfeca029318f184c32102 https://github.com/stleary/JSON-java/issues/708 https://nvd.nist.gov/vuln/detail/CVE-2022-45688
org.json:json CVE-2023-5072 HIGH 20140107 20231013 http://www.openwall.com/lists/oss-security/2023/12/13/4 https://access.redhat.com/security/cve/CVE-2023-5072 https://advisory.echohq.com/cve/CVE-2023-5072 https://github.com/advisories/GHSA-4jq9-2xhw-jpx7 https://github.com/google/security-research/security/advisories/GHSA-4jq9-2xhw-jpx7 https://github.com/stleary/JSON-java https://github.com/stleary/JSON-java/commit/60662e2f8384d3449822a3a1179bfe8de67b55bb https://github.com/stleary/JSON-java/issues/758 https://github.com/stleary/JSON-java/issues/771 https://github.com/stleary/JSON-java/pull/759 https://nvd.nist.gov/vuln/detail/CVE-2023-5072 https://security.netapp.com/advisory/ntap-20240621-0007/ https://www.cve.org/CVERecord?id=CVE-2023-5072
org.keycloak:keycloak-core CVE-2023-6841 HIGH 20.0.3 24.0.0 https://access.redhat.com/security/cve/CVE-2023-6841 https://bugzilla.redhat.com/show_bug.cgi?id=2254714 https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/issues/32837 https://github.com/keycloak/keycloak/releases/tag/24.0.0 https://nvd.nist.gov/vuln/detail/CVE-2023-6841 https://www.cve.org/CVERecord?id=CVE-2023-6841
org.keycloak:keycloak-core CVE-2024-10039 HIGH 20.0.3 26.0.6 https://access.redhat.com/security/cve/CVE-2024-10039 https://advisory.echohq.com/cve/CVE-2024-10039 https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/issues/35217 https://github.com/keycloak/keycloak/security/advisories/GHSA-93ww-43rr-79v3 https://nvd.nist.gov/vuln/detail/CVE-2024-10039 https://www.cve.org/CVERecord?id=CVE-2024-10039
org.keycloak:keycloak-core CVE-2023-0105 MEDIUM 20.0.3 22.0.1 https://access.redhat.com/security/cve/CVE-2023-0105 https://bugzilla.redhat.com/show_bug.cgi?id=2158910 https://github.com/advisories/GHSA-c7xw-p58w-h6fj https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/commit/87a50d3ba790b049e436c9925874f9b418af7988 https://github.com/keycloak/keycloak/security/advisories/GHSA-c7xw-p58w-h6fj https://nvd.nist.gov/vuln/detail/CVE-2023-0105 https://www.cve.org/CVERecord?id=CVE-2023-0105
org.keycloak:keycloak-core CVE-2023-1664 MEDIUM 20.0.3 21.1.2 https://access.redhat.com/security/cve/CVE-2023-1664 https://bugzilla.redhat.com/show_bug.cgi?id=2182196&comment#0 https://github.com/advisories/GHSA-5cc8-pgp5-7mpm https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/security/advisories/GHSA-5cc8-pgp5-7mpm https://nvd.nist.gov/vuln/detail/CVE-2023-1664 https://www.cve.org/CVERecord?id=CVE-2023-1664
org.keycloak:keycloak-core CVE-2023-6927 MEDIUM 20.0.3 23.0.4 https://access.redhat.com/errata/RHSA-2024:0094 https://access.redhat.com/errata/RHSA-2024:0095 https://access.redhat.com/errata/RHSA-2024:0096 https://access.redhat.com/errata/RHSA-2024:0097 https://access.redhat.com/errata/RHSA-2024:0098 https://access.redhat.com/errata/RHSA-2024:0100 https://access.redhat.com/errata/RHSA-2024:0101 https://access.redhat.com/errata/RHSA-2024:0798 https://access.redhat.com/errata/RHSA-2024:0799 https://access.redhat.com/errata/RHSA-2024:0800 https://access.redhat.com/errata/RHSA-2024:0801 https://access.redhat.com/errata/RHSA-2024:0804 https://access.redhat.com/security/cve/CVE-2023-6927 https://bugzilla.redhat.com/show_bug.cgi?id=2255027 https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/security/advisories/GHSA-9vm7-v8wj-3fqw https://nvd.nist.gov/vuln/detail/CVE-2023-6927 https://www.cve.org/CVERecord?id=CVE-2023-6927
org.keycloak:keycloak-core CVE-2024-7260 MEDIUM 20.0.3 24.0.7 https://access.redhat.com/errata/RHSA-2024:6502 https://access.redhat.com/errata/RHSA-2024:6503 https://access.redhat.com/security/cve/CVE-2024-7260 https://bugzilla.redhat.com/show_bug.cgi?id=2301875 https://github.com/keycloak/keycloak https://nvd.nist.gov/vuln/detail/CVE-2024-7260 https://www.cve.org/CVERecord?id=CVE-2024-7260
org.keycloak:keycloak-core CVE-2024-7318 MEDIUM 20.0.3 24.0.7, 25.0.4 https://access.redhat.com/errata/RHSA-2024:6502 https://access.redhat.com/errata/RHSA-2024:6503 https://access.redhat.com/security/cve/CVE-2024-7318 https://bugzilla.redhat.com/show_bug.cgi?id=2301876 https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/security/advisories/GHSA-xmmm-jw76-q7vg https://nvd.nist.gov/vuln/detail/CVE-2024-7318 https://www.cve.org/CVERecord?id=CVE-2024-7318
org.keycloak:keycloak-core CVE-2024-4028 LOW 20.0.3 https://access.redhat.com/security/cve/CVE-2024-4028 https://advisory.echohq.com/cve/CVE-2024-4028 https://bugzilla.redhat.com/show_bug.cgi?id=2276418 https://github.com/keycloak/keycloak https://nvd.nist.gov/vuln/detail/CVE-2024-4028 https://www.cve.org/CVERecord?id=CVE-2024-4028
org.omnifaces:omnifaces CVE-2026-102695 HIGH 2.7.1 1.14.3, 2.7.33, 3.14.23, 4.7.12, 5.4.2 https://github.com/omnifaces/omnifaces https://github.com/omnifaces/omnifaces/commit/59d6c5188c39418546fe500d05036645987a77d1 https://github.com/omnifaces/omnifaces/commit/a52b92461cf39d983f51ce8724fe7e6b944073e4 https://github.com/omnifaces/omnifaces/commit/aa42da361821ddfbb85b126564e71587347d2786 https://github.com/omnifaces/omnifaces/commit/c43eef01174a4dc09cec44eff553ff6284150af7 https://github.com/omnifaces/omnifaces/commit/d5cae243c4692555efaa4ba774e0f8f60e3f4db5 https://github.com/omnifaces/omnifaces/releases/tag/1.14.3 https://github.com/omnifaces/omnifaces/releases/tag/2.7.33 https://github.com/omnifaces/omnifaces/releases/tag/3.14.23 https://github.com/omnifaces/omnifaces/releases/tag/4.7.12 https://github.com/omnifaces/omnifaces/releases/tag/5.4.2 https://github.com/omnifaces/omnifaces/security/advisories/GHSA-fp43-vj7g-pg92
org.omnifaces:omnifaces CVE-2026-41883 HIGH 2.7.1 1.14.2, 2.7.32, 3.14.16, 4.7.5, 5.2.3 https://github.com/omnifaces/omnifaces https://github.com/omnifaces/omnifaces/security/advisories/GHSA-vp6r-9m58-5xv8 https://nvd.nist.gov/vuln/detail/CVE-2026-41883
org.primefaces:primefaces CVE-2020-10544 MEDIUM 7.0 8.0 https://github.com/primefaces/primefaces https://github.com/primefaces/primefaces/commit/9982c4f7a83f75e3ab06168fa283e3d6128dfd1f https://github.com/primefaces/primefaces/issues/5642 https://nvd.nist.gov/vuln/detail/CVE-2020-10544
org.springframework:spring-context CVE-2024-38820 MEDIUM 6.0.0 6.1.14 https://advisory.echohq.com/cve/CVE-2024-38820 https://github.com/advisories/GHSA-4gc7-5j7h-4qph https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/23656aebc6c7d0f9faff1080981eb4d55eff296c https://github.com/spring-projects/spring-framework/commits/v6.2.0-RC2 https://nvd.nist.gov/vuln/detail/CVE-2024-38820 https://security.netapp.com/advisory/ntap-20241129-0003 https://security.netapp.com/advisory/ntap-20241129-0003/ https://spring.io/security/cve-2024-38820
org.springframework:spring-context CVE-2025-22233 LOW 6.0.0 6.2.7, 6.1.20 https://advisory.echohq.com/cve/CVE-2025-22233 https://github.com/advisories/GHSA-4wp7-92pw-q264 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/edfcc6ffb188e4614ec9b212e3208b666981851c https://github.com/spring-projects/spring-framework/commit/ee62701f5634e904e42e218baad142cea2bcd332 https://github.com/spring-projects/spring-framework/issues/34801 https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N&version=3.1 https://nvd.nist.gov/vuln/detail/CVE-2025-22233 https://spring.io/security/cve-2025-22233
org.springframework:spring-core CVE-2025-41249 HIGH 5.3.20 6.2.11 https://access.redhat.com/security/cve/CVE-2025-41249 https://advisory.echohq.com/cve/CVE-2025-41249 https://github.com/advisories/GHSA-jmp9-x22r-554x https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/6d710d482a6785b069e35022e81758953afc21ff https://github.com/spring-projects/spring-framework/issues/35342 https://github.com/spring-projects/spring-framework/releases/tag/v6.2.11 https://nvd.nist.gov/vuln/detail/CVE-2025-41249 https://spring.io/security/cve-2025-41249 https://www.cve.org/CVERecord?id=CVE-2025-41249
org.springframework:spring-core CVE-2026-41848 LOW 5.3.20 7.0.8, 6.2.19 https://access.redhat.com/security/cve/CVE-2026-41848 https://advisory.echohq.com/cve/CVE-2026-41848 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/12b44f2545a1bec6150c7a05e66092c732597a94 https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41848 https://spring.io/security/cve-2026-41848 https://www.cve.org/CVERecord?id=CVE-2026-41848
org.springframework:spring-expression CVE-2023-20863 HIGH 6.0.0 6.0.8, 5.3.27, 5.2.24.RELEASE https://access.redhat.com/security/cve/CVE-2023-20863 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/965a6392757d20f9db19241126fcc719a51eac15 https://github.com/spring-projects/spring-framework/commit/b73f5fcac22555f844cf27a7eeb876cb9d7f7f7e https://github.com/spring-projects/spring-framework/commit/ebc82654282bda547fbc20a9749ab1bda886a46f https://nvd.nist.gov/vuln/detail/CVE-2023-20863 https://security.netapp.com/advisory/ntap-20240524-0015 https://security.netapp.com/advisory/ntap-20240524-0015/ https://spring.io/security/cve-2023-20863 https://www.cve.org/CVERecord?id=CVE-2023-20863
org.springframework:spring-expression CVE-2023-20861 MEDIUM 6.0.0 6.0.7, 5.3.26, 5.2.23.RELEASE https://access.redhat.com/security/cve/CVE-2023-20861 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/430fc25acad2e85cbdddcd52b64481691f03ebd1 https://github.com/spring-projects/spring-framework/commit/52c93b1c4b24d70de233a958e60e7c5822bd274f https://github.com/spring-projects/spring-framework/commit/935c29e3ddba5b19951e54f6685c70ed45d9cbe5 https://nvd.nist.gov/vuln/detail/CVE-2023-20861 https://security.netapp.com/advisory/ntap-20230420-0007 https://security.netapp.com/advisory/ntap-20230420-0007/ https://spring.io/blog/2023/03/20/spring-framework-6-0-7-and-5-3-26-fix-cve-2023-20860-and-cve-2023-20861 https://spring.io/security/cve-2023-20861 https://www.cve.org/CVERecord?id=CVE-2023-20861
No Misconfigurations found