docker.io/opencell/wildfly-opencell-standalone:11.0.0 (alpine 3.15.4) - Trivy Report - 2026-10-29 03:35:50.984509375 +0000 UTC m=+16.451029308

alpine
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
curl	CVE-2022-32207	CRITICAL	7.80.0-r1	7.80.0-r2	http://seclists.org/fulldisclosure/2022/Oct/28 http://seclists.org/fulldisclosure/2022/Oct/41 https://access.redhat.com/errata/RHSA-2022:6157 https://access.redhat.com/security/cve/CVE-2022-32207 https://bugzilla.redhat.com/2099300 https://bugzilla.redhat.com/2099305 https://bugzilla.redhat.com/2099306 https://bugzilla.redhat.com/show_bug.cgi?id=2099300 https://bugzilla.redhat.com/show_bug.cgi?id=2099305 https://bugzilla.redhat.com/show_bug.cgi?id=2099306 https://cert-portal.siemens.com/productcert/html/ssa-146325.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-419740.html https://cert-portal.siemens.com/productcert/html/ssa-558014.html https://cert-portal.siemens.com/productcert/html/ssa-942865.html https://creativecommons.org/licenses/by/4.0/ https://curl.se/docs/CVE-2022-32207.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208 https://errata.almalinux.org/9/ALSA-2022-6157.html https://errata.rockylinux.org/RLSA-2022:6157 https://hackerone.com/reports/1573634 https://linux.oracle.com/cve/CVE-2022-32207.html https://linux.oracle.com/errata/ELSA-2022-6157.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/ https://nvd.nist.gov/vuln/detail/CVE-2022-32207 https://security.gentoo.org/glsa/202212-01 https://security.netapp.com/advisory/ntap-20220915-0003/ https://support.apple.com/kb/HT213488 https://ubuntu.com/security/notices/USN-5495-1 https://www.cve.org/CVERecord?id=CVE-2022-32207 https://www.debian.org/security/2022/dsa-5197
curl	CVE-2022-32221	CRITICAL	7.80.0-r1	7.80.0-r4	http://seclists.org/fulldisclosure/2023/Jan/19 http://seclists.org/fulldisclosure/2023/Jan/20 http://www.openwall.com/lists/oss-security/2023/05/17/4 https://access.redhat.com/errata/RHSA-2023:0333 https://access.redhat.com/security/cve/CVE-2022-32221 https://bugzilla.redhat.com/2135411 https://bugzilla.redhat.com/show_bug.cgi?id=2135411 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-892048.html https://creativecommons.org/licenses/by/4.0/ https://curl.se/docs/CVE-2022-32221.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32221 https://errata.almalinux.org/9/ALSA-2023-0333.html https://errata.rockylinux.org/RLSA-2023:0333 https://hackerone.com/reports/1704017 https://linux.oracle.com/cve/CVE-2022-32221.html https://linux.oracle.com/errata/ELSA-2023-0333.html https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html https://nvd.nist.gov/vuln/detail/CVE-2022-32221 https://security.gentoo.org/glsa/202212-01 https://security.netapp.com/advisory/ntap-20230110-0006/ https://security.netapp.com/advisory/ntap-20230208-0002/ https://support.apple.com/kb/HT213604 https://support.apple.com/kb/HT213605 https://ubuntu.com/security/notices/USN-5702-1 https://ubuntu.com/security/notices/USN-5702-2 https://ubuntu.com/security/notices/USN-5823-1 https://www.cve.org/CVERecord?id=CVE-2022-32221 https://www.debian.org/security/2023/dsa-5330
curl	CVE-2023-23914	CRITICAL	7.80.0-r1	7.80.0-r6	https://access.redhat.com/security/cve/CVE-2023-23914 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://curl.se/docs/CVE-2023-23914.html https://hackerone.com/reports/1813864 https://nvd.nist.gov/vuln/detail/CVE-2023-23914 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230309-0006/ https://ubuntu.com/security/notices/USN-5891-1 https://www.cve.org/CVERecord?id=CVE-2023-23914
curl	CVE-2023-38545	CRITICAL	7.80.0-r1	8.4.0-r0	http://seclists.org/fulldisclosure/2024/Jan/34 http://seclists.org/fulldisclosure/2024/Jan/37 http://seclists.org/fulldisclosure/2024/Jan/38 https://access.redhat.com/errata/RHSA-2023:5763 https://access.redhat.com/errata/RHSA-2023:6745 https://access.redhat.com/security/cve/CVE-2023-38545 https://bugzilla.redhat.com/2241933 https://bugzilla.redhat.com/2241938 https://bugzilla.redhat.com/show_bug.cgi?id=2241933 https://bugzilla.redhat.com/show_bug.cgi?id=2241938 https://cert-portal.siemens.com/productcert/html/ssa-082556.html https://cert-portal.siemens.com/productcert/html/ssa-093430.html https://cert-portal.siemens.com/productcert/html/ssa-507364.html https://cert-portal.siemens.com/productcert/html/ssa-832273.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://creativecommons.org/licenses/by/4.0/ https://curl.se/docs/CVE-2023-38545.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38545 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38546 https://errata.almalinux.org/9/ALSA-2023-6745.html https://errata.rockylinux.org/RLSA-2023:5763 https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868 https://github.com/UTsweetyfish/CVE-2023-38545 https://github.com/bcdannyboy/CVE-2023-38545 https://github.com/dbrugman/CVE-2023-38545-POC https://linux.oracle.com/cve/CVE-2023-38545.html https://linux.oracle.com/errata/ELSA-2023-6745.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/ https://nvd.nist.gov/vuln/detail/CVE-2023-38545 https://security.netapp.com/advisory/ntap-20231027-0009/ https://security.netapp.com/advisory/ntap-20240201-0005/ https://support.apple.com/kb/HT214036 https://support.apple.com/kb/HT214057 https://support.apple.com/kb/HT214058 https://support.apple.com/kb/HT214063 https://ubuntu.com/security/notices/USN-6429-1 https://ubuntu.com/security/notices/USN-6429-3 https://www.cve.org/CVERecord?id=CVE-2023-38545 https://www.secpod.com/blog/high-severity-heap-buffer-overflow-vulnerability/
curl	CVE-2022-27780	HIGH	7.80.0-r1	7.80.0-r2	https://access.redhat.com/security/cve/CVE-2022-27780 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://curl.se/docs/CVE-2022-27780.html https://hackerone.com/reports/1553841 https://nvd.nist.gov/vuln/detail/CVE-2022-27780 https://security.gentoo.org/glsa/202212-01 https://security.netapp.com/advisory/ntap-20220609-0009/ https://ubuntu.com/security/notices/USN-5412-1 https://www.cve.org/CVERecord?id=CVE-2022-27780
curl	CVE-2022-27781	HIGH	7.80.0-r1	7.80.0-r2	https://access.redhat.com/security/cve/CVE-2022-27781 https://cert-portal.siemens.com/productcert/html/ssa-146325.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://curl.se/docs/CVE-2022-27781.html https://github.com/curl/curl/commit/f6c335d63f https://hackerone.com/reports/1555441 https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html https://nvd.nist.gov/vuln/detail/CVE-2022-27781 https://security.gentoo.org/glsa/202212-01 https://security.netapp.com/advisory/ntap-20220609-0009/ https://ubuntu.com/security/notices/USN-5412-1 https://ubuntu.com/security/notices/USN-5499-1 https://www.cve.org/CVERecord?id=CVE-2022-27781 https://www.debian.org/security/2022/dsa-5197
curl	CVE-2022-27782	HIGH	7.80.0-r1	7.80.0-r2	http://www.openwall.com/lists/oss-security/2023/03/20/6 https://access.redhat.com/errata/RHSA-2022:5313 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-22576.json https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27774.json https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27776.json https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27782.json https://access.redhat.com/security/cve/CVE-2022-27782 https://bugzilla.redhat.com/2077541 https://bugzilla.redhat.com/2077547 https://bugzilla.redhat.com/2078408 https://bugzilla.redhat.com/2082215 https://cert-portal.siemens.com/productcert/html/ssa-146325.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://curl.se/docs/CVE-2022-27782.html https://errata.almalinux.org/8/ALSA-2022-5313.html https://hackerone.com/reports/1555796 https://linux.oracle.com/cve/CVE-2022-27782.html https://linux.oracle.com/errata/ELSA-2022-5313.html https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html https://nvd.nist.gov/vuln/detail/CVE-2022-27782 https://security.gentoo.org/glsa/202212-01 https://security.netapp.com/advisory/ntap-20220609-0009/ https://ubuntu.com/security/notices/USN-5412-1 https://www.cve.org/CVERecord?id=CVE-2022-27782 https://www.debian.org/security/2022/dsa-5197
curl	CVE-2022-42915	HIGH	7.80.0-r1	7.80.0-r4	http://seclists.org/fulldisclosure/2023/Jan/19 http://seclists.org/fulldisclosure/2023/Jan/20 https://access.redhat.com/security/cve/CVE-2022-42915 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-892048.html https://curl.se/docs/CVE-2022-42915.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/37YEVVC6NAF6H7UHH6YAUY5QEVY6LIH2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVU3IMZCKR4VE6KJ4GCWRL2ILLC6OV76/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q27V5YYMXUVI6PRZQVECON32XPVWTKDK/ https://nvd.nist.gov/vuln/detail/CVE-2022-42915 https://security.gentoo.org/glsa/202212-01 https://security.netapp.com/advisory/ntap-20221209-0010/ https://support.apple.com/kb/HT213604 https://support.apple.com/kb/HT213605 https://ubuntu.com/security/notices/USN-5702-1 https://www.cve.org/CVERecord?id=CVE-2022-42915
curl	CVE-2022-42916	HIGH	7.80.0-r1	7.80.0-r4	http://seclists.org/fulldisclosure/2023/Jan/19 http://seclists.org/fulldisclosure/2023/Jan/20 http://www.openwall.com/lists/oss-security/2022/12/21/1 https://access.redhat.com/security/cve/CVE-2022-42916 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-892048.html https://curl.se/docs/CVE-2022-42916.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/37YEVVC6NAF6H7UHH6YAUY5QEVY6LIH2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVU3IMZCKR4VE6KJ4GCWRL2ILLC6OV76/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q27V5YYMXUVI6PRZQVECON32XPVWTKDK/ https://nvd.nist.gov/vuln/detail/CVE-2022-42916 https://security.gentoo.org/glsa/202212-01 https://security.netapp.com/advisory/ntap-20221209-0010/ https://support.apple.com/kb/HT213604 https://support.apple.com/kb/HT213605 https://ubuntu.com/security/notices/USN-5702-1 https://www.cve.org/CVERecord?id=CVE-2022-42916
curl	CVE-2022-43551	HIGH	7.80.0-r1	7.80.0-r5	https://access.redhat.com/security/cve/CVE-2022-43551 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-892048.html https://curl.se/docs/CVE-2022-43551.html https://hackerone.com/reports/1755083 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TVWZW5CNSJ7UYAF2BGSYAWAEXDJYUBHA/ https://nvd.nist.gov/vuln/detail/CVE-2022-43551 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230427-0007/ https://ubuntu.com/security/notices/USN-5788-1 https://www.cve.org/CVERecord?id=CVE-2022-43551
curl	CVE-2023-27533	HIGH	7.80.0-r1	8.0.1-r0	https://access.redhat.com/errata/RHSA-2023:6679 https://access.redhat.com/security/cve/CVE-2023-27533 https://bugzilla.redhat.com/2179062 https://bugzilla.redhat.com/2179069 https://bugzilla.redhat.com/2179092 https://bugzilla.redhat.com/2179103 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://curl.se/docs/CVE-2023-27533.html https://errata.almalinux.org/9/ALSA-2023-6679.html https://hackerone.com/reports/1891474 https://linux.oracle.com/cve/CVE-2023-27533.html https://linux.oracle.com/errata/ELSA-2023-6679.html https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/ https://nvd.nist.gov/vuln/detail/CVE-2023-27533 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230420-0011/ https://ubuntu.com/security/notices/USN-5964-1 https://ubuntu.com/security/notices/USN-5964-2 https://www.cve.org/CVERecord?id=CVE-2023-27533
curl	CVE-2023-27534	HIGH	7.80.0-r1	8.0.1-r0	https://access.redhat.com/errata/RHSA-2023:6679 https://access.redhat.com/security/cve/CVE-2023-27534 https://bugzilla.redhat.com/2179062 https://bugzilla.redhat.com/2179069 https://bugzilla.redhat.com/2179092 https://bugzilla.redhat.com/2179103 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-806742.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://curl.se/docs/CVE-2023-27534.html https://errata.almalinux.org/9/ALSA-2023-6679.html https://hackerone.com/reports/1892351 https://linux.oracle.com/cve/CVE-2023-27534.html https://linux.oracle.com/errata/ELSA-2023-6679.html https://lists.debian.org/debian-lts-announce/2024/03/msg00016.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/ https://nvd.nist.gov/vuln/detail/CVE-2023-27534 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230420-0012/ https://ubuntu.com/security/notices/USN-5964-1 https://www.cve.org/CVERecord?id=CVE-2023-27534
curl	CVE-2023-28319	HIGH	7.80.0-r1	8.1.0-r0	http://seclists.org/fulldisclosure/2023/Jul/47 http://seclists.org/fulldisclosure/2023/Jul/48 http://seclists.org/fulldisclosure/2023/Jul/52 https://access.redhat.com/security/cve/CVE-2023-28319 https://curl.se/docs/CVE-2023-28319.html https://hackerone.com/reports/1913733 https://nvd.nist.gov/vuln/detail/CVE-2023-28319 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230609-0009/ https://support.apple.com/kb/HT213843 https://support.apple.com/kb/HT213844 https://support.apple.com/kb/HT213845 https://www.cve.org/CVERecord?id=CVE-2023-28319
curl	CVE-2023-38039	HIGH	7.80.0-r1	8.3.0-r0	http://seclists.org/fulldisclosure/2023/Oct/17 http://seclists.org/fulldisclosure/2024/Jan/34 http://seclists.org/fulldisclosure/2024/Jan/37 http://seclists.org/fulldisclosure/2024/Jan/38 https://access.redhat.com/security/cve/CVE-2023-38039 https://curl.se/docs/CVE-2023-38039.html https://github.com/advisories/GHSA-99j9-jf36-9747 https://hackerone.com/reports/2072338 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5DCZMYODALBLVOXVJEN2LF2MLANEYL4F https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5DCZMYODALBLVOXVJEN2LF2MLANEYL4F/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M6KGKB2JNZVT276JYSKI6FV2VFJUGDOJ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M6KGKB2JNZVT276JYSKI6FV2VFJUGDOJ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TEAWTYHC3RT6ZRS5OZRHLAIENVN6CCIS https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TEAWTYHC3RT6ZRS5OZRHLAIENVN6CCIS/ https://nvd.nist.gov/vuln/detail/CVE-2023-38039 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20231013-0005 https://security.netapp.com/advisory/ntap-20231013-0005/ https://support.apple.com/kb/HT214036 https://support.apple.com/kb/HT214057 https://support.apple.com/kb/HT214058 https://support.apple.com/kb/HT214063 https://ubuntu.com/security/notices/USN-6363-1 https://www.cve.org/CVERecord?id=CVE-2023-38039 https://www.insyde.com/security-pledge/SA-2023064
curl	CVE-2022-32205	MEDIUM	7.80.0-r1	7.80.0-r2	http://seclists.org/fulldisclosure/2022/Oct/28 http://seclists.org/fulldisclosure/2022/Oct/41 https://access.redhat.com/security/cve/CVE-2022-32205 https://cert-portal.siemens.com/productcert/html/ssa-333517.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-419740.html https://cert-portal.siemens.com/productcert/html/ssa-558014.html https://cert-portal.siemens.com/productcert/html/ssa-942865.html https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf https://curl.se/docs/CVE-2022-32205.html https://hackerone.com/reports/1569946 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/ https://nvd.nist.gov/vuln/detail/CVE-2022-32205 https://security.gentoo.org/glsa/202212-01 https://security.netapp.com/advisory/ntap-20220915-0003/ https://support.apple.com/kb/HT213488 https://ubuntu.com/security/notices/USN-5495-1 https://www.cve.org/CVERecord?id=CVE-2022-32205 https://www.debian.org/security/2022/dsa-5197
curl	CVE-2022-32206	MEDIUM	7.80.0-r1	7.80.0-r2	http://seclists.org/fulldisclosure/2022/Oct/28 http://seclists.org/fulldisclosure/2022/Oct/41 http://www.openwall.com/lists/oss-security/2023/02/15/3 https://access.redhat.com/errata/RHSA-2022:6157 https://access.redhat.com/errata/RHSA-2022:6159 https://access.redhat.com/security/cve/CVE-2022-32206 https://bugzilla.redhat.com/2099300 https://bugzilla.redhat.com/2099306 https://bugzilla.redhat.com/show_bug.cgi?id=2099300 https://bugzilla.redhat.com/show_bug.cgi?id=2099305 https://bugzilla.redhat.com/show_bug.cgi?id=2099306 https://cert-portal.siemens.com/productcert/html/ssa-333517.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-419740.html https://cert-portal.siemens.com/productcert/html/ssa-558014.html https://cert-portal.siemens.com/productcert/html/ssa-942865.html https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf https://creativecommons.org/licenses/by/4.0/ https://curl.se/docs/CVE-2022-32206.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208 https://errata.almalinux.org/8/ALSA-2022-6159.html https://errata.rockylinux.org/RLSA-2022:6157 https://hackerone.com/reports/1570651 https://linux.oracle.com/cve/CVE-2022-32206.html https://linux.oracle.com/errata/ELSA-2022-6159.html https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/ https://nvd.nist.gov/vuln/detail/CVE-2022-32206 https://security.gentoo.org/glsa/202212-01 https://security.netapp.com/advisory/ntap-20220915-0003/ https://support.apple.com/kb/HT213488 https://ubuntu.com/security/notices/USN-5495-1 https://www.cve.org/CVERecord?id=CVE-2022-32206 https://www.debian.org/security/2022/dsa-5197
curl	CVE-2022-32208	MEDIUM	7.80.0-r1	7.80.0-r2	http://seclists.org/fulldisclosure/2022/Oct/28 http://seclists.org/fulldisclosure/2022/Oct/41 https://access.redhat.com/errata/RHSA-2022:6157 https://access.redhat.com/errata/RHSA-2022:6159 https://access.redhat.com/security/cve/CVE-2022-32208 https://bugzilla.redhat.com/2099300 https://bugzilla.redhat.com/2099306 https://bugzilla.redhat.com/show_bug.cgi?id=2099300 https://bugzilla.redhat.com/show_bug.cgi?id=2099305 https://bugzilla.redhat.com/show_bug.cgi?id=2099306 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-419740.html https://cert-portal.siemens.com/productcert/html/ssa-558014.html https://cert-portal.siemens.com/productcert/html/ssa-942865.html https://creativecommons.org/licenses/by/4.0/ https://curl.se/docs/CVE-2022-32208.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208 https://errata.almalinux.org/8/ALSA-2022-6159.html https://errata.rockylinux.org/RLSA-2022:6157 https://hackerone.com/reports/1590071 https://linux.oracle.com/cve/CVE-2022-32208.html https://linux.oracle.com/errata/ELSA-2022-6159.html https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/ https://nvd.nist.gov/vuln/detail/CVE-2022-32208 https://security.gentoo.org/glsa/202212-01 https://security.netapp.com/advisory/ntap-20220915-0003/ https://support.apple.com/kb/HT213488 https://ubuntu.com/security/notices/USN-5495-1 https://ubuntu.com/security/notices/USN-5499-1 https://www.cve.org/CVERecord?id=CVE-2022-32208 https://www.debian.org/security/2022/dsa-5197
curl	CVE-2022-43552	MEDIUM	7.80.0-r1	7.80.0-r5	http://seclists.org/fulldisclosure/2023/Mar/17 https://access.redhat.com/errata/RHSA-2023:2963 https://access.redhat.com/security/cve/CVE-2022-43552 https://bugzilla.redhat.com/2120718 https://bugzilla.redhat.com/2152652 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-892048.html https://curl.se/docs/CVE-2022-43552.html https://errata.almalinux.org/8/ALSA-2023-2963.html https://hackerone.com/reports/1764858 https://linux.oracle.com/cve/CVE-2022-43552.html https://linux.oracle.com/errata/ELSA-2023-7743.html https://nvd.nist.gov/vuln/detail/CVE-2022-43552 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230214-0002/ https://support.apple.com/kb/HT213670 https://ubuntu.com/security/notices/USN-5788-1 https://ubuntu.com/security/notices/USN-5894-1 https://www.cve.org/CVERecord?id=CVE-2022-43552
curl	CVE-2023-23915	MEDIUM	7.80.0-r1	7.80.0-r6	https://access.redhat.com/security/cve/CVE-2023-23915 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://curl.se/docs/CVE-2023-23915.html https://hackerone.com/reports/1826048 https://nvd.nist.gov/vuln/detail/CVE-2023-23915 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230309-0006/ https://ubuntu.com/security/notices/USN-5891-1 https://www.cve.org/CVERecord?id=CVE-2023-23915
curl	CVE-2023-23916	MEDIUM	7.80.0-r1	7.80.0-r6	https://access.redhat.com/errata/RHSA-2023:1140 https://access.redhat.com/security/cve/CVE-2023-23916 https://bugzilla.redhat.com/2167815 https://bugzilla.redhat.com/show_bug.cgi?id=2167815 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://curl.se/docs/CVE-2023-23916.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23916 https://errata.almalinux.org/8/ALSA-2023-1140.html https://errata.rockylinux.org/RLSA-2023:1140 https://hackerone.com/reports/1826048 https://linux.oracle.com/cve/CVE-2023-23916.html https://linux.oracle.com/errata/ELSA-2023-1701.html https://lists.debian.org/debian-lts-announce/2023/02/msg00035.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BQKE6TXYDHOTFHLTBZ5X73GTKI7II5KO/ https://nvd.nist.gov/vuln/detail/CVE-2023-23916 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230309-0006/ https://ubuntu.com/security/notices/USN-5891-1 https://www.cve.org/CVERecord?id=CVE-2023-23916 https://www.debian.org/security/2023/dsa-5365
curl	CVE-2023-27535	MEDIUM	7.80.0-r1	8.0.1-r0	https://access.redhat.com/errata/RHSA-2023:3106 https://access.redhat.com/security/cve/CVE-2023-27535 https://bugzilla.redhat.com/2179073 https://bugzilla.redhat.com/show_bug.cgi?id=2179073 https://bugzilla.redhat.com/show_bug.cgi?id=2188029 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-806742.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://curl.se/docs/CVE-2023-27535.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27535 https://errata.almalinux.org/8/ALSA-2023-3106.html https://errata.rockylinux.org/RLSA-2023:3106 https://hackerone.com/reports/1892780 https://linux.oracle.com/cve/CVE-2023-27535.html https://linux.oracle.com/errata/ELSA-2023-3106.html https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/ https://nvd.nist.gov/vuln/detail/CVE-2023-27535 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230420-0010/ https://ubuntu.com/security/notices/USN-5964-1 https://ubuntu.com/security/notices/USN-5964-2 https://www.cve.org/CVERecord?id=CVE-2023-27535
curl	CVE-2023-27536	MEDIUM	7.80.0-r1	8.0.1-r0	https://access.redhat.com/errata/RHSA-2023:4523 https://access.redhat.com/security/cve/CVE-2023-27536 https://bugzilla.redhat.com/2179092 https://bugzilla.redhat.com/2196786 https://bugzilla.redhat.com/show_bug.cgi?id=2179092 https://bugzilla.redhat.com/show_bug.cgi?id=2196786 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-806742.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://curl.se/docs/CVE-2023-27536.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27536 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28321 https://errata.almalinux.org/8/ALSA-2023-4523.html https://errata.rockylinux.org/RLSA-2023:4523 https://hackerone.com/reports/1895135 https://linux.oracle.com/cve/CVE-2023-27536.html https://linux.oracle.com/errata/ELSA-2023-6679.html https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/ https://nvd.nist.gov/vuln/detail/CVE-2023-27536 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230420-0010/ https://ubuntu.com/security/notices/USN-5964-1 https://ubuntu.com/security/notices/USN-5964-2 https://www.cve.org/CVERecord?id=CVE-2023-27536
curl	CVE-2023-27537	MEDIUM	7.80.0-r1	8.0.1-r0	https://access.redhat.com/security/cve/CVE-2023-27537 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://curl.se/docs/CVE-2023-27537.html https://hackerone.com/reports/1897203 https://nvd.nist.gov/vuln/detail/CVE-2023-27537 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230420-0010/ https://www.cve.org/CVERecord?id=CVE-2023-27537
curl	CVE-2023-27538	MEDIUM	7.80.0-r1	8.0.1-r0	https://access.redhat.com/errata/RHSA-2023:6679 https://access.redhat.com/security/cve/CVE-2023-27538 https://bugzilla.redhat.com/2179062 https://bugzilla.redhat.com/2179069 https://bugzilla.redhat.com/2179092 https://bugzilla.redhat.com/2179103 https://cert-portal.siemens.com/productcert/html/ssa-077170.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://curl.se/docs/CVE-2023-27538.html https://errata.almalinux.org/9/ALSA-2023-6679.html https://hackerone.com/reports/1898475 https://linux.oracle.com/cve/CVE-2023-27538.html https://linux.oracle.com/errata/ELSA-2023-6679.html https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/ https://nvd.nist.gov/vuln/detail/CVE-2023-27538 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230420-0010/ https://ubuntu.com/security/notices/USN-5964-1 https://www.cve.org/CVERecord?id=CVE-2023-27538
curl	CVE-2023-28320	MEDIUM	7.80.0-r1	8.1.0-r0	http://seclists.org/fulldisclosure/2023/Jul/47 http://seclists.org/fulldisclosure/2023/Jul/48 http://seclists.org/fulldisclosure/2023/Jul/52 https://access.redhat.com/security/cve/CVE-2023-28320 https://curl.se/docs/CVE-2023-28320.html https://hackerone.com/reports/1929597 https://nvd.nist.gov/vuln/detail/CVE-2023-28320 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230609-0009/ https://support.apple.com/kb/HT213843 https://support.apple.com/kb/HT213844 https://support.apple.com/kb/HT213845 https://www.cve.org/CVERecord?id=CVE-2023-28320
curl	CVE-2023-28321	MEDIUM	7.80.0-r1	8.1.0-r0	http://seclists.org/fulldisclosure/2023/Jul/47 http://seclists.org/fulldisclosure/2023/Jul/48 http://seclists.org/fulldisclosure/2023/Jul/52 https://access.redhat.com/errata/RHSA-2023:4523 https://access.redhat.com/security/cve/CVE-2023-28321 https://bugzilla.redhat.com/2179092 https://bugzilla.redhat.com/2196786 https://bugzilla.redhat.com/show_bug.cgi?id=2179092 https://bugzilla.redhat.com/show_bug.cgi?id=2196786 https://curl.se/docs/CVE-2023-28321.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27536 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28321 https://errata.almalinux.org/8/ALSA-2023-4523.html https://errata.rockylinux.org/RLSA-2023:4523 https://hackerone.com/reports/1950627 https://linux.oracle.com/cve/CVE-2023-28321.html https://linux.oracle.com/errata/ELSA-2023-4523.html https://lists.debian.org/debian-lts-announce/2023/10/msg00016.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/ https://nvd.nist.gov/vuln/detail/CVE-2023-28321 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230609-0009/ https://support.apple.com/kb/HT213843 https://support.apple.com/kb/HT213844 https://support.apple.com/kb/HT213845 https://ubuntu.com/security/notices/USN-6237-1 https://ubuntu.com/security/notices/USN-6237-3 https://www.cve.org/CVERecord?id=CVE-2023-28321
curl	CVE-2023-46218	MEDIUM	7.80.0-r1	8.5.0-r0	https://access.redhat.com/errata/RHSA-2024:1601 https://access.redhat.com/security/cve/CVE-2023-46218 https://bugzilla.redhat.com/2196793 https://bugzilla.redhat.com/2241938 https://bugzilla.redhat.com/2252030 https://bugzilla.redhat.com/show_bug.cgi?id=2196793 https://bugzilla.redhat.com/show_bug.cgi?id=2240033 https://bugzilla.redhat.com/show_bug.cgi?id=2241938 https://bugzilla.redhat.com/show_bug.cgi?id=2252030 https://cert-portal.siemens.com/productcert/html/ssa-082556.html https://cert-portal.siemens.com/productcert/html/ssa-093430.html https://cert-portal.siemens.com/productcert/html/ssa-202008.html https://cert-portal.siemens.com/productcert/html/ssa-331112.html https://curl.se/docs/CVE-2023-46218.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28322 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38546 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46218 https://errata.almalinux.org/8/ALSA-2024-1601.html https://errata.rockylinux.org/RLSA-2024:1601 https://github.com/advisories/GHSA-59mm-6rr4-j9p2 https://hackerone.com/reports/2212193 https://linux.oracle.com/cve/CVE-2023-46218.html https://linux.oracle.com/errata/ELSA-2024-1601.html https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/ https://nvd.nist.gov/vuln/detail/CVE-2023-46218 https://security.netapp.com/advisory/ntap-20240125-0007 https://security.netapp.com/advisory/ntap-20240125-0007/ https://ubuntu.com/security/notices/USN-6535-1 https://ubuntu.com/security/notices/USN-6641-1 https://www.cve.org/CVERecord?id=CVE-2023-46218 https://www.debian.org/security/2023/dsa-5587
curl	CVE-2023-46219	MEDIUM	7.80.0-r1	8.5.0-r0	https://access.redhat.com/security/cve/CVE-2023-46219 https://cert-portal.siemens.com/productcert/html/ssa-082556.html https://cert-portal.siemens.com/productcert/html/ssa-093430.html https://cert-portal.siemens.com/productcert/html/ssa-331112.html https://curl.se/docs/CVE-2023-46219.html https://github.com/advisories/GHSA-fj44-3xpp-9cx2 https://hackerone.com/reports/2236133 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/ https://nvd.nist.gov/vuln/detail/CVE-2023-46219 https://security.netapp.com/advisory/ntap-20240119-0007 https://security.netapp.com/advisory/ntap-20240119-0007/ https://ubuntu.com/security/notices/USN-6535-1 https://www.cve.org/CVERecord?id=CVE-2023-46219 https://www.debian.org/security/2023/dsa-5587
curl	CVE-2022-35252	LOW	7.80.0-r1	7.80.0-r3	http://seclists.org/fulldisclosure/2023/Jan/20 http://seclists.org/fulldisclosure/2023/Jan/21 https://access.redhat.com/errata/RHSA-2023:2963 https://access.redhat.com/security/cve/CVE-2022-35252 https://bugzilla.redhat.com/2120718 https://bugzilla.redhat.com/2152652 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-419740.html https://cert-portal.siemens.com/productcert/html/ssa-558014.html https://cert-portal.siemens.com/productcert/html/ssa-892048.html https://cert-portal.siemens.com/productcert/html/ssa-942865.html https://curl.se/docs/CVE-2022-35252.html https://errata.almalinux.org/8/ALSA-2023-2963.html https://hackerone.com/reports/1613943 https://linux.oracle.com/cve/CVE-2022-35252.html https://linux.oracle.com/errata/ELSA-2023-2963.html https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html https://nvd.nist.gov/vuln/detail/CVE-2022-35252 https://security.gentoo.org/glsa/202212-01 https://security.netapp.com/advisory/ntap-20220930-0005/ https://support.apple.com/kb/HT213603 https://support.apple.com/kb/HT213604 https://ubuntu.com/security/notices/USN-5587-1 https://www.cve.org/CVERecord?id=CVE-2022-35252 https://www.openwall.com/lists/oss-security/2022/08/31/2
curl	CVE-2023-28322	LOW	7.80.0-r1	8.1.0-r0	http://seclists.org/fulldisclosure/2023/Jul/47 http://seclists.org/fulldisclosure/2023/Jul/48 http://seclists.org/fulldisclosure/2023/Jul/52 https://access.redhat.com/errata/RHSA-2024:1601 https://access.redhat.com/security/cve/CVE-2023-28322 https://bugzilla.redhat.com/2196793 https://bugzilla.redhat.com/2241938 https://bugzilla.redhat.com/2252030 https://bugzilla.redhat.com/show_bug.cgi?id=2196793 https://bugzilla.redhat.com/show_bug.cgi?id=2240033 https://bugzilla.redhat.com/show_bug.cgi?id=2241938 https://bugzilla.redhat.com/show_bug.cgi?id=2252030 https://curl.se/docs/CVE-2023-28322.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28322 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38546 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46218 https://errata.almalinux.org/8/ALSA-2024-1601.html https://errata.rockylinux.org/RLSA-2024:1601 https://hackerone.com/reports/1954658 https://linux.oracle.com/cve/CVE-2023-28322.html https://linux.oracle.com/errata/ELSA-2024-1601.html https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/ https://nvd.nist.gov/vuln/detail/CVE-2023-28322 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230609-0009/ https://support.apple.com/kb/HT213843 https://support.apple.com/kb/HT213844 https://support.apple.com/kb/HT213845 https://ubuntu.com/security/notices/USN-6237-1 https://ubuntu.com/security/notices/USN-6237-3 https://www.cve.org/CVERecord?id=CVE-2023-28322
curl	CVE-2023-38546	LOW	7.80.0-r1	8.4.0-r0	http://seclists.org/fulldisclosure/2024/Jan/34 http://seclists.org/fulldisclosure/2024/Jan/37 http://seclists.org/fulldisclosure/2024/Jan/38 https://access.redhat.com/errata/RHSA-2023:5763 https://access.redhat.com/errata/RHSA-2024:1601 https://access.redhat.com/security/cve/CVE-2023-38546 https://bugzilla.redhat.com/2196793 https://bugzilla.redhat.com/2241938 https://bugzilla.redhat.com/2252030 https://bugzilla.redhat.com/show_bug.cgi?id=2241933 https://bugzilla.redhat.com/show_bug.cgi?id=2241938 https://cert-portal.siemens.com/productcert/html/ssa-082556.html https://cert-portal.siemens.com/productcert/html/ssa-093430.html https://cert-portal.siemens.com/productcert/html/ssa-832273.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://creativecommons.org/licenses/by/4.0/ https://curl.se/docs/CVE-2023-38546.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38545 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38546 https://errata.almalinux.org/8/ALSA-2024-1601.html https://errata.rockylinux.org/RLSA-2023:5763 https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868 https://linux.oracle.com/cve/CVE-2023-38546.html https://linux.oracle.com/errata/ELSA-2024-1601.html https://lists.debian.org/debian-lts-announce/2023/10/msg00016.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/ https://nvd.nist.gov/vuln/detail/CVE-2023-38546 https://support.apple.com/kb/HT214036 https://support.apple.com/kb/HT214057 https://support.apple.com/kb/HT214058 https://support.apple.com/kb/HT214063 https://ubuntu.com/security/notices/USN-6429-1 https://ubuntu.com/security/notices/USN-6429-2 https://ubuntu.com/security/notices/USN-6429-3 https://www.cve.org/CVERecord?id=CVE-2023-38546
expat	CVE-2022-40674	HIGH	2.4.7-r0	2.4.9-r0	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40674 https://access.redhat.com/errata/RHSA-2022:6838 https://access.redhat.com/errata/RHSA-2023:3068 https://access.redhat.com/security/cve/CVE-2022-40674 https://blog.hartwork.org/posts/expat-2-4-9-released/ https://bugzilla.redhat.com/2130769 https://bugzilla.redhat.com/show_bug.cgi?id=2130769 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-558014.html https://cert-portal.siemens.com/productcert/html/ssa-892048.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40674 https://errata.almalinux.org/8/ALSA-2023-3068.html https://errata.rockylinux.org/RLSA-2022:6838 https://github.com/advisories/GHSA-2vq2-xc55-3j5m https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-xvff-wcqg-jj26 https://github.com/libexpat/libexpat/pull/629 https://github.com/libexpat/libexpat/pull/640 https://linux.oracle.com/cve/CVE-2022-40674.html https://linux.oracle.com/errata/ELSA-2022-9967.html https://lists.debian.org/debian-lts-announce/2022/09/msg00029.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSVZN3IJ6OCPSJL7AEX3ZHSHAHFOGESK/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J2IGJNHFV53PYST7VQV3T4NHVYAMXA36/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LQB6FJAM5YQ35SF5B2MN25Y2FX56EOEZ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2ZKEPGFCZ7R6DRVH3K6RBJPT42ZBEG/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XCGBVQQ47URGJAZWHCISHDWF6QBTV2LE/ https://nvd.nist.gov/vuln/detail/CVE-2022-40674 https://security.gentoo.org/glsa/202209-24 https://security.gentoo.org/glsa/202211-06 https://security.netapp.com/advisory/ntap-20221028-0008/ https://ubuntu.com/security/notices/USN-5638-1 https://ubuntu.com/security/notices/USN-5638-2 https://ubuntu.com/security/notices/USN-5638-4 https://ubuntu.com/security/notices/USN-5726-1 https://www.cve.org/CVERecord?id=CVE-2022-40674 https://www.debian.org/security/2022/dsa-5236
expat	CVE-2022-43680	HIGH	2.4.7-r0	2.5.0-r0	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43680 http://www.openwall.com/lists/oss-security/2023/12/28/5 http://www.openwall.com/lists/oss-security/2024/01/03/5 https://access.redhat.com/errata/RHSA-2023:0103 https://access.redhat.com/errata/RHSA-2023:0337 https://access.redhat.com/security/cve/CVE-2022-43680 https://bugzilla.redhat.com/2140059 https://bugzilla.redhat.com/show_bug.cgi?id=2140059 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-892048.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43680 https://errata.almalinux.org/8/ALSA-2023-0103.html https://errata.rockylinux.org/RLSA-2023:0337 https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-fwxw-x96j-mxgm https://github.com/libexpat/libexpat/issues/649 https://github.com/libexpat/libexpat/pull/616 https://github.com/libexpat/libexpat/pull/650 https://linux.oracle.com/cve/CVE-2022-43680.html https://linux.oracle.com/errata/ELSA-2023-0337.html https://lists.debian.org/debian-lts-announce/2022/10/msg00033.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AJ5VY2VYXE4WTRGQ6LMGLF6FV3SY37YE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BY4OPSIB33ETNUXZY2UPZ4NGQ3OKDY4D/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DPQVIF6TOJNY2T3ZZETFKR4G34FFREBQ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FFCOMBSOJKLIKCGCJWHLJXO4EVYBG7AR/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IUJ2BULJTZ2BMSKQHB6US674P55UCWWS/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XG5XOOB7CD55CEE6OJYKSACSIMQ4RWQ6/ https://nvd.nist.gov/vuln/detail/CVE-2022-43680 https://security.gentoo.org/glsa/202210-38 https://security.netapp.com/advisory/ntap-20221118-0007/ https://ubuntu.com/security/notices/USN-5638-2 https://ubuntu.com/security/notices/USN-5638-3 https://ubuntu.com/security/notices/USN-5638-4 https://www.cve.org/CVERecord?id=CVE-2022-43680 https://www.debian.org/security/2022/dsa-5266
libcrypto1.1	CVE-2022-4450	HIGH	1.1.1n-r0	1.1.1t-r0	https://access.redhat.com/errata/RHSA-2023:0946 https://access.redhat.com/errata/RHSA-2023:2932 https://access.redhat.com/security/cve/CVE-2022-4450 https://bugzilla.redhat.com/2164440 https://bugzilla.redhat.com/2164487 https://bugzilla.redhat.com/2164492 https://bugzilla.redhat.com/2164494 https://bugzilla.redhat.com/show_bug.cgi?id=2144000 https://bugzilla.redhat.com/show_bug.cgi?id=2144003 https://bugzilla.redhat.com/show_bug.cgi?id=2144006 https://bugzilla.redhat.com/show_bug.cgi?id=2144008 https://bugzilla.redhat.com/show_bug.cgi?id=2144010 https://bugzilla.redhat.com/show_bug.cgi?id=2144012 https://bugzilla.redhat.com/show_bug.cgi?id=2144015 https://bugzilla.redhat.com/show_bug.cgi?id=2144017 https://bugzilla.redhat.com/show_bug.cgi?id=2144019 https://bugzilla.redhat.com/show_bug.cgi?id=2145170 https://bugzilla.redhat.com/show_bug.cgi?id=2158412 https://bugzilla.redhat.com/show_bug.cgi?id=2164440 https://bugzilla.redhat.com/show_bug.cgi?id=2164487 https://bugzilla.redhat.com/show_bug.cgi?id=2164488 https://bugzilla.redhat.com/show_bug.cgi?id=2164492 https://bugzilla.redhat.com/show_bug.cgi?id=2164494 https://bugzilla.redhat.com/show_bug.cgi?id=2164497 https://bugzilla.redhat.com/show_bug.cgi?id=2164499 https://bugzilla.redhat.com/show_bug.cgi?id=2164500 https://cert-portal.siemens.com/productcert/html/ssa-203374.html https://cert-portal.siemens.com/productcert/html/ssa-337522.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-561322.html https://cert-portal.siemens.com/productcert/html/ssa-625862.html https://cert-portal.siemens.com/productcert/html/ssa-699386.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-879734.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401 https://errata.almalinux.org/8/ALSA-2023-2932.html https://errata.rockylinux.org/RLSA-2023:0946 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b https://github.com/advisories/GHSA-v5w6-wcm8-jm4q https://linux.oracle.com/cve/CVE-2022-4450.html https://linux.oracle.com/errata/ELSA-2023-32791.html https://nvd.nist.gov/vuln/detail/CVE-2022-4450 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003 https://rustsec.org/advisories/RUSTSEC-2023-0010.html https://security.gentoo.org/glsa/202402-08 https://ubuntu.com/security/notices/USN-5844-1 https://ubuntu.com/security/notices/USN-6564-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2022-4450 https://www.openssl.org/news/secadv/20230207.txt
libcrypto1.1	CVE-2023-0215	HIGH	1.1.1n-r0	1.1.1t-r0	https://access.redhat.com/errata/RHSA-2023:0946 https://access.redhat.com/errata/RHSA-2023:2932 https://access.redhat.com/security/cve/CVE-2023-0215 https://bugzilla.redhat.com/2164440 https://bugzilla.redhat.com/2164487 https://bugzilla.redhat.com/2164492 https://bugzilla.redhat.com/2164494 https://bugzilla.redhat.com/show_bug.cgi?id=2144000 https://bugzilla.redhat.com/show_bug.cgi?id=2144003 https://bugzilla.redhat.com/show_bug.cgi?id=2144006 https://bugzilla.redhat.com/show_bug.cgi?id=2144008 https://bugzilla.redhat.com/show_bug.cgi?id=2144010 https://bugzilla.redhat.com/show_bug.cgi?id=2144012 https://bugzilla.redhat.com/show_bug.cgi?id=2144015 https://bugzilla.redhat.com/show_bug.cgi?id=2144017 https://bugzilla.redhat.com/show_bug.cgi?id=2144019 https://bugzilla.redhat.com/show_bug.cgi?id=2145170 https://bugzilla.redhat.com/show_bug.cgi?id=2158412 https://bugzilla.redhat.com/show_bug.cgi?id=2164440 https://bugzilla.redhat.com/show_bug.cgi?id=2164487 https://bugzilla.redhat.com/show_bug.cgi?id=2164488 https://bugzilla.redhat.com/show_bug.cgi?id=2164492 https://bugzilla.redhat.com/show_bug.cgi?id=2164494 https://bugzilla.redhat.com/show_bug.cgi?id=2164497 https://bugzilla.redhat.com/show_bug.cgi?id=2164499 https://bugzilla.redhat.com/show_bug.cgi?id=2164500 https://cert-portal.siemens.com/productcert/html/ssa-203374.html https://cert-portal.siemens.com/productcert/html/ssa-337522.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-561322.html https://cert-portal.siemens.com/productcert/html/ssa-625862.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-879734.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401 https://errata.almalinux.org/8/ALSA-2023-2932.html https://errata.rockylinux.org/RLSA-2023:0946 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344 https://github.com/advisories/GHSA-r7jw-wp68-3xch https://linux.oracle.com/cve/CVE-2023-0215.html https://linux.oracle.com/errata/ELSA-2023-32791.html https://nvd.nist.gov/vuln/detail/CVE-2023-0215 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003 https://rustsec.org/advisories/RUSTSEC-2023-0009.html https://security.gentoo.org/glsa/202402-08 https://security.netapp.com/advisory/ntap-20230427-0007 https://security.netapp.com/advisory/ntap-20230427-0007/ https://security.netapp.com/advisory/ntap-20230427-0009 https://security.netapp.com/advisory/ntap-20230427-0009/ https://security.netapp.com/advisory/ntap-20240621-0006 https://security.netapp.com/advisory/ntap-20240621-0006/ https://ubuntu.com/security/notices/USN-5844-1 https://ubuntu.com/security/notices/USN-5845-1 https://ubuntu.com/security/notices/USN-5845-2 https://ubuntu.com/security/notices/USN-6564-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2023-0215 https://www.openssl.org/news/secadv/20230207.txt
libcrypto1.1	CVE-2023-0286	HIGH	1.1.1n-r0	1.1.1t-r0	https://access.redhat.com/errata/RHSA-2023:0946 https://access.redhat.com/errata/RHSA-2025:7895 https://access.redhat.com/security/cve/CVE-2023-0286 https://access.redhat.com/security/cve/cve-2023-0286 https://bugzilla.redhat.com/2164440 https://bugzilla.redhat.com/show_bug.cgi?id=2144000 https://bugzilla.redhat.com/show_bug.cgi?id=2144003 https://bugzilla.redhat.com/show_bug.cgi?id=2144006 https://bugzilla.redhat.com/show_bug.cgi?id=2144008 https://bugzilla.redhat.com/show_bug.cgi?id=2144010 https://bugzilla.redhat.com/show_bug.cgi?id=2144012 https://bugzilla.redhat.com/show_bug.cgi?id=2144015 https://bugzilla.redhat.com/show_bug.cgi?id=2144017 https://bugzilla.redhat.com/show_bug.cgi?id=2144019 https://bugzilla.redhat.com/show_bug.cgi?id=2145170 https://bugzilla.redhat.com/show_bug.cgi?id=2158412 https://bugzilla.redhat.com/show_bug.cgi?id=2164440 https://bugzilla.redhat.com/show_bug.cgi?id=2164487 https://bugzilla.redhat.com/show_bug.cgi?id=2164488 https://bugzilla.redhat.com/show_bug.cgi?id=2164492 https://bugzilla.redhat.com/show_bug.cgi?id=2164494 https://bugzilla.redhat.com/show_bug.cgi?id=2164497 https://bugzilla.redhat.com/show_bug.cgi?id=2164499 https://bugzilla.redhat.com/show_bug.cgi?id=2164500 https://cert-portal.siemens.com/productcert/html/ssa-028723.html https://cert-portal.siemens.com/productcert/html/ssa-203374.html https://cert-portal.siemens.com/productcert/html/ssa-264815.html https://cert-portal.siemens.com/productcert/html/ssa-337522.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-455250.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-561322.html https://cert-portal.siemens.com/productcert/html/ssa-625862.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-879734.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401 https://errata.almalinux.org/8/ALSA-2025-7895.html https://errata.rockylinux.org/RLSA-2023:0946 https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d https://github.com/advisories/GHSA-x4qr-2fvf-3mr5 https://github.com/pyca/cryptography https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5 https://linux.oracle.com/cve/CVE-2023-0286.html https://linux.oracle.com/errata/ELSA-2025-7937.html https://nvd.nist.gov/vuln/detail/CVE-2023-0286 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003 https://rustsec.org/advisories/RUSTSEC-2023-0006.html https://security.gentoo.org/glsa/202402-08 https://ubuntu.com/security/notices/USN-5844-1 https://ubuntu.com/security/notices/USN-5845-1 https://ubuntu.com/security/notices/USN-5845-2 https://ubuntu.com/security/notices/USN-6564-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2023-0286 https://www.openssl.org/news/secadv/20230207.txt
libcrypto1.1	CVE-2023-0464	HIGH	1.1.1n-r0	1.1.1t-r2	https://access.redhat.com/errata/RHSA-2023:3722 https://access.redhat.com/security/cve/CVE-2023-0464 https://bugzilla.redhat.com/2181082 https://bugzilla.redhat.com/2182561 https://bugzilla.redhat.com/2182565 https://bugzilla.redhat.com/2188461 https://bugzilla.redhat.com/2207947 https://cert-portal.siemens.com/productcert/html/ssa-028723.html https://cert-portal.siemens.com/productcert/html/ssa-077170.html https://cert-portal.siemens.com/productcert/html/ssa-337522.html https://cert-portal.siemens.com/productcert/html/ssa-341067.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-625862.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-879734.html https://errata.almalinux.org/9/ALSA-2023-3722.html https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1 https://github.com/advisories/GHSA-w2w6-xp88-5cvw https://linux.oracle.com/cve/CVE-2023-0464.html https://linux.oracle.com/errata/ELSA-2023-3722.html https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html https://nvd.nist.gov/vuln/detail/CVE-2023-0464 https://security.gentoo.org/glsa/202402-08 https://security.netapp.com/advisory/ntap-20230406-0006 https://security.netapp.com/advisory/ntap-20230406-0006/ https://security.netapp.com/advisory/ntap-20240621-0006 https://security.netapp.com/advisory/ntap-20240621-0006/ https://ubuntu.com/security/notices/USN-6039-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.couchbase.com/alerts https://www.couchbase.com/alerts/ https://www.cve.org/CVERecord?id=CVE-2023-0464 https://www.debian.org/security/2023/dsa-5417 https://www.openssl.org/news/secadv/20230322.txt
libcrypto1.1	CVE-2022-2097	MEDIUM	1.1.1n-r0	1.1.1q-r0	https://access.redhat.com/errata/RHSA-2022:5818 https://access.redhat.com/security/cve/CVE-2022-2097 https://bugzilla.redhat.com/2081494 https://bugzilla.redhat.com/2097310 https://bugzilla.redhat.com/2104905 https://bugzilla.redhat.com/show_bug.cgi?id=2081494 https://bugzilla.redhat.com/show_bug.cgi?id=2097310 https://bugzilla.redhat.com/show_bug.cgi?id=2100554 https://bugzilla.redhat.com/show_bug.cgi?id=2104905 https://cert-portal.siemens.com/productcert/html/ssa-332410.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-625862.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-879734.html https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097 https://errata.almalinux.org/8/ALSA-2022-5818.html https://errata.rockylinux.org/RLSA-2022:5818 https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431 https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93 https://github.com/advisories/GHSA-3wx7-46ch-7rq2 https://github.com/alexcrichton/openssl-src-rs https://linux.oracle.com/cve/CVE-2022-2097.html https://linux.oracle.com/errata/ELSA-2022-9955.html https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/ https://nvd.nist.gov/vuln/detail/CVE-2022-2097 https://rustsec.org/advisories/RUSTSEC-2022-0032.html https://security.gentoo.org/glsa/202210-02 https://security.netapp.com/advisory/ntap-20220715-0011 https://security.netapp.com/advisory/ntap-20220715-0011/ https://security.netapp.com/advisory/ntap-20230420-0008 https://security.netapp.com/advisory/ntap-20230420-0008/ https://security.netapp.com/advisory/ntap-20240621-0006 https://security.netapp.com/advisory/ntap-20240621-0006/ https://ubuntu.com/security/notices/USN-5502-1 https://ubuntu.com/security/notices/USN-6457-1 https://www.cve.org/CVERecord?id=CVE-2022-2097 https://www.debian.org/security/2023/dsa-5343 https://www.openssl.org/news/secadv/20220705.txt
libcrypto1.1	CVE-2022-4304	MEDIUM	1.1.1n-r0	1.1.1t-r0	https://access.redhat.com/errata/RHSA-2023:0946 https://access.redhat.com/errata/RHSA-2023:2932 https://access.redhat.com/security/cve/CVE-2022-4304 https://bugzilla.redhat.com/2164440 https://bugzilla.redhat.com/2164487 https://bugzilla.redhat.com/2164492 https://bugzilla.redhat.com/2164494 https://bugzilla.redhat.com/show_bug.cgi?id=2144000 https://bugzilla.redhat.com/show_bug.cgi?id=2144003 https://bugzilla.redhat.com/show_bug.cgi?id=2144006 https://bugzilla.redhat.com/show_bug.cgi?id=2144008 https://bugzilla.redhat.com/show_bug.cgi?id=2144010 https://bugzilla.redhat.com/show_bug.cgi?id=2144012 https://bugzilla.redhat.com/show_bug.cgi?id=2144015 https://bugzilla.redhat.com/show_bug.cgi?id=2144017 https://bugzilla.redhat.com/show_bug.cgi?id=2144019 https://bugzilla.redhat.com/show_bug.cgi?id=2145170 https://bugzilla.redhat.com/show_bug.cgi?id=2158412 https://bugzilla.redhat.com/show_bug.cgi?id=2164440 https://bugzilla.redhat.com/show_bug.cgi?id=2164487 https://bugzilla.redhat.com/show_bug.cgi?id=2164488 https://bugzilla.redhat.com/show_bug.cgi?id=2164492 https://bugzilla.redhat.com/show_bug.cgi?id=2164494 https://bugzilla.redhat.com/show_bug.cgi?id=2164497 https://bugzilla.redhat.com/show_bug.cgi?id=2164499 https://bugzilla.redhat.com/show_bug.cgi?id=2164500 https://cert-portal.siemens.com/productcert/html/ssa-203374.html https://cert-portal.siemens.com/productcert/html/ssa-264814.html https://cert-portal.siemens.com/productcert/html/ssa-337522.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-561322.html https://cert-portal.siemens.com/productcert/html/ssa-625862.html https://cert-portal.siemens.com/productcert/html/ssa-699386.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-879734.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401 https://errata.almalinux.org/8/ALSA-2023-2932.html https://errata.rockylinux.org/RLSA-2023:0946 https://github.com/advisories/GHSA-p52g-cm5j-mjv4 https://linux.oracle.com/cve/CVE-2022-4304.html https://linux.oracle.com/errata/ELSA-2023-32791.html https://nvd.nist.gov/vuln/detail/CVE-2022-4304 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003 https://rustsec.org/advisories/RUSTSEC-2023-0007.html https://security.gentoo.org/glsa/202402-08 https://ubuntu.com/security/notices/USN-5844-1 https://ubuntu.com/security/notices/USN-6564-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2022-4304 https://www.openssl.org/news/secadv/20230207.txt
libcrypto1.1	CVE-2023-0465	MEDIUM	1.1.1n-r0	1.1.1t-r2	https://access.redhat.com/errata/RHSA-2023:3722 https://access.redhat.com/security/cve/CVE-2023-0465 https://bugzilla.redhat.com/2181082 https://bugzilla.redhat.com/2182561 https://bugzilla.redhat.com/2182565 https://bugzilla.redhat.com/2188461 https://bugzilla.redhat.com/2207947 https://cert-portal.siemens.com/productcert/html/ssa-337522.html https://cert-portal.siemens.com/productcert/html/ssa-341067.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-625862.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-879734.html https://errata.almalinux.org/9/ALSA-2023-3722.html https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c https://github.com/advisories/GHSA-77f3-6546-6rj7 https://linux.oracle.com/cve/CVE-2023-0465.html https://linux.oracle.com/errata/ELSA-2023-3722.html https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html https://nvd.nist.gov/vuln/detail/CVE-2023-0465 https://security.gentoo.org/glsa/202402-08 https://security.netapp.com/advisory/ntap-20230414-0001 https://security.netapp.com/advisory/ntap-20230414-0001/ https://ubuntu.com/security/notices/USN-6039-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2023-0465 https://www.debian.org/security/2023/dsa-5417 https://www.openssl.org/news/secadv/20230328.txt
libcrypto1.1	CVE-2023-2650	MEDIUM	1.1.1n-r0	1.1.1u-r0	http://www.openwall.com/lists/oss-security/2023/05/30/1 https://access.redhat.com/errata/RHSA-2023:6330 https://access.redhat.com/security/cve/CVE-2023-2650 https://bugzilla.redhat.com/1858038 https://bugzilla.redhat.com/2207947 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-699386.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://errata.almalinux.org/9/ALSA-2023-6330.html https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a https://github.com/advisories/GHSA-gqxg-9vfr-p9cg https://linux.oracle.com/cve/CVE-2023-2650.html https://linux.oracle.com/errata/ELSA-2023-6330.html https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html https://nvd.nist.gov/vuln/detail/CVE-2023-2650 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009 https://security.gentoo.org/glsa/202402-08 https://security.netapp.com/advisory/ntap-20230703-0001/ https://security.netapp.com/advisory/ntap-20231027-0009/ https://ubuntu.com/security/notices/USN-6119-1 https://ubuntu.com/security/notices/USN-6188-1 https://ubuntu.com/security/notices/USN-6672-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2023-2650 https://www.debian.org/security/2023/dsa-5417 https://www.openssl.org/news/secadv/20230530.txt
libcrypto1.1	CVE-2023-3446	MEDIUM	1.1.1n-r0	1.1.1u-r2	http://www.openwall.com/lists/oss-security/2023/07/19/4 http://www.openwall.com/lists/oss-security/2023/07/19/5 http://www.openwall.com/lists/oss-security/2023/07/19/6 http://www.openwall.com/lists/oss-security/2023/07/31/1 http://www.openwall.com/lists/oss-security/2024/05/16/1 https://access.redhat.com/errata/RHSA-2024:0888 https://access.redhat.com/errata/RHSA-2024:2264 https://access.redhat.com/security/cve/CVE-2023-3446 https://bugzilla.redhat.com/2224962 https://bugzilla.redhat.com/show_bug.cgi?id=2224962 https://bugzilla.redhat.com/show_bug.cgi?id=2257582 https://bugzilla.redhat.com/show_bug.cgi?id=2257583 https://bugzilla.redhat.com/show_bug.cgi?id=2258677 https://bugzilla.redhat.com/show_bug.cgi?id=2258688 https://bugzilla.redhat.com/show_bug.cgi?id=2258691 https://bugzilla.redhat.com/show_bug.cgi?id=2258694 https://bugzilla.redhat.com/show_bug.cgi?id=2258700 https://cert-portal.siemens.com/productcert/html/ssa-099606.html https://cert-portal.siemens.com/productcert/html/ssa-277137.html https://cert-portal.siemens.com/productcert/html/ssa-341067.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-915275.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235 https://errata.almalinux.org/8/ALSA-2024-0888.html https://errata.rockylinux.org/RLSA-2024:2264 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23 https://linux.oracle.com/cve/CVE-2023-3446.html https://linux.oracle.com/errata/ELSA-2024-2447.html https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html https://nvd.nist.gov/vuln/detail/CVE-2023-3446 https://security.gentoo.org/glsa/202402-08 https://security.netapp.com/advisory/ntap-20230803-0011/ https://ubuntu.com/security/notices/USN-6435-1 https://ubuntu.com/security/notices/USN-6435-2 https://ubuntu.com/security/notices/USN-6450-1 https://ubuntu.com/security/notices/USN-6709-1 https://ubuntu.com/security/notices/USN-7018-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2023-3446 https://www.openssl.org/news/secadv/20230719.txt
libcrypto1.1	CVE-2023-3817	MEDIUM	1.1.1n-r0	1.1.1v-r0	http://seclists.org/fulldisclosure/2023/Jul/43 http://www.openwall.com/lists/oss-security/2023/07/31/1 http://www.openwall.com/lists/oss-security/2023/09/22/11 http://www.openwall.com/lists/oss-security/2023/09/22/9 http://www.openwall.com/lists/oss-security/2023/11/06/2 https://access.redhat.com/errata/RHSA-2023:7877 https://access.redhat.com/security/cve/CVE-2023-3817 https://bugzilla.redhat.com/2224962 https://bugzilla.redhat.com/2227852 https://bugzilla.redhat.com/2248616 https://bugzilla.redhat.com/show_bug.cgi?id=2224962 https://bugzilla.redhat.com/show_bug.cgi?id=2227852 https://bugzilla.redhat.com/show_bug.cgi?id=2248616 https://bugzilla.redhat.com/show_bug.cgi?id=2270358 https://cert-portal.siemens.com/productcert/html/ssa-099606.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-915275.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408 https://errata.almalinux.org/8/ALSA-2023-7877.html https://errata.rockylinux.org/RLSA-2023:7877 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5 https://github.com/advisories/GHSA-c945-cqj5-wfv6 https://linux.oracle.com/cve/CVE-2023-3817.html https://linux.oracle.com/errata/ELSA-2024-2447.html https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html https://nvd.nist.gov/vuln/detail/CVE-2023-3817 https://security.gentoo.org/glsa/202402-08 https://security.netapp.com/advisory/ntap-20230818-0014 https://security.netapp.com/advisory/ntap-20230818-0014/ https://security.netapp.com/advisory/ntap-20231027-0008 https://security.netapp.com/advisory/ntap-20231027-0008/ https://security.netapp.com/advisory/ntap-20240621-0006 https://security.netapp.com/advisory/ntap-20240621-0006/ https://ubuntu.com/security/notices/USN-6435-1 https://ubuntu.com/security/notices/USN-6435-2 https://ubuntu.com/security/notices/USN-6450-1 https://ubuntu.com/security/notices/USN-6709-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2023-3817 https://www.openssl.org/news/secadv/20230731.txt
libcrypto1.1	CVE-2023-5678	MEDIUM	1.1.1n-r0	1.1.1w-r1	http://www.openwall.com/lists/oss-security/2023/11/06/2 http://www.openwall.com/lists/oss-security/2024/03/11/1 https://access.redhat.com/errata/RHSA-2023:7877 https://access.redhat.com/security/cve/CVE-2023-5678 https://bugzilla.redhat.com/2224962 https://bugzilla.redhat.com/2227852 https://bugzilla.redhat.com/2248616 https://bugzilla.redhat.com/show_bug.cgi?id=2224962 https://bugzilla.redhat.com/show_bug.cgi?id=2227852 https://bugzilla.redhat.com/show_bug.cgi?id=2248616 https://bugzilla.redhat.com/show_bug.cgi?id=2270358 https://cert-portal.siemens.com/productcert/html/ssa-093430.html https://cert-portal.siemens.com/productcert/html/ssa-128433.html https://cert-portal.siemens.com/productcert/html/ssa-265688.html https://cert-portal.siemens.com/productcert/html/ssa-277137.html https://cert-portal.siemens.com/productcert/html/ssa-331112.html https://cert-portal.siemens.com/productcert/html/ssa-341067.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-613116.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-915275.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408 https://errata.almalinux.org/8/ALSA-2023-7877.html https://errata.rockylinux.org/RLSA-2023:7877 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6 https://github.com/advisories/GHSA-2cj7-mg3x-9mhq https://linux.oracle.com/cve/CVE-2023-5678.html https://linux.oracle.com/errata/ELSA-2024-2447.html https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html https://nvd.nist.gov/vuln/detail/CVE-2023-5678 https://security.netapp.com/advisory/ntap-20231130-0010 https://security.netapp.com/advisory/ntap-20231130-0010/ https://ubuntu.com/security/notices/USN-6622-1 https://ubuntu.com/security/notices/USN-6632-1 https://ubuntu.com/security/notices/USN-6709-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2023-5678 https://www.openssl.org/news/secadv/20231106.txt
libcurl	CVE-2022-32207	CRITICAL	7.80.0-r1	7.80.0-r2	http://seclists.org/fulldisclosure/2022/Oct/28 http://seclists.org/fulldisclosure/2022/Oct/41 https://access.redhat.com/errata/RHSA-2022:6157 https://access.redhat.com/security/cve/CVE-2022-32207 https://bugzilla.redhat.com/2099300 https://bugzilla.redhat.com/2099305 https://bugzilla.redhat.com/2099306 https://bugzilla.redhat.com/show_bug.cgi?id=2099300 https://bugzilla.redhat.com/show_bug.cgi?id=2099305 https://bugzilla.redhat.com/show_bug.cgi?id=2099306 https://cert-portal.siemens.com/productcert/html/ssa-146325.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-419740.html https://cert-portal.siemens.com/productcert/html/ssa-558014.html https://cert-portal.siemens.com/productcert/html/ssa-942865.html https://creativecommons.org/licenses/by/4.0/ https://curl.se/docs/CVE-2022-32207.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208 https://errata.almalinux.org/9/ALSA-2022-6157.html https://errata.rockylinux.org/RLSA-2022:6157 https://hackerone.com/reports/1573634 https://linux.oracle.com/cve/CVE-2022-32207.html https://linux.oracle.com/errata/ELSA-2022-6157.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/ https://nvd.nist.gov/vuln/detail/CVE-2022-32207 https://security.gentoo.org/glsa/202212-01 https://security.netapp.com/advisory/ntap-20220915-0003/ https://support.apple.com/kb/HT213488 https://ubuntu.com/security/notices/USN-5495-1 https://www.cve.org/CVERecord?id=CVE-2022-32207 https://www.debian.org/security/2022/dsa-5197
libcurl	CVE-2022-32221	CRITICAL	7.80.0-r1	7.80.0-r4	http://seclists.org/fulldisclosure/2023/Jan/19 http://seclists.org/fulldisclosure/2023/Jan/20 http://www.openwall.com/lists/oss-security/2023/05/17/4 https://access.redhat.com/errata/RHSA-2023:0333 https://access.redhat.com/security/cve/CVE-2022-32221 https://bugzilla.redhat.com/2135411 https://bugzilla.redhat.com/show_bug.cgi?id=2135411 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-892048.html https://creativecommons.org/licenses/by/4.0/ https://curl.se/docs/CVE-2022-32221.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32221 https://errata.almalinux.org/9/ALSA-2023-0333.html https://errata.rockylinux.org/RLSA-2023:0333 https://hackerone.com/reports/1704017 https://linux.oracle.com/cve/CVE-2022-32221.html https://linux.oracle.com/errata/ELSA-2023-0333.html https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html https://nvd.nist.gov/vuln/detail/CVE-2022-32221 https://security.gentoo.org/glsa/202212-01 https://security.netapp.com/advisory/ntap-20230110-0006/ https://security.netapp.com/advisory/ntap-20230208-0002/ https://support.apple.com/kb/HT213604 https://support.apple.com/kb/HT213605 https://ubuntu.com/security/notices/USN-5702-1 https://ubuntu.com/security/notices/USN-5702-2 https://ubuntu.com/security/notices/USN-5823-1 https://www.cve.org/CVERecord?id=CVE-2022-32221 https://www.debian.org/security/2023/dsa-5330
libcurl	CVE-2023-23914	CRITICAL	7.80.0-r1	7.80.0-r6	https://access.redhat.com/security/cve/CVE-2023-23914 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://curl.se/docs/CVE-2023-23914.html https://hackerone.com/reports/1813864 https://nvd.nist.gov/vuln/detail/CVE-2023-23914 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230309-0006/ https://ubuntu.com/security/notices/USN-5891-1 https://www.cve.org/CVERecord?id=CVE-2023-23914
libcurl	CVE-2023-38545	CRITICAL	7.80.0-r1	8.4.0-r0	http://seclists.org/fulldisclosure/2024/Jan/34 http://seclists.org/fulldisclosure/2024/Jan/37 http://seclists.org/fulldisclosure/2024/Jan/38 https://access.redhat.com/errata/RHSA-2023:5763 https://access.redhat.com/errata/RHSA-2023:6745 https://access.redhat.com/security/cve/CVE-2023-38545 https://bugzilla.redhat.com/2241933 https://bugzilla.redhat.com/2241938 https://bugzilla.redhat.com/show_bug.cgi?id=2241933 https://bugzilla.redhat.com/show_bug.cgi?id=2241938 https://cert-portal.siemens.com/productcert/html/ssa-082556.html https://cert-portal.siemens.com/productcert/html/ssa-093430.html https://cert-portal.siemens.com/productcert/html/ssa-507364.html https://cert-portal.siemens.com/productcert/html/ssa-832273.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://creativecommons.org/licenses/by/4.0/ https://curl.se/docs/CVE-2023-38545.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38545 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38546 https://errata.almalinux.org/9/ALSA-2023-6745.html https://errata.rockylinux.org/RLSA-2023:5763 https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868 https://github.com/UTsweetyfish/CVE-2023-38545 https://github.com/bcdannyboy/CVE-2023-38545 https://github.com/dbrugman/CVE-2023-38545-POC https://linux.oracle.com/cve/CVE-2023-38545.html https://linux.oracle.com/errata/ELSA-2023-6745.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/ https://nvd.nist.gov/vuln/detail/CVE-2023-38545 https://security.netapp.com/advisory/ntap-20231027-0009/ https://security.netapp.com/advisory/ntap-20240201-0005/ https://support.apple.com/kb/HT214036 https://support.apple.com/kb/HT214057 https://support.apple.com/kb/HT214058 https://support.apple.com/kb/HT214063 https://ubuntu.com/security/notices/USN-6429-1 https://ubuntu.com/security/notices/USN-6429-3 https://www.cve.org/CVERecord?id=CVE-2023-38545 https://www.secpod.com/blog/high-severity-heap-buffer-overflow-vulnerability/
libcurl	CVE-2022-27780	HIGH	7.80.0-r1	7.80.0-r2	https://access.redhat.com/security/cve/CVE-2022-27780 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://curl.se/docs/CVE-2022-27780.html https://hackerone.com/reports/1553841 https://nvd.nist.gov/vuln/detail/CVE-2022-27780 https://security.gentoo.org/glsa/202212-01 https://security.netapp.com/advisory/ntap-20220609-0009/ https://ubuntu.com/security/notices/USN-5412-1 https://www.cve.org/CVERecord?id=CVE-2022-27780
libcurl	CVE-2022-27781	HIGH	7.80.0-r1	7.80.0-r2	https://access.redhat.com/security/cve/CVE-2022-27781 https://cert-portal.siemens.com/productcert/html/ssa-146325.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://curl.se/docs/CVE-2022-27781.html https://github.com/curl/curl/commit/f6c335d63f https://hackerone.com/reports/1555441 https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html https://nvd.nist.gov/vuln/detail/CVE-2022-27781 https://security.gentoo.org/glsa/202212-01 https://security.netapp.com/advisory/ntap-20220609-0009/ https://ubuntu.com/security/notices/USN-5412-1 https://ubuntu.com/security/notices/USN-5499-1 https://www.cve.org/CVERecord?id=CVE-2022-27781 https://www.debian.org/security/2022/dsa-5197
libcurl	CVE-2022-27782	HIGH	7.80.0-r1	7.80.0-r2	http://www.openwall.com/lists/oss-security/2023/03/20/6 https://access.redhat.com/errata/RHSA-2022:5313 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-22576.json https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27774.json https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27776.json https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-27782.json https://access.redhat.com/security/cve/CVE-2022-27782 https://bugzilla.redhat.com/2077541 https://bugzilla.redhat.com/2077547 https://bugzilla.redhat.com/2078408 https://bugzilla.redhat.com/2082215 https://cert-portal.siemens.com/productcert/html/ssa-146325.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://curl.se/docs/CVE-2022-27782.html https://errata.almalinux.org/8/ALSA-2022-5313.html https://hackerone.com/reports/1555796 https://linux.oracle.com/cve/CVE-2022-27782.html https://linux.oracle.com/errata/ELSA-2022-5313.html https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html https://nvd.nist.gov/vuln/detail/CVE-2022-27782 https://security.gentoo.org/glsa/202212-01 https://security.netapp.com/advisory/ntap-20220609-0009/ https://ubuntu.com/security/notices/USN-5412-1 https://www.cve.org/CVERecord?id=CVE-2022-27782 https://www.debian.org/security/2022/dsa-5197
libcurl	CVE-2022-42915	HIGH	7.80.0-r1	7.80.0-r4	http://seclists.org/fulldisclosure/2023/Jan/19 http://seclists.org/fulldisclosure/2023/Jan/20 https://access.redhat.com/security/cve/CVE-2022-42915 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-892048.html https://curl.se/docs/CVE-2022-42915.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/37YEVVC6NAF6H7UHH6YAUY5QEVY6LIH2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVU3IMZCKR4VE6KJ4GCWRL2ILLC6OV76/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q27V5YYMXUVI6PRZQVECON32XPVWTKDK/ https://nvd.nist.gov/vuln/detail/CVE-2022-42915 https://security.gentoo.org/glsa/202212-01 https://security.netapp.com/advisory/ntap-20221209-0010/ https://support.apple.com/kb/HT213604 https://support.apple.com/kb/HT213605 https://ubuntu.com/security/notices/USN-5702-1 https://www.cve.org/CVERecord?id=CVE-2022-42915
libcurl	CVE-2022-42916	HIGH	7.80.0-r1	7.80.0-r4	http://seclists.org/fulldisclosure/2023/Jan/19 http://seclists.org/fulldisclosure/2023/Jan/20 http://www.openwall.com/lists/oss-security/2022/12/21/1 https://access.redhat.com/security/cve/CVE-2022-42916 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-892048.html https://curl.se/docs/CVE-2022-42916.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/37YEVVC6NAF6H7UHH6YAUY5QEVY6LIH2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVU3IMZCKR4VE6KJ4GCWRL2ILLC6OV76/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q27V5YYMXUVI6PRZQVECON32XPVWTKDK/ https://nvd.nist.gov/vuln/detail/CVE-2022-42916 https://security.gentoo.org/glsa/202212-01 https://security.netapp.com/advisory/ntap-20221209-0010/ https://support.apple.com/kb/HT213604 https://support.apple.com/kb/HT213605 https://ubuntu.com/security/notices/USN-5702-1 https://www.cve.org/CVERecord?id=CVE-2022-42916
libcurl	CVE-2022-43551	HIGH	7.80.0-r1	7.80.0-r5	https://access.redhat.com/security/cve/CVE-2022-43551 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-892048.html https://curl.se/docs/CVE-2022-43551.html https://hackerone.com/reports/1755083 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TVWZW5CNSJ7UYAF2BGSYAWAEXDJYUBHA/ https://nvd.nist.gov/vuln/detail/CVE-2022-43551 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230427-0007/ https://ubuntu.com/security/notices/USN-5788-1 https://www.cve.org/CVERecord?id=CVE-2022-43551
libcurl	CVE-2023-27533	HIGH	7.80.0-r1	8.0.1-r0	https://access.redhat.com/errata/RHSA-2023:6679 https://access.redhat.com/security/cve/CVE-2023-27533 https://bugzilla.redhat.com/2179062 https://bugzilla.redhat.com/2179069 https://bugzilla.redhat.com/2179092 https://bugzilla.redhat.com/2179103 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://curl.se/docs/CVE-2023-27533.html https://errata.almalinux.org/9/ALSA-2023-6679.html https://hackerone.com/reports/1891474 https://linux.oracle.com/cve/CVE-2023-27533.html https://linux.oracle.com/errata/ELSA-2023-6679.html https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/ https://nvd.nist.gov/vuln/detail/CVE-2023-27533 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230420-0011/ https://ubuntu.com/security/notices/USN-5964-1 https://ubuntu.com/security/notices/USN-5964-2 https://www.cve.org/CVERecord?id=CVE-2023-27533
libcurl	CVE-2023-27534	HIGH	7.80.0-r1	8.0.1-r0	https://access.redhat.com/errata/RHSA-2023:6679 https://access.redhat.com/security/cve/CVE-2023-27534 https://bugzilla.redhat.com/2179062 https://bugzilla.redhat.com/2179069 https://bugzilla.redhat.com/2179092 https://bugzilla.redhat.com/2179103 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-806742.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://curl.se/docs/CVE-2023-27534.html https://errata.almalinux.org/9/ALSA-2023-6679.html https://hackerone.com/reports/1892351 https://linux.oracle.com/cve/CVE-2023-27534.html https://linux.oracle.com/errata/ELSA-2023-6679.html https://lists.debian.org/debian-lts-announce/2024/03/msg00016.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/ https://nvd.nist.gov/vuln/detail/CVE-2023-27534 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230420-0012/ https://ubuntu.com/security/notices/USN-5964-1 https://www.cve.org/CVERecord?id=CVE-2023-27534
libcurl	CVE-2023-28319	HIGH	7.80.0-r1	8.1.0-r0	http://seclists.org/fulldisclosure/2023/Jul/47 http://seclists.org/fulldisclosure/2023/Jul/48 http://seclists.org/fulldisclosure/2023/Jul/52 https://access.redhat.com/security/cve/CVE-2023-28319 https://curl.se/docs/CVE-2023-28319.html https://hackerone.com/reports/1913733 https://nvd.nist.gov/vuln/detail/CVE-2023-28319 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230609-0009/ https://support.apple.com/kb/HT213843 https://support.apple.com/kb/HT213844 https://support.apple.com/kb/HT213845 https://www.cve.org/CVERecord?id=CVE-2023-28319
libcurl	CVE-2023-38039	HIGH	7.80.0-r1	8.3.0-r0	http://seclists.org/fulldisclosure/2023/Oct/17 http://seclists.org/fulldisclosure/2024/Jan/34 http://seclists.org/fulldisclosure/2024/Jan/37 http://seclists.org/fulldisclosure/2024/Jan/38 https://access.redhat.com/security/cve/CVE-2023-38039 https://curl.se/docs/CVE-2023-38039.html https://github.com/advisories/GHSA-99j9-jf36-9747 https://hackerone.com/reports/2072338 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5DCZMYODALBLVOXVJEN2LF2MLANEYL4F https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5DCZMYODALBLVOXVJEN2LF2MLANEYL4F/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M6KGKB2JNZVT276JYSKI6FV2VFJUGDOJ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M6KGKB2JNZVT276JYSKI6FV2VFJUGDOJ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TEAWTYHC3RT6ZRS5OZRHLAIENVN6CCIS https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TEAWTYHC3RT6ZRS5OZRHLAIENVN6CCIS/ https://nvd.nist.gov/vuln/detail/CVE-2023-38039 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20231013-0005 https://security.netapp.com/advisory/ntap-20231013-0005/ https://support.apple.com/kb/HT214036 https://support.apple.com/kb/HT214057 https://support.apple.com/kb/HT214058 https://support.apple.com/kb/HT214063 https://ubuntu.com/security/notices/USN-6363-1 https://www.cve.org/CVERecord?id=CVE-2023-38039 https://www.insyde.com/security-pledge/SA-2023064
libcurl	CVE-2022-32205	MEDIUM	7.80.0-r1	7.80.0-r2	http://seclists.org/fulldisclosure/2022/Oct/28 http://seclists.org/fulldisclosure/2022/Oct/41 https://access.redhat.com/security/cve/CVE-2022-32205 https://cert-portal.siemens.com/productcert/html/ssa-333517.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-419740.html https://cert-portal.siemens.com/productcert/html/ssa-558014.html https://cert-portal.siemens.com/productcert/html/ssa-942865.html https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf https://curl.se/docs/CVE-2022-32205.html https://hackerone.com/reports/1569946 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/ https://nvd.nist.gov/vuln/detail/CVE-2022-32205 https://security.gentoo.org/glsa/202212-01 https://security.netapp.com/advisory/ntap-20220915-0003/ https://support.apple.com/kb/HT213488 https://ubuntu.com/security/notices/USN-5495-1 https://www.cve.org/CVERecord?id=CVE-2022-32205 https://www.debian.org/security/2022/dsa-5197
libcurl	CVE-2022-32206	MEDIUM	7.80.0-r1	7.80.0-r2	http://seclists.org/fulldisclosure/2022/Oct/28 http://seclists.org/fulldisclosure/2022/Oct/41 http://www.openwall.com/lists/oss-security/2023/02/15/3 https://access.redhat.com/errata/RHSA-2022:6157 https://access.redhat.com/errata/RHSA-2022:6159 https://access.redhat.com/security/cve/CVE-2022-32206 https://bugzilla.redhat.com/2099300 https://bugzilla.redhat.com/2099306 https://bugzilla.redhat.com/show_bug.cgi?id=2099300 https://bugzilla.redhat.com/show_bug.cgi?id=2099305 https://bugzilla.redhat.com/show_bug.cgi?id=2099306 https://cert-portal.siemens.com/productcert/html/ssa-333517.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-419740.html https://cert-portal.siemens.com/productcert/html/ssa-558014.html https://cert-portal.siemens.com/productcert/html/ssa-942865.html https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf https://creativecommons.org/licenses/by/4.0/ https://curl.se/docs/CVE-2022-32206.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208 https://errata.almalinux.org/8/ALSA-2022-6159.html https://errata.rockylinux.org/RLSA-2022:6157 https://hackerone.com/reports/1570651 https://linux.oracle.com/cve/CVE-2022-32206.html https://linux.oracle.com/errata/ELSA-2022-6159.html https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/ https://nvd.nist.gov/vuln/detail/CVE-2022-32206 https://security.gentoo.org/glsa/202212-01 https://security.netapp.com/advisory/ntap-20220915-0003/ https://support.apple.com/kb/HT213488 https://ubuntu.com/security/notices/USN-5495-1 https://www.cve.org/CVERecord?id=CVE-2022-32206 https://www.debian.org/security/2022/dsa-5197
libcurl	CVE-2022-32208	MEDIUM	7.80.0-r1	7.80.0-r2	http://seclists.org/fulldisclosure/2022/Oct/28 http://seclists.org/fulldisclosure/2022/Oct/41 https://access.redhat.com/errata/RHSA-2022:6157 https://access.redhat.com/errata/RHSA-2022:6159 https://access.redhat.com/security/cve/CVE-2022-32208 https://bugzilla.redhat.com/2099300 https://bugzilla.redhat.com/2099306 https://bugzilla.redhat.com/show_bug.cgi?id=2099300 https://bugzilla.redhat.com/show_bug.cgi?id=2099305 https://bugzilla.redhat.com/show_bug.cgi?id=2099306 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-419740.html https://cert-portal.siemens.com/productcert/html/ssa-558014.html https://cert-portal.siemens.com/productcert/html/ssa-942865.html https://creativecommons.org/licenses/by/4.0/ https://curl.se/docs/CVE-2022-32208.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32206 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32207 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32208 https://errata.almalinux.org/8/ALSA-2022-6159.html https://errata.rockylinux.org/RLSA-2022:6157 https://hackerone.com/reports/1590071 https://linux.oracle.com/cve/CVE-2022-32208.html https://linux.oracle.com/errata/ELSA-2022-6159.html https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/ https://nvd.nist.gov/vuln/detail/CVE-2022-32208 https://security.gentoo.org/glsa/202212-01 https://security.netapp.com/advisory/ntap-20220915-0003/ https://support.apple.com/kb/HT213488 https://ubuntu.com/security/notices/USN-5495-1 https://ubuntu.com/security/notices/USN-5499-1 https://www.cve.org/CVERecord?id=CVE-2022-32208 https://www.debian.org/security/2022/dsa-5197
libcurl	CVE-2022-43552	MEDIUM	7.80.0-r1	7.80.0-r5	http://seclists.org/fulldisclosure/2023/Mar/17 https://access.redhat.com/errata/RHSA-2023:2963 https://access.redhat.com/security/cve/CVE-2022-43552 https://bugzilla.redhat.com/2120718 https://bugzilla.redhat.com/2152652 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-892048.html https://curl.se/docs/CVE-2022-43552.html https://errata.almalinux.org/8/ALSA-2023-2963.html https://hackerone.com/reports/1764858 https://linux.oracle.com/cve/CVE-2022-43552.html https://linux.oracle.com/errata/ELSA-2023-7743.html https://nvd.nist.gov/vuln/detail/CVE-2022-43552 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230214-0002/ https://support.apple.com/kb/HT213670 https://ubuntu.com/security/notices/USN-5788-1 https://ubuntu.com/security/notices/USN-5894-1 https://www.cve.org/CVERecord?id=CVE-2022-43552
libcurl	CVE-2023-23915	MEDIUM	7.80.0-r1	7.80.0-r6	https://access.redhat.com/security/cve/CVE-2023-23915 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://curl.se/docs/CVE-2023-23915.html https://hackerone.com/reports/1826048 https://nvd.nist.gov/vuln/detail/CVE-2023-23915 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230309-0006/ https://ubuntu.com/security/notices/USN-5891-1 https://www.cve.org/CVERecord?id=CVE-2023-23915
libcurl	CVE-2023-23916	MEDIUM	7.80.0-r1	7.80.0-r6	https://access.redhat.com/errata/RHSA-2023:1140 https://access.redhat.com/security/cve/CVE-2023-23916 https://bugzilla.redhat.com/2167815 https://bugzilla.redhat.com/show_bug.cgi?id=2167815 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://curl.se/docs/CVE-2023-23916.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23916 https://errata.almalinux.org/8/ALSA-2023-1140.html https://errata.rockylinux.org/RLSA-2023:1140 https://hackerone.com/reports/1826048 https://linux.oracle.com/cve/CVE-2023-23916.html https://linux.oracle.com/errata/ELSA-2023-1701.html https://lists.debian.org/debian-lts-announce/2023/02/msg00035.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BQKE6TXYDHOTFHLTBZ5X73GTKI7II5KO/ https://nvd.nist.gov/vuln/detail/CVE-2023-23916 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230309-0006/ https://ubuntu.com/security/notices/USN-5891-1 https://www.cve.org/CVERecord?id=CVE-2023-23916 https://www.debian.org/security/2023/dsa-5365
libcurl	CVE-2023-27535	MEDIUM	7.80.0-r1	8.0.1-r0	https://access.redhat.com/errata/RHSA-2023:3106 https://access.redhat.com/security/cve/CVE-2023-27535 https://bugzilla.redhat.com/2179073 https://bugzilla.redhat.com/show_bug.cgi?id=2179073 https://bugzilla.redhat.com/show_bug.cgi?id=2188029 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-806742.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://curl.se/docs/CVE-2023-27535.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27535 https://errata.almalinux.org/8/ALSA-2023-3106.html https://errata.rockylinux.org/RLSA-2023:3106 https://hackerone.com/reports/1892780 https://linux.oracle.com/cve/CVE-2023-27535.html https://linux.oracle.com/errata/ELSA-2023-3106.html https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/ https://nvd.nist.gov/vuln/detail/CVE-2023-27535 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230420-0010/ https://ubuntu.com/security/notices/USN-5964-1 https://ubuntu.com/security/notices/USN-5964-2 https://www.cve.org/CVERecord?id=CVE-2023-27535
libcurl	CVE-2023-27536	MEDIUM	7.80.0-r1	8.0.1-r0	https://access.redhat.com/errata/RHSA-2023:4523 https://access.redhat.com/security/cve/CVE-2023-27536 https://bugzilla.redhat.com/2179092 https://bugzilla.redhat.com/2196786 https://bugzilla.redhat.com/show_bug.cgi?id=2179092 https://bugzilla.redhat.com/show_bug.cgi?id=2196786 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-806742.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://curl.se/docs/CVE-2023-27536.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27536 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28321 https://errata.almalinux.org/8/ALSA-2023-4523.html https://errata.rockylinux.org/RLSA-2023:4523 https://hackerone.com/reports/1895135 https://linux.oracle.com/cve/CVE-2023-27536.html https://linux.oracle.com/errata/ELSA-2023-6679.html https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/ https://nvd.nist.gov/vuln/detail/CVE-2023-27536 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230420-0010/ https://ubuntu.com/security/notices/USN-5964-1 https://ubuntu.com/security/notices/USN-5964-2 https://www.cve.org/CVERecord?id=CVE-2023-27536
libcurl	CVE-2023-27537	MEDIUM	7.80.0-r1	8.0.1-r0	https://access.redhat.com/security/cve/CVE-2023-27537 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://curl.se/docs/CVE-2023-27537.html https://hackerone.com/reports/1897203 https://nvd.nist.gov/vuln/detail/CVE-2023-27537 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230420-0010/ https://www.cve.org/CVERecord?id=CVE-2023-27537
libcurl	CVE-2023-27538	MEDIUM	7.80.0-r1	8.0.1-r0	https://access.redhat.com/errata/RHSA-2023:6679 https://access.redhat.com/security/cve/CVE-2023-27538 https://bugzilla.redhat.com/2179062 https://bugzilla.redhat.com/2179069 https://bugzilla.redhat.com/2179092 https://bugzilla.redhat.com/2179103 https://cert-portal.siemens.com/productcert/html/ssa-077170.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://curl.se/docs/CVE-2023-27538.html https://errata.almalinux.org/9/ALSA-2023-6679.html https://hackerone.com/reports/1898475 https://linux.oracle.com/cve/CVE-2023-27538.html https://linux.oracle.com/errata/ELSA-2023-6679.html https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/ https://nvd.nist.gov/vuln/detail/CVE-2023-27538 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230420-0010/ https://ubuntu.com/security/notices/USN-5964-1 https://www.cve.org/CVERecord?id=CVE-2023-27538
libcurl	CVE-2023-28320	MEDIUM	7.80.0-r1	8.1.0-r0	http://seclists.org/fulldisclosure/2023/Jul/47 http://seclists.org/fulldisclosure/2023/Jul/48 http://seclists.org/fulldisclosure/2023/Jul/52 https://access.redhat.com/security/cve/CVE-2023-28320 https://curl.se/docs/CVE-2023-28320.html https://hackerone.com/reports/1929597 https://nvd.nist.gov/vuln/detail/CVE-2023-28320 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230609-0009/ https://support.apple.com/kb/HT213843 https://support.apple.com/kb/HT213844 https://support.apple.com/kb/HT213845 https://www.cve.org/CVERecord?id=CVE-2023-28320
libcurl	CVE-2023-28321	MEDIUM	7.80.0-r1	8.1.0-r0	http://seclists.org/fulldisclosure/2023/Jul/47 http://seclists.org/fulldisclosure/2023/Jul/48 http://seclists.org/fulldisclosure/2023/Jul/52 https://access.redhat.com/errata/RHSA-2023:4523 https://access.redhat.com/security/cve/CVE-2023-28321 https://bugzilla.redhat.com/2179092 https://bugzilla.redhat.com/2196786 https://bugzilla.redhat.com/show_bug.cgi?id=2179092 https://bugzilla.redhat.com/show_bug.cgi?id=2196786 https://curl.se/docs/CVE-2023-28321.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27536 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28321 https://errata.almalinux.org/8/ALSA-2023-4523.html https://errata.rockylinux.org/RLSA-2023:4523 https://hackerone.com/reports/1950627 https://linux.oracle.com/cve/CVE-2023-28321.html https://linux.oracle.com/errata/ELSA-2023-4523.html https://lists.debian.org/debian-lts-announce/2023/10/msg00016.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/ https://nvd.nist.gov/vuln/detail/CVE-2023-28321 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230609-0009/ https://support.apple.com/kb/HT213843 https://support.apple.com/kb/HT213844 https://support.apple.com/kb/HT213845 https://ubuntu.com/security/notices/USN-6237-1 https://ubuntu.com/security/notices/USN-6237-3 https://www.cve.org/CVERecord?id=CVE-2023-28321
libcurl	CVE-2023-46218	MEDIUM	7.80.0-r1	8.5.0-r0	https://access.redhat.com/errata/RHSA-2024:1601 https://access.redhat.com/security/cve/CVE-2023-46218 https://bugzilla.redhat.com/2196793 https://bugzilla.redhat.com/2241938 https://bugzilla.redhat.com/2252030 https://bugzilla.redhat.com/show_bug.cgi?id=2196793 https://bugzilla.redhat.com/show_bug.cgi?id=2240033 https://bugzilla.redhat.com/show_bug.cgi?id=2241938 https://bugzilla.redhat.com/show_bug.cgi?id=2252030 https://cert-portal.siemens.com/productcert/html/ssa-082556.html https://cert-portal.siemens.com/productcert/html/ssa-093430.html https://cert-portal.siemens.com/productcert/html/ssa-202008.html https://cert-portal.siemens.com/productcert/html/ssa-331112.html https://curl.se/docs/CVE-2023-46218.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28322 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38546 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46218 https://errata.almalinux.org/8/ALSA-2024-1601.html https://errata.rockylinux.org/RLSA-2024:1601 https://github.com/advisories/GHSA-59mm-6rr4-j9p2 https://hackerone.com/reports/2212193 https://linux.oracle.com/cve/CVE-2023-46218.html https://linux.oracle.com/errata/ELSA-2024-1601.html https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/ https://nvd.nist.gov/vuln/detail/CVE-2023-46218 https://security.netapp.com/advisory/ntap-20240125-0007 https://security.netapp.com/advisory/ntap-20240125-0007/ https://ubuntu.com/security/notices/USN-6535-1 https://ubuntu.com/security/notices/USN-6641-1 https://www.cve.org/CVERecord?id=CVE-2023-46218 https://www.debian.org/security/2023/dsa-5587
libcurl	CVE-2023-46219	MEDIUM	7.80.0-r1	8.5.0-r0	https://access.redhat.com/security/cve/CVE-2023-46219 https://cert-portal.siemens.com/productcert/html/ssa-082556.html https://cert-portal.siemens.com/productcert/html/ssa-093430.html https://cert-portal.siemens.com/productcert/html/ssa-331112.html https://curl.se/docs/CVE-2023-46219.html https://github.com/advisories/GHSA-fj44-3xpp-9cx2 https://hackerone.com/reports/2236133 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/ https://nvd.nist.gov/vuln/detail/CVE-2023-46219 https://security.netapp.com/advisory/ntap-20240119-0007 https://security.netapp.com/advisory/ntap-20240119-0007/ https://ubuntu.com/security/notices/USN-6535-1 https://www.cve.org/CVERecord?id=CVE-2023-46219 https://www.debian.org/security/2023/dsa-5587
libcurl	CVE-2022-35252	LOW	7.80.0-r1	7.80.0-r3	http://seclists.org/fulldisclosure/2023/Jan/20 http://seclists.org/fulldisclosure/2023/Jan/21 https://access.redhat.com/errata/RHSA-2023:2963 https://access.redhat.com/security/cve/CVE-2022-35252 https://bugzilla.redhat.com/2120718 https://bugzilla.redhat.com/2152652 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-419740.html https://cert-portal.siemens.com/productcert/html/ssa-558014.html https://cert-portal.siemens.com/productcert/html/ssa-892048.html https://cert-portal.siemens.com/productcert/html/ssa-942865.html https://curl.se/docs/CVE-2022-35252.html https://errata.almalinux.org/8/ALSA-2023-2963.html https://hackerone.com/reports/1613943 https://linux.oracle.com/cve/CVE-2022-35252.html https://linux.oracle.com/errata/ELSA-2023-2963.html https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html https://nvd.nist.gov/vuln/detail/CVE-2022-35252 https://security.gentoo.org/glsa/202212-01 https://security.netapp.com/advisory/ntap-20220930-0005/ https://support.apple.com/kb/HT213603 https://support.apple.com/kb/HT213604 https://ubuntu.com/security/notices/USN-5587-1 https://www.cve.org/CVERecord?id=CVE-2022-35252 https://www.openwall.com/lists/oss-security/2022/08/31/2
libcurl	CVE-2023-28322	LOW	7.80.0-r1	8.1.0-r0	http://seclists.org/fulldisclosure/2023/Jul/47 http://seclists.org/fulldisclosure/2023/Jul/48 http://seclists.org/fulldisclosure/2023/Jul/52 https://access.redhat.com/errata/RHSA-2024:1601 https://access.redhat.com/security/cve/CVE-2023-28322 https://bugzilla.redhat.com/2196793 https://bugzilla.redhat.com/2241938 https://bugzilla.redhat.com/2252030 https://bugzilla.redhat.com/show_bug.cgi?id=2196793 https://bugzilla.redhat.com/show_bug.cgi?id=2240033 https://bugzilla.redhat.com/show_bug.cgi?id=2241938 https://bugzilla.redhat.com/show_bug.cgi?id=2252030 https://curl.se/docs/CVE-2023-28322.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28322 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38546 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46218 https://errata.almalinux.org/8/ALSA-2024-1601.html https://errata.rockylinux.org/RLSA-2024:1601 https://hackerone.com/reports/1954658 https://linux.oracle.com/cve/CVE-2023-28322.html https://linux.oracle.com/errata/ELSA-2024-1601.html https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/ https://nvd.nist.gov/vuln/detail/CVE-2023-28322 https://security.gentoo.org/glsa/202310-12 https://security.netapp.com/advisory/ntap-20230609-0009/ https://support.apple.com/kb/HT213843 https://support.apple.com/kb/HT213844 https://support.apple.com/kb/HT213845 https://ubuntu.com/security/notices/USN-6237-1 https://ubuntu.com/security/notices/USN-6237-3 https://www.cve.org/CVERecord?id=CVE-2023-28322
libcurl	CVE-2023-38546	LOW	7.80.0-r1	8.4.0-r0	http://seclists.org/fulldisclosure/2024/Jan/34 http://seclists.org/fulldisclosure/2024/Jan/37 http://seclists.org/fulldisclosure/2024/Jan/38 https://access.redhat.com/errata/RHSA-2023:5763 https://access.redhat.com/errata/RHSA-2024:1601 https://access.redhat.com/security/cve/CVE-2023-38546 https://bugzilla.redhat.com/2196793 https://bugzilla.redhat.com/2241938 https://bugzilla.redhat.com/2252030 https://bugzilla.redhat.com/show_bug.cgi?id=2241933 https://bugzilla.redhat.com/show_bug.cgi?id=2241938 https://cert-portal.siemens.com/productcert/html/ssa-082556.html https://cert-portal.siemens.com/productcert/html/ssa-093430.html https://cert-portal.siemens.com/productcert/html/ssa-832273.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://creativecommons.org/licenses/by/4.0/ https://curl.se/docs/CVE-2023-38546.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38545 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38546 https://errata.almalinux.org/8/ALSA-2024-1601.html https://errata.rockylinux.org/RLSA-2023:5763 https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868 https://linux.oracle.com/cve/CVE-2023-38546.html https://linux.oracle.com/errata/ELSA-2024-1601.html https://lists.debian.org/debian-lts-announce/2023/10/msg00016.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/ https://nvd.nist.gov/vuln/detail/CVE-2023-38546 https://support.apple.com/kb/HT214036 https://support.apple.com/kb/HT214057 https://support.apple.com/kb/HT214058 https://support.apple.com/kb/HT214063 https://ubuntu.com/security/notices/USN-6429-1 https://ubuntu.com/security/notices/USN-6429-2 https://ubuntu.com/security/notices/USN-6429-3 https://www.cve.org/CVERecord?id=CVE-2023-38546
libssl1.1	CVE-2022-4450	HIGH	1.1.1n-r0	1.1.1t-r0	https://access.redhat.com/errata/RHSA-2023:0946 https://access.redhat.com/errata/RHSA-2023:2932 https://access.redhat.com/security/cve/CVE-2022-4450 https://bugzilla.redhat.com/2164440 https://bugzilla.redhat.com/2164487 https://bugzilla.redhat.com/2164492 https://bugzilla.redhat.com/2164494 https://bugzilla.redhat.com/show_bug.cgi?id=2144000 https://bugzilla.redhat.com/show_bug.cgi?id=2144003 https://bugzilla.redhat.com/show_bug.cgi?id=2144006 https://bugzilla.redhat.com/show_bug.cgi?id=2144008 https://bugzilla.redhat.com/show_bug.cgi?id=2144010 https://bugzilla.redhat.com/show_bug.cgi?id=2144012 https://bugzilla.redhat.com/show_bug.cgi?id=2144015 https://bugzilla.redhat.com/show_bug.cgi?id=2144017 https://bugzilla.redhat.com/show_bug.cgi?id=2144019 https://bugzilla.redhat.com/show_bug.cgi?id=2145170 https://bugzilla.redhat.com/show_bug.cgi?id=2158412 https://bugzilla.redhat.com/show_bug.cgi?id=2164440 https://bugzilla.redhat.com/show_bug.cgi?id=2164487 https://bugzilla.redhat.com/show_bug.cgi?id=2164488 https://bugzilla.redhat.com/show_bug.cgi?id=2164492 https://bugzilla.redhat.com/show_bug.cgi?id=2164494 https://bugzilla.redhat.com/show_bug.cgi?id=2164497 https://bugzilla.redhat.com/show_bug.cgi?id=2164499 https://bugzilla.redhat.com/show_bug.cgi?id=2164500 https://cert-portal.siemens.com/productcert/html/ssa-203374.html https://cert-portal.siemens.com/productcert/html/ssa-337522.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-561322.html https://cert-portal.siemens.com/productcert/html/ssa-625862.html https://cert-portal.siemens.com/productcert/html/ssa-699386.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-879734.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401 https://errata.almalinux.org/8/ALSA-2023-2932.html https://errata.rockylinux.org/RLSA-2023:0946 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b https://github.com/advisories/GHSA-v5w6-wcm8-jm4q https://linux.oracle.com/cve/CVE-2022-4450.html https://linux.oracle.com/errata/ELSA-2023-32791.html https://nvd.nist.gov/vuln/detail/CVE-2022-4450 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003 https://rustsec.org/advisories/RUSTSEC-2023-0010.html https://security.gentoo.org/glsa/202402-08 https://ubuntu.com/security/notices/USN-5844-1 https://ubuntu.com/security/notices/USN-6564-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2022-4450 https://www.openssl.org/news/secadv/20230207.txt
libssl1.1	CVE-2023-0215	HIGH	1.1.1n-r0	1.1.1t-r0	https://access.redhat.com/errata/RHSA-2023:0946 https://access.redhat.com/errata/RHSA-2023:2932 https://access.redhat.com/security/cve/CVE-2023-0215 https://bugzilla.redhat.com/2164440 https://bugzilla.redhat.com/2164487 https://bugzilla.redhat.com/2164492 https://bugzilla.redhat.com/2164494 https://bugzilla.redhat.com/show_bug.cgi?id=2144000 https://bugzilla.redhat.com/show_bug.cgi?id=2144003 https://bugzilla.redhat.com/show_bug.cgi?id=2144006 https://bugzilla.redhat.com/show_bug.cgi?id=2144008 https://bugzilla.redhat.com/show_bug.cgi?id=2144010 https://bugzilla.redhat.com/show_bug.cgi?id=2144012 https://bugzilla.redhat.com/show_bug.cgi?id=2144015 https://bugzilla.redhat.com/show_bug.cgi?id=2144017 https://bugzilla.redhat.com/show_bug.cgi?id=2144019 https://bugzilla.redhat.com/show_bug.cgi?id=2145170 https://bugzilla.redhat.com/show_bug.cgi?id=2158412 https://bugzilla.redhat.com/show_bug.cgi?id=2164440 https://bugzilla.redhat.com/show_bug.cgi?id=2164487 https://bugzilla.redhat.com/show_bug.cgi?id=2164488 https://bugzilla.redhat.com/show_bug.cgi?id=2164492 https://bugzilla.redhat.com/show_bug.cgi?id=2164494 https://bugzilla.redhat.com/show_bug.cgi?id=2164497 https://bugzilla.redhat.com/show_bug.cgi?id=2164499 https://bugzilla.redhat.com/show_bug.cgi?id=2164500 https://cert-portal.siemens.com/productcert/html/ssa-203374.html https://cert-portal.siemens.com/productcert/html/ssa-337522.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-561322.html https://cert-portal.siemens.com/productcert/html/ssa-625862.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-879734.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401 https://errata.almalinux.org/8/ALSA-2023-2932.html https://errata.rockylinux.org/RLSA-2023:0946 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344 https://github.com/advisories/GHSA-r7jw-wp68-3xch https://linux.oracle.com/cve/CVE-2023-0215.html https://linux.oracle.com/errata/ELSA-2023-32791.html https://nvd.nist.gov/vuln/detail/CVE-2023-0215 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003 https://rustsec.org/advisories/RUSTSEC-2023-0009.html https://security.gentoo.org/glsa/202402-08 https://security.netapp.com/advisory/ntap-20230427-0007 https://security.netapp.com/advisory/ntap-20230427-0007/ https://security.netapp.com/advisory/ntap-20230427-0009 https://security.netapp.com/advisory/ntap-20230427-0009/ https://security.netapp.com/advisory/ntap-20240621-0006 https://security.netapp.com/advisory/ntap-20240621-0006/ https://ubuntu.com/security/notices/USN-5844-1 https://ubuntu.com/security/notices/USN-5845-1 https://ubuntu.com/security/notices/USN-5845-2 https://ubuntu.com/security/notices/USN-6564-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2023-0215 https://www.openssl.org/news/secadv/20230207.txt
libssl1.1	CVE-2023-0286	HIGH	1.1.1n-r0	1.1.1t-r0	https://access.redhat.com/errata/RHSA-2023:0946 https://access.redhat.com/errata/RHSA-2025:7895 https://access.redhat.com/security/cve/CVE-2023-0286 https://access.redhat.com/security/cve/cve-2023-0286 https://bugzilla.redhat.com/2164440 https://bugzilla.redhat.com/show_bug.cgi?id=2144000 https://bugzilla.redhat.com/show_bug.cgi?id=2144003 https://bugzilla.redhat.com/show_bug.cgi?id=2144006 https://bugzilla.redhat.com/show_bug.cgi?id=2144008 https://bugzilla.redhat.com/show_bug.cgi?id=2144010 https://bugzilla.redhat.com/show_bug.cgi?id=2144012 https://bugzilla.redhat.com/show_bug.cgi?id=2144015 https://bugzilla.redhat.com/show_bug.cgi?id=2144017 https://bugzilla.redhat.com/show_bug.cgi?id=2144019 https://bugzilla.redhat.com/show_bug.cgi?id=2145170 https://bugzilla.redhat.com/show_bug.cgi?id=2158412 https://bugzilla.redhat.com/show_bug.cgi?id=2164440 https://bugzilla.redhat.com/show_bug.cgi?id=2164487 https://bugzilla.redhat.com/show_bug.cgi?id=2164488 https://bugzilla.redhat.com/show_bug.cgi?id=2164492 https://bugzilla.redhat.com/show_bug.cgi?id=2164494 https://bugzilla.redhat.com/show_bug.cgi?id=2164497 https://bugzilla.redhat.com/show_bug.cgi?id=2164499 https://bugzilla.redhat.com/show_bug.cgi?id=2164500 https://cert-portal.siemens.com/productcert/html/ssa-028723.html https://cert-portal.siemens.com/productcert/html/ssa-203374.html https://cert-portal.siemens.com/productcert/html/ssa-264815.html https://cert-portal.siemens.com/productcert/html/ssa-337522.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-455250.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-561322.html https://cert-portal.siemens.com/productcert/html/ssa-625862.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-879734.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401 https://errata.almalinux.org/8/ALSA-2025-7895.html https://errata.rockylinux.org/RLSA-2023:0946 https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d https://github.com/advisories/GHSA-x4qr-2fvf-3mr5 https://github.com/pyca/cryptography https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5 https://linux.oracle.com/cve/CVE-2023-0286.html https://linux.oracle.com/errata/ELSA-2025-7937.html https://nvd.nist.gov/vuln/detail/CVE-2023-0286 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003 https://rustsec.org/advisories/RUSTSEC-2023-0006.html https://security.gentoo.org/glsa/202402-08 https://ubuntu.com/security/notices/USN-5844-1 https://ubuntu.com/security/notices/USN-5845-1 https://ubuntu.com/security/notices/USN-5845-2 https://ubuntu.com/security/notices/USN-6564-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2023-0286 https://www.openssl.org/news/secadv/20230207.txt
libssl1.1	CVE-2023-0464	HIGH	1.1.1n-r0	1.1.1t-r2	https://access.redhat.com/errata/RHSA-2023:3722 https://access.redhat.com/security/cve/CVE-2023-0464 https://bugzilla.redhat.com/2181082 https://bugzilla.redhat.com/2182561 https://bugzilla.redhat.com/2182565 https://bugzilla.redhat.com/2188461 https://bugzilla.redhat.com/2207947 https://cert-portal.siemens.com/productcert/html/ssa-028723.html https://cert-portal.siemens.com/productcert/html/ssa-077170.html https://cert-portal.siemens.com/productcert/html/ssa-337522.html https://cert-portal.siemens.com/productcert/html/ssa-341067.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-625862.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-879734.html https://errata.almalinux.org/9/ALSA-2023-3722.html https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1 https://github.com/advisories/GHSA-w2w6-xp88-5cvw https://linux.oracle.com/cve/CVE-2023-0464.html https://linux.oracle.com/errata/ELSA-2023-3722.html https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html https://nvd.nist.gov/vuln/detail/CVE-2023-0464 https://security.gentoo.org/glsa/202402-08 https://security.netapp.com/advisory/ntap-20230406-0006 https://security.netapp.com/advisory/ntap-20230406-0006/ https://security.netapp.com/advisory/ntap-20240621-0006 https://security.netapp.com/advisory/ntap-20240621-0006/ https://ubuntu.com/security/notices/USN-6039-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.couchbase.com/alerts https://www.couchbase.com/alerts/ https://www.cve.org/CVERecord?id=CVE-2023-0464 https://www.debian.org/security/2023/dsa-5417 https://www.openssl.org/news/secadv/20230322.txt
libssl1.1	CVE-2022-2097	MEDIUM	1.1.1n-r0	1.1.1q-r0	https://access.redhat.com/errata/RHSA-2022:5818 https://access.redhat.com/security/cve/CVE-2022-2097 https://bugzilla.redhat.com/2081494 https://bugzilla.redhat.com/2097310 https://bugzilla.redhat.com/2104905 https://bugzilla.redhat.com/show_bug.cgi?id=2081494 https://bugzilla.redhat.com/show_bug.cgi?id=2097310 https://bugzilla.redhat.com/show_bug.cgi?id=2100554 https://bugzilla.redhat.com/show_bug.cgi?id=2104905 https://cert-portal.siemens.com/productcert/html/ssa-332410.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-625862.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-879734.html https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097 https://errata.almalinux.org/8/ALSA-2022-5818.html https://errata.rockylinux.org/RLSA-2022:5818 https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431 https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93 https://github.com/advisories/GHSA-3wx7-46ch-7rq2 https://github.com/alexcrichton/openssl-src-rs https://linux.oracle.com/cve/CVE-2022-2097.html https://linux.oracle.com/errata/ELSA-2022-9955.html https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/ https://nvd.nist.gov/vuln/detail/CVE-2022-2097 https://rustsec.org/advisories/RUSTSEC-2022-0032.html https://security.gentoo.org/glsa/202210-02 https://security.netapp.com/advisory/ntap-20220715-0011 https://security.netapp.com/advisory/ntap-20220715-0011/ https://security.netapp.com/advisory/ntap-20230420-0008 https://security.netapp.com/advisory/ntap-20230420-0008/ https://security.netapp.com/advisory/ntap-20240621-0006 https://security.netapp.com/advisory/ntap-20240621-0006/ https://ubuntu.com/security/notices/USN-5502-1 https://ubuntu.com/security/notices/USN-6457-1 https://www.cve.org/CVERecord?id=CVE-2022-2097 https://www.debian.org/security/2023/dsa-5343 https://www.openssl.org/news/secadv/20220705.txt
libssl1.1	CVE-2022-4304	MEDIUM	1.1.1n-r0	1.1.1t-r0	https://access.redhat.com/errata/RHSA-2023:0946 https://access.redhat.com/errata/RHSA-2023:2932 https://access.redhat.com/security/cve/CVE-2022-4304 https://bugzilla.redhat.com/2164440 https://bugzilla.redhat.com/2164487 https://bugzilla.redhat.com/2164492 https://bugzilla.redhat.com/2164494 https://bugzilla.redhat.com/show_bug.cgi?id=2144000 https://bugzilla.redhat.com/show_bug.cgi?id=2144003 https://bugzilla.redhat.com/show_bug.cgi?id=2144006 https://bugzilla.redhat.com/show_bug.cgi?id=2144008 https://bugzilla.redhat.com/show_bug.cgi?id=2144010 https://bugzilla.redhat.com/show_bug.cgi?id=2144012 https://bugzilla.redhat.com/show_bug.cgi?id=2144015 https://bugzilla.redhat.com/show_bug.cgi?id=2144017 https://bugzilla.redhat.com/show_bug.cgi?id=2144019 https://bugzilla.redhat.com/show_bug.cgi?id=2145170 https://bugzilla.redhat.com/show_bug.cgi?id=2158412 https://bugzilla.redhat.com/show_bug.cgi?id=2164440 https://bugzilla.redhat.com/show_bug.cgi?id=2164487 https://bugzilla.redhat.com/show_bug.cgi?id=2164488 https://bugzilla.redhat.com/show_bug.cgi?id=2164492 https://bugzilla.redhat.com/show_bug.cgi?id=2164494 https://bugzilla.redhat.com/show_bug.cgi?id=2164497 https://bugzilla.redhat.com/show_bug.cgi?id=2164499 https://bugzilla.redhat.com/show_bug.cgi?id=2164500 https://cert-portal.siemens.com/productcert/html/ssa-203374.html https://cert-portal.siemens.com/productcert/html/ssa-264814.html https://cert-portal.siemens.com/productcert/html/ssa-337522.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-561322.html https://cert-portal.siemens.com/productcert/html/ssa-625862.html https://cert-portal.siemens.com/productcert/html/ssa-699386.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-879734.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401 https://errata.almalinux.org/8/ALSA-2023-2932.html https://errata.rockylinux.org/RLSA-2023:0946 https://github.com/advisories/GHSA-p52g-cm5j-mjv4 https://linux.oracle.com/cve/CVE-2022-4304.html https://linux.oracle.com/errata/ELSA-2023-32791.html https://nvd.nist.gov/vuln/detail/CVE-2022-4304 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003 https://rustsec.org/advisories/RUSTSEC-2023-0007.html https://security.gentoo.org/glsa/202402-08 https://ubuntu.com/security/notices/USN-5844-1 https://ubuntu.com/security/notices/USN-6564-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2022-4304 https://www.openssl.org/news/secadv/20230207.txt
libssl1.1	CVE-2023-0465	MEDIUM	1.1.1n-r0	1.1.1t-r2	https://access.redhat.com/errata/RHSA-2023:3722 https://access.redhat.com/security/cve/CVE-2023-0465 https://bugzilla.redhat.com/2181082 https://bugzilla.redhat.com/2182561 https://bugzilla.redhat.com/2182565 https://bugzilla.redhat.com/2188461 https://bugzilla.redhat.com/2207947 https://cert-portal.siemens.com/productcert/html/ssa-337522.html https://cert-portal.siemens.com/productcert/html/ssa-341067.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-625862.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-879734.html https://errata.almalinux.org/9/ALSA-2023-3722.html https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c https://github.com/advisories/GHSA-77f3-6546-6rj7 https://linux.oracle.com/cve/CVE-2023-0465.html https://linux.oracle.com/errata/ELSA-2023-3722.html https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html https://nvd.nist.gov/vuln/detail/CVE-2023-0465 https://security.gentoo.org/glsa/202402-08 https://security.netapp.com/advisory/ntap-20230414-0001 https://security.netapp.com/advisory/ntap-20230414-0001/ https://ubuntu.com/security/notices/USN-6039-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2023-0465 https://www.debian.org/security/2023/dsa-5417 https://www.openssl.org/news/secadv/20230328.txt
libssl1.1	CVE-2023-2650	MEDIUM	1.1.1n-r0	1.1.1u-r0	http://www.openwall.com/lists/oss-security/2023/05/30/1 https://access.redhat.com/errata/RHSA-2023:6330 https://access.redhat.com/security/cve/CVE-2023-2650 https://bugzilla.redhat.com/1858038 https://bugzilla.redhat.com/2207947 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-699386.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://errata.almalinux.org/9/ALSA-2023-6330.html https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a https://github.com/advisories/GHSA-gqxg-9vfr-p9cg https://linux.oracle.com/cve/CVE-2023-2650.html https://linux.oracle.com/errata/ELSA-2023-6330.html https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html https://nvd.nist.gov/vuln/detail/CVE-2023-2650 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009 https://security.gentoo.org/glsa/202402-08 https://security.netapp.com/advisory/ntap-20230703-0001/ https://security.netapp.com/advisory/ntap-20231027-0009/ https://ubuntu.com/security/notices/USN-6119-1 https://ubuntu.com/security/notices/USN-6188-1 https://ubuntu.com/security/notices/USN-6672-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2023-2650 https://www.debian.org/security/2023/dsa-5417 https://www.openssl.org/news/secadv/20230530.txt
libssl1.1	CVE-2023-3446	MEDIUM	1.1.1n-r0	1.1.1u-r2	http://www.openwall.com/lists/oss-security/2023/07/19/4 http://www.openwall.com/lists/oss-security/2023/07/19/5 http://www.openwall.com/lists/oss-security/2023/07/19/6 http://www.openwall.com/lists/oss-security/2023/07/31/1 http://www.openwall.com/lists/oss-security/2024/05/16/1 https://access.redhat.com/errata/RHSA-2024:0888 https://access.redhat.com/errata/RHSA-2024:2264 https://access.redhat.com/security/cve/CVE-2023-3446 https://bugzilla.redhat.com/2224962 https://bugzilla.redhat.com/show_bug.cgi?id=2224962 https://bugzilla.redhat.com/show_bug.cgi?id=2257582 https://bugzilla.redhat.com/show_bug.cgi?id=2257583 https://bugzilla.redhat.com/show_bug.cgi?id=2258677 https://bugzilla.redhat.com/show_bug.cgi?id=2258688 https://bugzilla.redhat.com/show_bug.cgi?id=2258691 https://bugzilla.redhat.com/show_bug.cgi?id=2258694 https://bugzilla.redhat.com/show_bug.cgi?id=2258700 https://cert-portal.siemens.com/productcert/html/ssa-099606.html https://cert-portal.siemens.com/productcert/html/ssa-277137.html https://cert-portal.siemens.com/productcert/html/ssa-341067.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-915275.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235 https://errata.almalinux.org/8/ALSA-2024-0888.html https://errata.rockylinux.org/RLSA-2024:2264 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23 https://linux.oracle.com/cve/CVE-2023-3446.html https://linux.oracle.com/errata/ELSA-2024-2447.html https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html https://nvd.nist.gov/vuln/detail/CVE-2023-3446 https://security.gentoo.org/glsa/202402-08 https://security.netapp.com/advisory/ntap-20230803-0011/ https://ubuntu.com/security/notices/USN-6435-1 https://ubuntu.com/security/notices/USN-6435-2 https://ubuntu.com/security/notices/USN-6450-1 https://ubuntu.com/security/notices/USN-6709-1 https://ubuntu.com/security/notices/USN-7018-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2023-3446 https://www.openssl.org/news/secadv/20230719.txt
libssl1.1	CVE-2023-3817	MEDIUM	1.1.1n-r0	1.1.1v-r0	http://seclists.org/fulldisclosure/2023/Jul/43 http://www.openwall.com/lists/oss-security/2023/07/31/1 http://www.openwall.com/lists/oss-security/2023/09/22/11 http://www.openwall.com/lists/oss-security/2023/09/22/9 http://www.openwall.com/lists/oss-security/2023/11/06/2 https://access.redhat.com/errata/RHSA-2023:7877 https://access.redhat.com/security/cve/CVE-2023-3817 https://bugzilla.redhat.com/2224962 https://bugzilla.redhat.com/2227852 https://bugzilla.redhat.com/2248616 https://bugzilla.redhat.com/show_bug.cgi?id=2224962 https://bugzilla.redhat.com/show_bug.cgi?id=2227852 https://bugzilla.redhat.com/show_bug.cgi?id=2248616 https://bugzilla.redhat.com/show_bug.cgi?id=2270358 https://cert-portal.siemens.com/productcert/html/ssa-099606.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-915275.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408 https://errata.almalinux.org/8/ALSA-2023-7877.html https://errata.rockylinux.org/RLSA-2023:7877 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5 https://github.com/advisories/GHSA-c945-cqj5-wfv6 https://linux.oracle.com/cve/CVE-2023-3817.html https://linux.oracle.com/errata/ELSA-2024-2447.html https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html https://nvd.nist.gov/vuln/detail/CVE-2023-3817 https://security.gentoo.org/glsa/202402-08 https://security.netapp.com/advisory/ntap-20230818-0014 https://security.netapp.com/advisory/ntap-20230818-0014/ https://security.netapp.com/advisory/ntap-20231027-0008 https://security.netapp.com/advisory/ntap-20231027-0008/ https://security.netapp.com/advisory/ntap-20240621-0006 https://security.netapp.com/advisory/ntap-20240621-0006/ https://ubuntu.com/security/notices/USN-6435-1 https://ubuntu.com/security/notices/USN-6435-2 https://ubuntu.com/security/notices/USN-6450-1 https://ubuntu.com/security/notices/USN-6709-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2023-3817 https://www.openssl.org/news/secadv/20230731.txt
libssl1.1	CVE-2023-5678	MEDIUM	1.1.1n-r0	1.1.1w-r1	http://www.openwall.com/lists/oss-security/2023/11/06/2 http://www.openwall.com/lists/oss-security/2024/03/11/1 https://access.redhat.com/errata/RHSA-2023:7877 https://access.redhat.com/security/cve/CVE-2023-5678 https://bugzilla.redhat.com/2224962 https://bugzilla.redhat.com/2227852 https://bugzilla.redhat.com/2248616 https://bugzilla.redhat.com/show_bug.cgi?id=2224962 https://bugzilla.redhat.com/show_bug.cgi?id=2227852 https://bugzilla.redhat.com/show_bug.cgi?id=2248616 https://bugzilla.redhat.com/show_bug.cgi?id=2270358 https://cert-portal.siemens.com/productcert/html/ssa-093430.html https://cert-portal.siemens.com/productcert/html/ssa-128433.html https://cert-portal.siemens.com/productcert/html/ssa-265688.html https://cert-portal.siemens.com/productcert/html/ssa-277137.html https://cert-portal.siemens.com/productcert/html/ssa-331112.html https://cert-portal.siemens.com/productcert/html/ssa-341067.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-613116.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-915275.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408 https://errata.almalinux.org/8/ALSA-2023-7877.html https://errata.rockylinux.org/RLSA-2023:7877 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6 https://github.com/advisories/GHSA-2cj7-mg3x-9mhq https://linux.oracle.com/cve/CVE-2023-5678.html https://linux.oracle.com/errata/ELSA-2024-2447.html https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html https://nvd.nist.gov/vuln/detail/CVE-2023-5678 https://security.netapp.com/advisory/ntap-20231130-0010 https://security.netapp.com/advisory/ntap-20231130-0010/ https://ubuntu.com/security/notices/USN-6622-1 https://ubuntu.com/security/notices/USN-6632-1 https://ubuntu.com/security/notices/USN-6709-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2023-5678 https://www.openssl.org/news/secadv/20231106.txt
libxml2	CVE-2022-2309	HIGH	2.9.14-r0	2.9.14-r1	https://access.redhat.com/errata/RHSA-2022:8226 https://access.redhat.com/security/cve/CVE-2022-2309 https://bugzilla.redhat.com/2107571 https://bugzilla.redhat.com/show_bug.cgi?id=2107571 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2309 https://errata.almalinux.org/9/ALSA-2022-8226.html https://errata.rockylinux.org/RLSA-2022:8226 https://github.com/advisories/GHSA-wrxv-2j5q-m38w https://github.com/lxml/lxml https://github.com/lxml/lxml/blob/master/CHANGES.txt https://github.com/lxml/lxml/commit/86368e9cf70a0ad23cccd5ee32de847149af0c6f https://github.com/lxml/lxml/commit/86368e9cf70a0ad23cccd5ee32de847149af0c6f%20%28lxml-4.9.1%29 https://github.com/pypa/advisory-database/tree/main/vulns/lxml/PYSEC-2022-230.yaml https://gitlab.gnome.org/GNOME/libxml2/-/issues/378 https://huntr.dev/bounties/8264e74f-edda-4c40-9956-49de635105ba https://huntr.dev/bounties/8264e74f-edda-4c40-9956-49de635105ba/ https://linux.oracle.com/cve/CVE-2022-2309.html https://linux.oracle.com/errata/ELSA-2022-8226.html https://lists.debian.org/debian-lts-announce/2024/09/msg00021.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HGYC6L7ENH5VEGN3YWFBYMGKX6WNS7HZ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HGYC6L7ENH5VEGN3YWFBYMGKX6WNS7HZ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/URHHSIBTPTALXMECRLAC2EVDNAFSR5NO https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/URHHSIBTPTALXMECRLAC2EVDNAFSR5NO/ https://nvd.nist.gov/vuln/detail/CVE-2022-2309 https://security.gentoo.org/glsa/202208-06 https://security.netapp.com/advisory/ntap-20220915-0006 https://security.netapp.com/advisory/ntap-20220915-0006/ https://ubuntu.com/security/notices/USN-5760-1 https://ubuntu.com/security/notices/USN-6028-2 https://www.cve.org/CVERecord?id=CVE-2022-2309
libxml2	CVE-2022-40303	HIGH	2.9.14-r0	2.9.14-r2	http://seclists.org/fulldisclosure/2022/Dec/21 http://seclists.org/fulldisclosure/2022/Dec/24 http://seclists.org/fulldisclosure/2022/Dec/25 http://seclists.org/fulldisclosure/2022/Dec/26 http://seclists.org/fulldisclosure/2022/Dec/27 https://access.redhat.com/errata/RHSA-2023:0173 https://access.redhat.com/errata/RHSA-2023:0338 https://access.redhat.com/security/cve/CVE-2022-40303 https://bugzilla.redhat.com/2136266 https://bugzilla.redhat.com/2136288 https://bugzilla.redhat.com/show_bug.cgi?id=2136266 https://bugzilla.redhat.com/show_bug.cgi?id=2136288 https://cert-portal.siemens.com/productcert/html/ssa-337522.html https://cert-portal.siemens.com/productcert/html/ssa-341067.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-625862.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40303 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40304 https://errata.almalinux.org/8/ALSA-2023-0173.html https://errata.rockylinux.org/RLSA-2023:0338 https://gitlab.gnome.org/GNOME/libxml2/-/commit/c846986356fc149915a74972bf198abc266bc2c0 https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.3 https://linux.oracle.com/cve/CVE-2022-40303.html https://linux.oracle.com/errata/ELSA-2023-0338.html https://nvd.nist.gov/vuln/detail/CVE-2022-40303 https://security.netapp.com/advisory/ntap-20221209-0003/ https://support.apple.com/kb/HT213531 https://support.apple.com/kb/HT213533 https://support.apple.com/kb/HT213534 https://support.apple.com/kb/HT213535 https://support.apple.com/kb/HT213536 https://ubuntu.com/security/notices/USN-5760-1 https://ubuntu.com/security/notices/USN-5760-2 https://www.cve.org/CVERecord?id=CVE-2022-40303
libxml2	CVE-2022-40304	HIGH	2.9.14-r0	2.9.14-r2	http://seclists.org/fulldisclosure/2022/Dec/21 http://seclists.org/fulldisclosure/2022/Dec/24 http://seclists.org/fulldisclosure/2022/Dec/25 http://seclists.org/fulldisclosure/2022/Dec/26 http://seclists.org/fulldisclosure/2022/Dec/27 https://access.redhat.com/errata/RHSA-2023:0173 https://access.redhat.com/errata/RHSA-2023:0338 https://access.redhat.com/security/cve/CVE-2022-40304 https://bugzilla.redhat.com/2136266 https://bugzilla.redhat.com/2136288 https://bugzilla.redhat.com/show_bug.cgi?id=2136266 https://bugzilla.redhat.com/show_bug.cgi?id=2136288 https://cert-portal.siemens.com/productcert/html/ssa-337522.html https://cert-portal.siemens.com/productcert/html/ssa-341067.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-625862.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40303 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40304 https://errata.almalinux.org/8/ALSA-2023-0173.html https://errata.rockylinux.org/RLSA-2023:0338 https://gitlab.gnome.org/GNOME/libxml2/-/commit/1b41ec4e9433b05bb0376be4725804c54ef1d80b https://gitlab.gnome.org/GNOME/libxml2/-/tags https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.3 https://linux.oracle.com/cve/CVE-2022-40304.html https://linux.oracle.com/errata/ELSA-2023-0338.html https://nvd.nist.gov/vuln/detail/CVE-2022-40304 https://security.netapp.com/advisory/ntap-20221209-0003/ https://support.apple.com/kb/HT213531 https://support.apple.com/kb/HT213533 https://support.apple.com/kb/HT213534 https://support.apple.com/kb/HT213535 https://support.apple.com/kb/HT213536 https://ubuntu.com/security/notices/USN-5760-1 https://ubuntu.com/security/notices/USN-5760-2 https://www.cve.org/CVERecord?id=CVE-2022-40304
ncurses-libs	CVE-2022-29458	HIGH	6.3_p20211120-r0	6.3_p20211120-r1	http://seclists.org/fulldisclosure/2022/Oct/28 http://seclists.org/fulldisclosure/2022/Oct/41 https://access.redhat.com/errata/RHSA-2025:12876 https://access.redhat.com/security/cve/CVE-2022-29458 https://bugzilla.redhat.com/show_bug.cgi?id=2076483 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29458 https://errata.rockylinux.org/RLSA-2025:12876 https://invisible-island.net/ncurses/NEWS.html#t20220416 https://linux.oracle.com/cve/CVE-2022-29458.html https://linux.oracle.com/errata/ELSA-2025-12876.html https://lists.debian.org/debian-lts-announce/2022/10/msg00037.html https://lists.gnu.org/archive/html/bug-ncurses/2022-04/msg00014.html https://lists.gnu.org/archive/html/bug-ncurses/2022-04/msg00016.html https://nvd.nist.gov/vuln/detail/CVE-2022-29458 https://support.apple.com/kb/HT213488 https://ubuntu.com/security/notices/USN-5477-1 https://ubuntu.com/security/notices/USN-6099-1 https://www.cve.org/CVERecord?id=CVE-2022-29458
ncurses-libs	CVE-2023-29491	HIGH	6.3_p20211120-r0	6.3_p20211120-r2	http://ncurses.scripts.mit.edu/?p=ncurses.git%3Ba=commit%3Bh=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56 http://ncurses.scripts.mit.edu/?p=ncurses.git;a=commit;h=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56 http://www.openwall.com/lists/oss-security/2023/04/19/10 http://www.openwall.com/lists/oss-security/2023/04/19/11 https://access.redhat.com/errata/RHSA-2023:5249 https://access.redhat.com/security/cve/CVE-2023-29491 https://bugzilla.redhat.com/2191704 https://cert-portal.siemens.com/productcert/html/ssa-202008.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://errata.almalinux.org/8/ALSA-2023-5249.html https://invisible-island.net/ncurses/NEWS.html#index-t20230408 https://linux.oracle.com/cve/CVE-2023-29491.html https://linux.oracle.com/errata/ELSA-2023-6698.html https://lists.debian.org/debian-lts-announce/2023/12/msg00004.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/ https://nvd.nist.gov/vuln/detail/CVE-2023-29491 https://security.netapp.com/advisory/ntap-20230517-0009/ https://support.apple.com/kb/HT213843 https://support.apple.com/kb/HT213844 https://support.apple.com/kb/HT213845 https://ubuntu.com/security/notices/USN-6099-1 https://www.cve.org/CVERecord?id=CVE-2023-29491 https://www.openwall.com/lists/oss-security/2023/04/12/5 https://www.openwall.com/lists/oss-security/2023/04/13/4
ncurses-terminfo-base	CVE-2022-29458	HIGH	6.3_p20211120-r0	6.3_p20211120-r1	http://seclists.org/fulldisclosure/2022/Oct/28 http://seclists.org/fulldisclosure/2022/Oct/41 https://access.redhat.com/errata/RHSA-2025:12876 https://access.redhat.com/security/cve/CVE-2022-29458 https://bugzilla.redhat.com/show_bug.cgi?id=2076483 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29458 https://errata.rockylinux.org/RLSA-2025:12876 https://invisible-island.net/ncurses/NEWS.html#t20220416 https://linux.oracle.com/cve/CVE-2022-29458.html https://linux.oracle.com/errata/ELSA-2025-12876.html https://lists.debian.org/debian-lts-announce/2022/10/msg00037.html https://lists.gnu.org/archive/html/bug-ncurses/2022-04/msg00014.html https://lists.gnu.org/archive/html/bug-ncurses/2022-04/msg00016.html https://nvd.nist.gov/vuln/detail/CVE-2022-29458 https://support.apple.com/kb/HT213488 https://ubuntu.com/security/notices/USN-5477-1 https://ubuntu.com/security/notices/USN-6099-1 https://www.cve.org/CVERecord?id=CVE-2022-29458
ncurses-terminfo-base	CVE-2023-29491	HIGH	6.3_p20211120-r0	6.3_p20211120-r2	http://ncurses.scripts.mit.edu/?p=ncurses.git%3Ba=commit%3Bh=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56 http://ncurses.scripts.mit.edu/?p=ncurses.git;a=commit;h=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56 http://www.openwall.com/lists/oss-security/2023/04/19/10 http://www.openwall.com/lists/oss-security/2023/04/19/11 https://access.redhat.com/errata/RHSA-2023:5249 https://access.redhat.com/security/cve/CVE-2023-29491 https://bugzilla.redhat.com/2191704 https://cert-portal.siemens.com/productcert/html/ssa-202008.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://errata.almalinux.org/8/ALSA-2023-5249.html https://invisible-island.net/ncurses/NEWS.html#index-t20230408 https://linux.oracle.com/cve/CVE-2023-29491.html https://linux.oracle.com/errata/ELSA-2023-6698.html https://lists.debian.org/debian-lts-announce/2023/12/msg00004.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/ https://nvd.nist.gov/vuln/detail/CVE-2023-29491 https://security.netapp.com/advisory/ntap-20230517-0009/ https://support.apple.com/kb/HT213843 https://support.apple.com/kb/HT213844 https://support.apple.com/kb/HT213845 https://ubuntu.com/security/notices/USN-6099-1 https://www.cve.org/CVERecord?id=CVE-2023-29491 https://www.openwall.com/lists/oss-security/2023/04/12/5 https://www.openwall.com/lists/oss-security/2023/04/13/4
nghttp2-libs	CVE-2023-35945	HIGH	1.46.0-r0	1.46.0-r1	https://access.redhat.com/security/cve/CVE-2023-35945 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://github.com/envoyproxy/envoy/security/advisories/GHSA-jfxv-29pc-x22r https://github.com/nghttp2/nghttp2/blob/e7f59406556c80904b81b593d38508591bb7523a/lib/nghttp2_session.c#L3346 https://nvd.nist.gov/vuln/detail/CVE-2023-35945 https://www.cve.org/CVERecord?id=CVE-2023-35945
nghttp2-libs	CVE-2023-44487	HIGH	1.46.0-r0	1.46.0-r2	http://www.openwall.com/lists/oss-security/2023/10/10/6 http://www.openwall.com/lists/oss-security/2023/10/10/7 http://www.openwall.com/lists/oss-security/2023/10/13/4 http://www.openwall.com/lists/oss-security/2023/10/13/9 http://www.openwall.com/lists/oss-security/2023/10/18/4 http://www.openwall.com/lists/oss-security/2023/10/18/8 http://www.openwall.com/lists/oss-security/2023/10/19/6 http://www.openwall.com/lists/oss-security/2023/10/20/8 http://www.openwall.com/lists/oss-security/2025/08/13/6 https://access.redhat.com/errata/RHSA-2023:5838 https://access.redhat.com/errata/RHSA-2024:1444 https://access.redhat.com/security/cve/CVE-2023-44487 https://access.redhat.com/security/cve/cve-2023-44487 https://akka.io/security/akka-http-cve-2023-44487.html https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/ https://aws.amazon.com/security/security-bulletins/AWS-2023-011 https://aws.amazon.com/security/security-bulletins/AWS-2023-011/ https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/ https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/ https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/ https://blog.powerdns.com/2024/02/16/powerdns-dnsdist-1.9.0-released https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack https://blog.vespa.ai/cve-2023-44487 https://blog.vespa.ai/cve-2023-44487/ https://bugzilla.proxmox.com/show_bug.cgi?id=4988 https://bugzilla.redhat.com/2242803 https://bugzilla.redhat.com/2264574 https://bugzilla.redhat.com/show_bug.cgi?id=2242803 https://bugzilla.suse.com/show_bug.cgi?id=1216123 https://cert-portal.siemens.com/productcert/html/ssa-082556.html https://cert-portal.siemens.com/productcert/html/ssa-341067.html https://cert-portal.siemens.com/productcert/html/ssa-784301.html https://cert-portal.siemens.com/productcert/html/ssa-832273.html https://cert-portal.siemens.com/productcert/html/ssa-915275.html https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9 https://chaos.social/@icing/111210915918780532 https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/ https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487 https://devblogs.microsoft.com/dotnet/october-2023-updates/ https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715 https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve https://errata.almalinux.org/8/ALSA-2024-1444.html https://errata.rockylinux.org/RLSA-2023:5838 https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764 https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088 https://github.com/Azure/AKS/issues/3947 https://github.com/Kong/kong/discussions/11741 https://github.com/advisories/GHSA-qppj-fm5r-hxr3 https://github.com/advisories/GHSA-vx74-f528-fxqg https://github.com/advisories/GHSA-xpw8-rcwv-8f8p https://github.com/akka/akka-http/issues/4323 https://github.com/akka/akka-http/pull/4324 https://github.com/akka/akka-http/pull/4325 https://github.com/alibaba/tengine/issues/1872 https://github.com/apache/apisix/issues/10320 https://github.com/apache/httpd-site/pull/10 https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113 https://github.com/apache/tomcat/commit/944332bb15bd2f3bf76ec2caeb1ff0a58a3bc628 https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2 https://github.com/apache/trafficserver/pull/10564 https://github.com/apple/swift-nio-http2 https://github.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3 https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487 https://github.com/bcdannyboy/CVE-2023-44487 https://github.com/caddyserver/caddy/issues/5877 https://github.com/caddyserver/caddy/releases/tag/v2.7.5 https://github.com/dotnet/announcements/issues/277 https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73 https://github.com/eclipse/jetty.project/issues/10679 https://github.com/envoyproxy/envoy/pull/30055 https://github.com/envoyproxy/envoy/security/advisories/GHSA-jhv4-f7mr-xx76 https://github.com/etcd-io/etcd/issues/16740 https://github.com/facebook/proxygen/pull/466 https://github.com/golang/go/issues/63417 https://github.com/grpc/grpc-go/pull/6703 https://github.com/grpc/grpc-go/releases https://github.com/grpc/grpc/releases/tag/v1.59.2 https://github.com/h2o/h2o/pull/3291 https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf https://github.com/haproxy/haproxy/issues/2312 https://github.com/hyperium/hyper/issues/3337 https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244 https://github.com/junkurihara/rust-rpxy/issues/97 https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1 https://github.com/kazu-yamamoto/http2/issues/93 https://github.com/kubernetes/ingress-nginx/blob/4b5c5efe2508dc915a48c54de7f23912ff2ec695/changelog/controller-1.9.3.md?plain=1#L15 https://github.com/kubernetes/kubernetes/pull/121120 https://github.com/line/armeria/pull/5232 https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632 https://github.com/micrictor/http2-rst-stream https://github.com/microsoft/CBL-Mariner/pull/6381 https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61 https://github.com/nghttp2/nghttp2/pull/1961 https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0 https://github.com/ninenines/cowboy/issues/1615 https://github.com/nodejs/node/pull/50121 https://github.com/openresty/openresty/issues/930 https://github.com/opensearch-project/data-prepper/issues/3474 https://github.com/oqtane/oqtane.framework/discussions/3367 https://github.com/projectcontour/contour/pull/5826 https://github.com/tempesta-tech/tempesta/issues/1986 https://github.com/varnishcache/varnish-cache/issues/3996 https://go.dev/cl/534215 https://go.dev/cl/534235 https://go.dev/issue/63417 https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ https://istio.io/latest/news/security/istio-security-2023-004 https://istio.io/latest/news/security/istio-security-2023-004/ https://linkerd.io/2023/10/12/linkerd-cve-2023-44487 https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/ https://linux.oracle.com/cve/CVE-2023-44487.html https://linux.oracle.com/errata/ELSA-2024-1444.html https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/ https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html https://mailman.powerdns.com/pipermail/dnsdist/2023-October/001409.html https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2 https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/ https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487 https://my.f5.com/manage/s/article/K000137106 https://netty.io/news/2023/10/10/4-1-100-Final.html https://news.ycombinator.com/item?id=37830987 https://news.ycombinator.com/item?id=37830998 https://news.ycombinator.com/item?id=37831062 https://news.ycombinator.com/item?id=37837043 https://nodejs.org/en/blog/vulnerability/october-2023-security-releases https://nvd.nist.gov/vuln/detail/CVE-2023-44487 https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/ https://pkg.go.dev/vuln/GO-2023-2102 https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ https://security.gentoo.org/glsa/202311-09 https://security.netapp.com/advisory/ntap-20231016-0001 https://security.netapp.com/advisory/ntap-20231016-0001/ https://security.netapp.com/advisory/ntap-20240426-0007 https://security.netapp.com/advisory/ntap-20240426-0007/ https://security.netapp.com/advisory/ntap-20240621-0006 https://security.netapp.com/advisory/ntap-20240621-0006/ https://security.netapp.com/advisory/ntap-20240621-0007 https://security.netapp.com/advisory/ntap-20240621-0007/ https://security.paloaltonetworks.com/CVE-2023-44487 https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14 https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.0-M12 https://tomcat.apache.org/security-8.html https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.94 https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.81 https://ubuntu.com/security/CVE-2023-44487 https://ubuntu.com/security/notices/USN-6427-1 https://ubuntu.com/security/notices/USN-6427-2 https://ubuntu.com/security/notices/USN-6438-1 https://ubuntu.com/security/notices/USN-6505-1 https://ubuntu.com/security/notices/USN-6574-1 https://ubuntu.com/security/notices/USN-6754-1 https://ubuntu.com/security/notices/USN-6994-1 https://ubuntu.com/security/notices/USN-7067-1 https://ubuntu.com/security/notices/USN-7410-1 https://ubuntu.com/security/notices/USN-7469-1 https://ubuntu.com/security/notices/USN-7469-2 https://ubuntu.com/security/notices/USN-7469-3 https://ubuntu.com/security/notices/USN-7469-4 https://ubuntu.com/security/notices/USN-7892-1 https://varnish-cache.org/releases/rel6.0.12.html#rel6-0-12 https://varnish-cache.org/releases/rel7.3.1.html#rel7-3-1 https://varnish-cache.org/releases/rel7.4.2.html#rel7-4-2 https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/ https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487 https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 https://www.cve.org/CVERecord?id=CVE-2023-44487 https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event https://www.debian.org/security/2023/dsa-5521 https://www.debian.org/security/2023/dsa-5522 https://www.debian.org/security/2023/dsa-5540 https://www.debian.org/security/2023/dsa-5549 https://www.debian.org/security/2023/dsa-5558 https://www.debian.org/security/2023/dsa-5570 https://www.eclipse.org/lists/jetty-announce/msg00181.html https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487 https://www.mail-archive.com/haproxy@formilux.org/msg44134.html https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487 https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/ https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/ https://www.openwall.com/lists/oss-security/2023/10/10/6 https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/ https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause
openssl	CVE-2022-4450	HIGH	1.1.1o-r0	1.1.1t-r0	https://access.redhat.com/errata/RHSA-2023:0946 https://access.redhat.com/errata/RHSA-2023:2932 https://access.redhat.com/security/cve/CVE-2022-4450 https://bugzilla.redhat.com/2164440 https://bugzilla.redhat.com/2164487 https://bugzilla.redhat.com/2164492 https://bugzilla.redhat.com/2164494 https://bugzilla.redhat.com/show_bug.cgi?id=2144000 https://bugzilla.redhat.com/show_bug.cgi?id=2144003 https://bugzilla.redhat.com/show_bug.cgi?id=2144006 https://bugzilla.redhat.com/show_bug.cgi?id=2144008 https://bugzilla.redhat.com/show_bug.cgi?id=2144010 https://bugzilla.redhat.com/show_bug.cgi?id=2144012 https://bugzilla.redhat.com/show_bug.cgi?id=2144015 https://bugzilla.redhat.com/show_bug.cgi?id=2144017 https://bugzilla.redhat.com/show_bug.cgi?id=2144019 https://bugzilla.redhat.com/show_bug.cgi?id=2145170 https://bugzilla.redhat.com/show_bug.cgi?id=2158412 https://bugzilla.redhat.com/show_bug.cgi?id=2164440 https://bugzilla.redhat.com/show_bug.cgi?id=2164487 https://bugzilla.redhat.com/show_bug.cgi?id=2164488 https://bugzilla.redhat.com/show_bug.cgi?id=2164492 https://bugzilla.redhat.com/show_bug.cgi?id=2164494 https://bugzilla.redhat.com/show_bug.cgi?id=2164497 https://bugzilla.redhat.com/show_bug.cgi?id=2164499 https://bugzilla.redhat.com/show_bug.cgi?id=2164500 https://cert-portal.siemens.com/productcert/html/ssa-203374.html https://cert-portal.siemens.com/productcert/html/ssa-337522.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-561322.html https://cert-portal.siemens.com/productcert/html/ssa-625862.html https://cert-portal.siemens.com/productcert/html/ssa-699386.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-879734.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401 https://errata.almalinux.org/8/ALSA-2023-2932.html https://errata.rockylinux.org/RLSA-2023:0946 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b https://github.com/advisories/GHSA-v5w6-wcm8-jm4q https://linux.oracle.com/cve/CVE-2022-4450.html https://linux.oracle.com/errata/ELSA-2023-32791.html https://nvd.nist.gov/vuln/detail/CVE-2022-4450 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003 https://rustsec.org/advisories/RUSTSEC-2023-0010.html https://security.gentoo.org/glsa/202402-08 https://ubuntu.com/security/notices/USN-5844-1 https://ubuntu.com/security/notices/USN-6564-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2022-4450 https://www.openssl.org/news/secadv/20230207.txt
openssl	CVE-2023-0215	HIGH	1.1.1o-r0	1.1.1t-r0	https://access.redhat.com/errata/RHSA-2023:0946 https://access.redhat.com/errata/RHSA-2023:2932 https://access.redhat.com/security/cve/CVE-2023-0215 https://bugzilla.redhat.com/2164440 https://bugzilla.redhat.com/2164487 https://bugzilla.redhat.com/2164492 https://bugzilla.redhat.com/2164494 https://bugzilla.redhat.com/show_bug.cgi?id=2144000 https://bugzilla.redhat.com/show_bug.cgi?id=2144003 https://bugzilla.redhat.com/show_bug.cgi?id=2144006 https://bugzilla.redhat.com/show_bug.cgi?id=2144008 https://bugzilla.redhat.com/show_bug.cgi?id=2144010 https://bugzilla.redhat.com/show_bug.cgi?id=2144012 https://bugzilla.redhat.com/show_bug.cgi?id=2144015 https://bugzilla.redhat.com/show_bug.cgi?id=2144017 https://bugzilla.redhat.com/show_bug.cgi?id=2144019 https://bugzilla.redhat.com/show_bug.cgi?id=2145170 https://bugzilla.redhat.com/show_bug.cgi?id=2158412 https://bugzilla.redhat.com/show_bug.cgi?id=2164440 https://bugzilla.redhat.com/show_bug.cgi?id=2164487 https://bugzilla.redhat.com/show_bug.cgi?id=2164488 https://bugzilla.redhat.com/show_bug.cgi?id=2164492 https://bugzilla.redhat.com/show_bug.cgi?id=2164494 https://bugzilla.redhat.com/show_bug.cgi?id=2164497 https://bugzilla.redhat.com/show_bug.cgi?id=2164499 https://bugzilla.redhat.com/show_bug.cgi?id=2164500 https://cert-portal.siemens.com/productcert/html/ssa-203374.html https://cert-portal.siemens.com/productcert/html/ssa-337522.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-561322.html https://cert-portal.siemens.com/productcert/html/ssa-625862.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-879734.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401 https://errata.almalinux.org/8/ALSA-2023-2932.html https://errata.rockylinux.org/RLSA-2023:0946 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344 https://github.com/advisories/GHSA-r7jw-wp68-3xch https://linux.oracle.com/cve/CVE-2023-0215.html https://linux.oracle.com/errata/ELSA-2023-32791.html https://nvd.nist.gov/vuln/detail/CVE-2023-0215 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003 https://rustsec.org/advisories/RUSTSEC-2023-0009.html https://security.gentoo.org/glsa/202402-08 https://security.netapp.com/advisory/ntap-20230427-0007 https://security.netapp.com/advisory/ntap-20230427-0007/ https://security.netapp.com/advisory/ntap-20230427-0009 https://security.netapp.com/advisory/ntap-20230427-0009/ https://security.netapp.com/advisory/ntap-20240621-0006 https://security.netapp.com/advisory/ntap-20240621-0006/ https://ubuntu.com/security/notices/USN-5844-1 https://ubuntu.com/security/notices/USN-5845-1 https://ubuntu.com/security/notices/USN-5845-2 https://ubuntu.com/security/notices/USN-6564-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2023-0215 https://www.openssl.org/news/secadv/20230207.txt
openssl	CVE-2023-0286	HIGH	1.1.1o-r0	1.1.1t-r0	https://access.redhat.com/errata/RHSA-2023:0946 https://access.redhat.com/errata/RHSA-2025:7895 https://access.redhat.com/security/cve/CVE-2023-0286 https://access.redhat.com/security/cve/cve-2023-0286 https://bugzilla.redhat.com/2164440 https://bugzilla.redhat.com/show_bug.cgi?id=2144000 https://bugzilla.redhat.com/show_bug.cgi?id=2144003 https://bugzilla.redhat.com/show_bug.cgi?id=2144006 https://bugzilla.redhat.com/show_bug.cgi?id=2144008 https://bugzilla.redhat.com/show_bug.cgi?id=2144010 https://bugzilla.redhat.com/show_bug.cgi?id=2144012 https://bugzilla.redhat.com/show_bug.cgi?id=2144015 https://bugzilla.redhat.com/show_bug.cgi?id=2144017 https://bugzilla.redhat.com/show_bug.cgi?id=2144019 https://bugzilla.redhat.com/show_bug.cgi?id=2145170 https://bugzilla.redhat.com/show_bug.cgi?id=2158412 https://bugzilla.redhat.com/show_bug.cgi?id=2164440 https://bugzilla.redhat.com/show_bug.cgi?id=2164487 https://bugzilla.redhat.com/show_bug.cgi?id=2164488 https://bugzilla.redhat.com/show_bug.cgi?id=2164492 https://bugzilla.redhat.com/show_bug.cgi?id=2164494 https://bugzilla.redhat.com/show_bug.cgi?id=2164497 https://bugzilla.redhat.com/show_bug.cgi?id=2164499 https://bugzilla.redhat.com/show_bug.cgi?id=2164500 https://cert-portal.siemens.com/productcert/html/ssa-028723.html https://cert-portal.siemens.com/productcert/html/ssa-203374.html https://cert-portal.siemens.com/productcert/html/ssa-264815.html https://cert-portal.siemens.com/productcert/html/ssa-337522.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-455250.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-561322.html https://cert-portal.siemens.com/productcert/html/ssa-625862.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-879734.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401 https://errata.almalinux.org/8/ALSA-2025-7895.html https://errata.rockylinux.org/RLSA-2023:0946 https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d https://github.com/advisories/GHSA-x4qr-2fvf-3mr5 https://github.com/pyca/cryptography https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5 https://linux.oracle.com/cve/CVE-2023-0286.html https://linux.oracle.com/errata/ELSA-2025-7937.html https://nvd.nist.gov/vuln/detail/CVE-2023-0286 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003 https://rustsec.org/advisories/RUSTSEC-2023-0006.html https://security.gentoo.org/glsa/202402-08 https://ubuntu.com/security/notices/USN-5844-1 https://ubuntu.com/security/notices/USN-5845-1 https://ubuntu.com/security/notices/USN-5845-2 https://ubuntu.com/security/notices/USN-6564-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2023-0286 https://www.openssl.org/news/secadv/20230207.txt
openssl	CVE-2023-0464	HIGH	1.1.1o-r0	1.1.1t-r2	https://access.redhat.com/errata/RHSA-2023:3722 https://access.redhat.com/security/cve/CVE-2023-0464 https://bugzilla.redhat.com/2181082 https://bugzilla.redhat.com/2182561 https://bugzilla.redhat.com/2182565 https://bugzilla.redhat.com/2188461 https://bugzilla.redhat.com/2207947 https://cert-portal.siemens.com/productcert/html/ssa-028723.html https://cert-portal.siemens.com/productcert/html/ssa-077170.html https://cert-portal.siemens.com/productcert/html/ssa-337522.html https://cert-portal.siemens.com/productcert/html/ssa-341067.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-625862.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-879734.html https://errata.almalinux.org/9/ALSA-2023-3722.html https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1 https://github.com/advisories/GHSA-w2w6-xp88-5cvw https://linux.oracle.com/cve/CVE-2023-0464.html https://linux.oracle.com/errata/ELSA-2023-3722.html https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html https://nvd.nist.gov/vuln/detail/CVE-2023-0464 https://security.gentoo.org/glsa/202402-08 https://security.netapp.com/advisory/ntap-20230406-0006 https://security.netapp.com/advisory/ntap-20230406-0006/ https://security.netapp.com/advisory/ntap-20240621-0006 https://security.netapp.com/advisory/ntap-20240621-0006/ https://ubuntu.com/security/notices/USN-6039-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.couchbase.com/alerts https://www.couchbase.com/alerts/ https://www.cve.org/CVERecord?id=CVE-2023-0464 https://www.debian.org/security/2023/dsa-5417 https://www.openssl.org/news/secadv/20230322.txt
openssl	CVE-2022-2097	MEDIUM	1.1.1o-r0	1.1.1q-r0	https://access.redhat.com/errata/RHSA-2022:5818 https://access.redhat.com/security/cve/CVE-2022-2097 https://bugzilla.redhat.com/2081494 https://bugzilla.redhat.com/2097310 https://bugzilla.redhat.com/2104905 https://bugzilla.redhat.com/show_bug.cgi?id=2081494 https://bugzilla.redhat.com/show_bug.cgi?id=2097310 https://bugzilla.redhat.com/show_bug.cgi?id=2100554 https://bugzilla.redhat.com/show_bug.cgi?id=2104905 https://cert-portal.siemens.com/productcert/html/ssa-332410.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-625862.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-879734.html https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097 https://errata.almalinux.org/8/ALSA-2022-5818.html https://errata.rockylinux.org/RLSA-2022:5818 https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431 https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93 https://github.com/advisories/GHSA-3wx7-46ch-7rq2 https://github.com/alexcrichton/openssl-src-rs https://linux.oracle.com/cve/CVE-2022-2097.html https://linux.oracle.com/errata/ELSA-2022-9955.html https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/ https://nvd.nist.gov/vuln/detail/CVE-2022-2097 https://rustsec.org/advisories/RUSTSEC-2022-0032.html https://security.gentoo.org/glsa/202210-02 https://security.netapp.com/advisory/ntap-20220715-0011 https://security.netapp.com/advisory/ntap-20220715-0011/ https://security.netapp.com/advisory/ntap-20230420-0008 https://security.netapp.com/advisory/ntap-20230420-0008/ https://security.netapp.com/advisory/ntap-20240621-0006 https://security.netapp.com/advisory/ntap-20240621-0006/ https://ubuntu.com/security/notices/USN-5502-1 https://ubuntu.com/security/notices/USN-6457-1 https://www.cve.org/CVERecord?id=CVE-2022-2097 https://www.debian.org/security/2023/dsa-5343 https://www.openssl.org/news/secadv/20220705.txt
openssl	CVE-2022-4304	MEDIUM	1.1.1o-r0	1.1.1t-r0	https://access.redhat.com/errata/RHSA-2023:0946 https://access.redhat.com/errata/RHSA-2023:2932 https://access.redhat.com/security/cve/CVE-2022-4304 https://bugzilla.redhat.com/2164440 https://bugzilla.redhat.com/2164487 https://bugzilla.redhat.com/2164492 https://bugzilla.redhat.com/2164494 https://bugzilla.redhat.com/show_bug.cgi?id=2144000 https://bugzilla.redhat.com/show_bug.cgi?id=2144003 https://bugzilla.redhat.com/show_bug.cgi?id=2144006 https://bugzilla.redhat.com/show_bug.cgi?id=2144008 https://bugzilla.redhat.com/show_bug.cgi?id=2144010 https://bugzilla.redhat.com/show_bug.cgi?id=2144012 https://bugzilla.redhat.com/show_bug.cgi?id=2144015 https://bugzilla.redhat.com/show_bug.cgi?id=2144017 https://bugzilla.redhat.com/show_bug.cgi?id=2144019 https://bugzilla.redhat.com/show_bug.cgi?id=2145170 https://bugzilla.redhat.com/show_bug.cgi?id=2158412 https://bugzilla.redhat.com/show_bug.cgi?id=2164440 https://bugzilla.redhat.com/show_bug.cgi?id=2164487 https://bugzilla.redhat.com/show_bug.cgi?id=2164488 https://bugzilla.redhat.com/show_bug.cgi?id=2164492 https://bugzilla.redhat.com/show_bug.cgi?id=2164494 https://bugzilla.redhat.com/show_bug.cgi?id=2164497 https://bugzilla.redhat.com/show_bug.cgi?id=2164499 https://bugzilla.redhat.com/show_bug.cgi?id=2164500 https://cert-portal.siemens.com/productcert/html/ssa-203374.html https://cert-portal.siemens.com/productcert/html/ssa-264814.html https://cert-portal.siemens.com/productcert/html/ssa-337522.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-561322.html https://cert-portal.siemens.com/productcert/html/ssa-625862.html https://cert-portal.siemens.com/productcert/html/ssa-699386.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-879734.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401 https://errata.almalinux.org/8/ALSA-2023-2932.html https://errata.rockylinux.org/RLSA-2023:0946 https://github.com/advisories/GHSA-p52g-cm5j-mjv4 https://linux.oracle.com/cve/CVE-2022-4304.html https://linux.oracle.com/errata/ELSA-2023-32791.html https://nvd.nist.gov/vuln/detail/CVE-2022-4304 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003 https://rustsec.org/advisories/RUSTSEC-2023-0007.html https://security.gentoo.org/glsa/202402-08 https://ubuntu.com/security/notices/USN-5844-1 https://ubuntu.com/security/notices/USN-6564-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2022-4304 https://www.openssl.org/news/secadv/20230207.txt
openssl	CVE-2023-0465	MEDIUM	1.1.1o-r0	1.1.1t-r2	https://access.redhat.com/errata/RHSA-2023:3722 https://access.redhat.com/security/cve/CVE-2023-0465 https://bugzilla.redhat.com/2181082 https://bugzilla.redhat.com/2182561 https://bugzilla.redhat.com/2182565 https://bugzilla.redhat.com/2188461 https://bugzilla.redhat.com/2207947 https://cert-portal.siemens.com/productcert/html/ssa-337522.html https://cert-portal.siemens.com/productcert/html/ssa-341067.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-625862.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-879734.html https://errata.almalinux.org/9/ALSA-2023-3722.html https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c https://github.com/advisories/GHSA-77f3-6546-6rj7 https://linux.oracle.com/cve/CVE-2023-0465.html https://linux.oracle.com/errata/ELSA-2023-3722.html https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html https://nvd.nist.gov/vuln/detail/CVE-2023-0465 https://security.gentoo.org/glsa/202402-08 https://security.netapp.com/advisory/ntap-20230414-0001 https://security.netapp.com/advisory/ntap-20230414-0001/ https://ubuntu.com/security/notices/USN-6039-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2023-0465 https://www.debian.org/security/2023/dsa-5417 https://www.openssl.org/news/secadv/20230328.txt
openssl	CVE-2023-2650	MEDIUM	1.1.1o-r0	1.1.1u-r0	http://www.openwall.com/lists/oss-security/2023/05/30/1 https://access.redhat.com/errata/RHSA-2023:6330 https://access.redhat.com/security/cve/CVE-2023-2650 https://bugzilla.redhat.com/1858038 https://bugzilla.redhat.com/2207947 https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-699386.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://errata.almalinux.org/9/ALSA-2023-6330.html https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a https://github.com/advisories/GHSA-gqxg-9vfr-p9cg https://linux.oracle.com/cve/CVE-2023-2650.html https://linux.oracle.com/errata/ELSA-2023-6330.html https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html https://nvd.nist.gov/vuln/detail/CVE-2023-2650 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009 https://security.gentoo.org/glsa/202402-08 https://security.netapp.com/advisory/ntap-20230703-0001/ https://security.netapp.com/advisory/ntap-20231027-0009/ https://ubuntu.com/security/notices/USN-6119-1 https://ubuntu.com/security/notices/USN-6188-1 https://ubuntu.com/security/notices/USN-6672-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2023-2650 https://www.debian.org/security/2023/dsa-5417 https://www.openssl.org/news/secadv/20230530.txt
openssl	CVE-2023-3446	MEDIUM	1.1.1o-r0	1.1.1u-r2	http://www.openwall.com/lists/oss-security/2023/07/19/4 http://www.openwall.com/lists/oss-security/2023/07/19/5 http://www.openwall.com/lists/oss-security/2023/07/19/6 http://www.openwall.com/lists/oss-security/2023/07/31/1 http://www.openwall.com/lists/oss-security/2024/05/16/1 https://access.redhat.com/errata/RHSA-2024:0888 https://access.redhat.com/errata/RHSA-2024:2264 https://access.redhat.com/security/cve/CVE-2023-3446 https://bugzilla.redhat.com/2224962 https://bugzilla.redhat.com/show_bug.cgi?id=2224962 https://bugzilla.redhat.com/show_bug.cgi?id=2257582 https://bugzilla.redhat.com/show_bug.cgi?id=2257583 https://bugzilla.redhat.com/show_bug.cgi?id=2258677 https://bugzilla.redhat.com/show_bug.cgi?id=2258688 https://bugzilla.redhat.com/show_bug.cgi?id=2258691 https://bugzilla.redhat.com/show_bug.cgi?id=2258694 https://bugzilla.redhat.com/show_bug.cgi?id=2258700 https://cert-portal.siemens.com/productcert/html/ssa-099606.html https://cert-portal.siemens.com/productcert/html/ssa-277137.html https://cert-portal.siemens.com/productcert/html/ssa-341067.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-915275.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235 https://errata.almalinux.org/8/ALSA-2024-0888.html https://errata.rockylinux.org/RLSA-2024:2264 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23 https://linux.oracle.com/cve/CVE-2023-3446.html https://linux.oracle.com/errata/ELSA-2024-2447.html https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html https://nvd.nist.gov/vuln/detail/CVE-2023-3446 https://security.gentoo.org/glsa/202402-08 https://security.netapp.com/advisory/ntap-20230803-0011/ https://ubuntu.com/security/notices/USN-6435-1 https://ubuntu.com/security/notices/USN-6435-2 https://ubuntu.com/security/notices/USN-6450-1 https://ubuntu.com/security/notices/USN-6709-1 https://ubuntu.com/security/notices/USN-7018-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2023-3446 https://www.openssl.org/news/secadv/20230719.txt
openssl	CVE-2023-3817	MEDIUM	1.1.1o-r0	1.1.1v-r0	http://seclists.org/fulldisclosure/2023/Jul/43 http://www.openwall.com/lists/oss-security/2023/07/31/1 http://www.openwall.com/lists/oss-security/2023/09/22/11 http://www.openwall.com/lists/oss-security/2023/09/22/9 http://www.openwall.com/lists/oss-security/2023/11/06/2 https://access.redhat.com/errata/RHSA-2023:7877 https://access.redhat.com/security/cve/CVE-2023-3817 https://bugzilla.redhat.com/2224962 https://bugzilla.redhat.com/2227852 https://bugzilla.redhat.com/2248616 https://bugzilla.redhat.com/show_bug.cgi?id=2224962 https://bugzilla.redhat.com/show_bug.cgi?id=2227852 https://bugzilla.redhat.com/show_bug.cgi?id=2248616 https://bugzilla.redhat.com/show_bug.cgi?id=2270358 https://cert-portal.siemens.com/productcert/html/ssa-099606.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-915275.html https://cert-portal.siemens.com/productcert/html/ssa-943925.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408 https://errata.almalinux.org/8/ALSA-2023-7877.html https://errata.rockylinux.org/RLSA-2023:7877 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5 https://github.com/advisories/GHSA-c945-cqj5-wfv6 https://linux.oracle.com/cve/CVE-2023-3817.html https://linux.oracle.com/errata/ELSA-2024-2447.html https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html https://nvd.nist.gov/vuln/detail/CVE-2023-3817 https://security.gentoo.org/glsa/202402-08 https://security.netapp.com/advisory/ntap-20230818-0014 https://security.netapp.com/advisory/ntap-20230818-0014/ https://security.netapp.com/advisory/ntap-20231027-0008 https://security.netapp.com/advisory/ntap-20231027-0008/ https://security.netapp.com/advisory/ntap-20240621-0006 https://security.netapp.com/advisory/ntap-20240621-0006/ https://ubuntu.com/security/notices/USN-6435-1 https://ubuntu.com/security/notices/USN-6435-2 https://ubuntu.com/security/notices/USN-6450-1 https://ubuntu.com/security/notices/USN-6709-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2023-3817 https://www.openssl.org/news/secadv/20230731.txt
openssl	CVE-2023-5678	MEDIUM	1.1.1o-r0	1.1.1w-r1	http://www.openwall.com/lists/oss-security/2023/11/06/2 http://www.openwall.com/lists/oss-security/2024/03/11/1 https://access.redhat.com/errata/RHSA-2023:7877 https://access.redhat.com/security/cve/CVE-2023-5678 https://bugzilla.redhat.com/2224962 https://bugzilla.redhat.com/2227852 https://bugzilla.redhat.com/2248616 https://bugzilla.redhat.com/show_bug.cgi?id=2224962 https://bugzilla.redhat.com/show_bug.cgi?id=2227852 https://bugzilla.redhat.com/show_bug.cgi?id=2248616 https://bugzilla.redhat.com/show_bug.cgi?id=2270358 https://cert-portal.siemens.com/productcert/html/ssa-093430.html https://cert-portal.siemens.com/productcert/html/ssa-128433.html https://cert-portal.siemens.com/productcert/html/ssa-265688.html https://cert-portal.siemens.com/productcert/html/ssa-277137.html https://cert-portal.siemens.com/productcert/html/ssa-331112.html https://cert-portal.siemens.com/productcert/html/ssa-341067.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-556635.html https://cert-portal.siemens.com/productcert/html/ssa-613116.html https://cert-portal.siemens.com/productcert/html/ssa-769027.html https://cert-portal.siemens.com/productcert/html/ssa-794697.html https://cert-portal.siemens.com/productcert/html/ssa-915275.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408 https://errata.almalinux.org/8/ALSA-2023-7877.html https://errata.rockylinux.org/RLSA-2023:7877 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6 https://github.com/advisories/GHSA-2cj7-mg3x-9mhq https://linux.oracle.com/cve/CVE-2023-5678.html https://linux.oracle.com/errata/ELSA-2024-2447.html https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html https://nvd.nist.gov/vuln/detail/CVE-2023-5678 https://security.netapp.com/advisory/ntap-20231130-0010 https://security.netapp.com/advisory/ntap-20231130-0010/ https://ubuntu.com/security/notices/USN-6622-1 https://ubuntu.com/security/notices/USN-6632-1 https://ubuntu.com/security/notices/USN-6709-1 https://ubuntu.com/security/notices/USN-7894-1 https://www.cve.org/CVERecord?id=CVE-2023-5678 https://www.openssl.org/news/secadv/20231106.txt
zlib	CVE-2022-37434	CRITICAL	1.2.12-r0	1.2.12-r2	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434 http://seclists.org/fulldisclosure/2022/Oct/37 http://seclists.org/fulldisclosure/2022/Oct/38 http://seclists.org/fulldisclosure/2022/Oct/41 http://seclists.org/fulldisclosure/2022/Oct/42 http://www.openwall.com/lists/oss-security/2022/08/05/2 http://www.openwall.com/lists/oss-security/2022/08/09/1 https://access.redhat.com/errata/RHSA-2022:7793 https://access.redhat.com/errata/RHSA-2022:8291 https://access.redhat.com/security/cve/CVE-2022-37434 https://bugzilla.redhat.com/2116639 https://bugzilla.redhat.com/show_bug.cgi?id=2053198 https://bugzilla.redhat.com/show_bug.cgi?id=2077431 https://bugzilla.redhat.com/show_bug.cgi?id=2081296 https://bugzilla.redhat.com/show_bug.cgi?id=2116639 https://cert-portal.siemens.com/productcert/html/ssa-150063.html https://cert-portal.siemens.com/productcert/html/ssa-202008.html https://cert-portal.siemens.com/productcert/html/ssa-398330.html https://cert-portal.siemens.com/productcert/html/ssa-470355.html https://cert-portal.siemens.com/productcert/html/ssa-561322.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434 https://errata.almalinux.org/8/ALSA-2022-7793.html https://errata.rockylinux.org/RLSA-2022:8291 https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-w5mr-8397-m99w https://github.com/curl/curl/issues/9271 https://github.com/ivd38/zlib_overflow https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063 https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1 https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764 https://linux.oracle.com/cve/CVE-2022-37434.html https://linux.oracle.com/errata/ELSA-2023-1095.html https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/ https://nvd.nist.gov/vuln/detail/CVE-2022-37434 https://security.netapp.com/advisory/ntap-20220901-0005/ https://security.netapp.com/advisory/ntap-20230427-0007/ https://support.apple.com/kb/HT213488 https://support.apple.com/kb/HT213489 https://support.apple.com/kb/HT213490 https://support.apple.com/kb/HT213491 https://support.apple.com/kb/HT213493 https://support.apple.com/kb/HT213494 https://ubuntu.com/security/notices/USN-5570-1 https://ubuntu.com/security/notices/USN-5570-2 https://ubuntu.com/security/notices/USN-5573-1 https://ubuntu.com/security/notices/USN-6736-1 https://ubuntu.com/security/notices/USN-6736-2 https://www.cve.org/CVERecord?id=CVE-2022-37434 https://www.debian.org/security/2022/dsa-5218
No Misconfigurations found
jar
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
com.fasterxml.jackson.core:jackson-core	CVE-2025-52999	HIGH	2.10.5	2.15.0	https://access.redhat.com/errata/RHSA-2025:12280 https://access.redhat.com/errata/RHSA-2025:14126 https://access.redhat.com/security/cve/CVE-2025-52999 https://advisory.echohq.com/cve/CVE-2025-52999 https://bugzilla.redhat.com/2374804 https://bugzilla.redhat.com/show_bug.cgi?id=2374804 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52999 https://errata.almalinux.org/8/ALSA-2025-14126.html https://errata.rockylinux.org/RLSA-2025:12280 https://github.com/FasterXML/jackson-core https://github.com/FasterXML/jackson-core/pull/943 https://github.com/FasterXML/jackson-core/security/advisories/GHSA-h46c-h94j-95f3 https://github.com/advisories/GHSA-h46c-h94j-95f3 https://linux.oracle.com/cve/CVE-2025-52999.html https://linux.oracle.com/errata/ELSA-2025-14126.html https://nvd.nist.gov/vuln/detail/CVE-2025-52999 https://www.cve.org/CVERecord?id=CVE-2025-52999
com.fasterxml.jackson.core:jackson-core	CVE-2026-68494	HIGH	2.10.5	2.18.8, 2.21.4	https://access.redhat.com/security/cve/CVE-2026-68494 https://advisory.echohq.com/cve/CVE-2026-68494 https://github.com/FasterXML/jackson-core https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641 https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8 https://github.com/FasterXML/jackson-core/pull/1611 https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9 https://github.com/advisories/GHSA-72hv-8253-57qq https://nvd.nist.gov/vuln/detail/CVE-2026-68494 https://www.cve.org/CVERecord?id=CVE-2026-18401 https://www.cve.org/CVERecord?id=CVE-2026-68494
com.fasterxml.jackson.core:jackson-core	CVE-2026-89425	HIGH	2.10.5	2.21.7, 2.22.3, 2.18.11	https://access.redhat.com/errata/RHSA-2026:86706 https://access.redhat.com/security/cve/CVE-2026-89425 https://advisory.echohq.com/cve/CVE-2026-89425 https://bugzilla.redhat.com/2538720 https://bugzilla.redhat.com/2539084 https://bugzilla.redhat.com/show_bug.cgi?id=2538720 https://bugzilla.redhat.com/show_bug.cgi?id=2539084 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89407 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89425 https://errata.almalinux.org/9/ALSA-2026-86706.html https://errata.rockylinux.org/RLSA-2026:86706 https://github.com/FasterXML/jackson-core https://github.com/FasterXML/jackson-core/commit/211cf2c5d91abbec38067f37efc1363cd4e88ee3 https://github.com/FasterXML/jackson-core/pull/1698 https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-2.18.11 https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-3.2.3 https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf https://linux.oracle.com/cve/CVE-2026-89425.html https://linux.oracle.com/errata/ELSA-2026-86706.html https://nvd.nist.gov/vuln/detail/CVE-2026-89425 https://www.cve.org/CVERecord?id=CVE-2026-89425
com.fasterxml.jackson.core:jackson-core	CVE-2025-49128	MEDIUM	2.10.5	2.13.0	https://access.redhat.com/security/cve/CVE-2025-49128 https://advisory.echohq.com/cve/CVE-2025-49128 https://github.com/FasterXML/jackson-core https://github.com/FasterXML/jackson-core/commit/a6c297682737dde13337cb7c3020f299518609a8 https://github.com/FasterXML/jackson-core/pull/652 https://github.com/FasterXML/jackson-core/security/advisories/GHSA-wf8f-6423-gfxg https://github.com/advisories/GHSA-wf8f-6423-gfxg https://nvd.nist.gov/vuln/detail/CVE-2021-22145 https://nvd.nist.gov/vuln/detail/CVE-2025-49128 https://www.cve.org/CVERecord?id=CVE-2025-49128
com.fasterxml.jackson.core:jackson-databind	CVE-2020-25649	HIGH	2.10.5	2.6.7.4, 2.9.10.7, 2.10.5.1	https://access.redhat.com/security/cve/CVE-2020-25649 https://bugzilla.redhat.com/show_bug.cgi?id=1887664 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/3d932709abd0b5390efe67451653fc9efa9db677 https://github.com/FasterXML/jackson-databind/commit/612f971b78c60202e9cd75a299050c8f2d724a59 https://github.com/FasterXML/jackson-databind/commit/612f971b78c60202e9cd75a299050c8f2d724a59%20%28jackson-databind-2.11.0.rc1%29 https://github.com/FasterXML/jackson-databind/issues/2589 https://lists.apache.org/thread.html/r011d1430e8f40dff9550c3bc5d0f48b14c01ba8aecabd91d5e495386@%3Ccommits.turbine.apache.org%3E https://lists.apache.org/thread.html/r024b7bda9c43c5560d81238748775c5ecfe01b57280f90df1f773949@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r04529cedaca40c2ff90af4880493f9c88a8ebf4d1d6c861d23108a5a@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r0881e23bd9034c8f51fdccdc8f4d085ba985dcd738f8520569ca5c3d@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r0b8dc3acd4503e4ecb6fbd6ea7d95f59941168d8452ac0ab1d1d96bb@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r1b7ed0c4b6c4301d4dfd6fdbc5581b0a789d3240cab55d766f33c6c6@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r2882fc1f3032cd7be66e28787f04ec6f1874ac68d47e310e30ff7eb1@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r2b6ddb3a4f4cd11d8f6305011e1b7438ba813511f2e3ab3180c7ffda@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/r2eb66c182853c69ecfb52f63d3dec09495e9b65be829fd889a081ae1@%3Cdev.hive.apache.org%3E https://lists.apache.org/thread.html/r2f5c5479f99398ef344b7ebd4d90bc3316236c45d0f3bc42090efcd7@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r31f4ee7d561d56a0c2c2c6eb1d6ce3e05917ff9654fdbfec05dc2b83@%3Ccommits.servicecomb.apache.org%3E https://lists.apache.org/thread.html/r3e6ae311842de4e64c5d560a475b7f9cc7e0a9a8649363c6cf7537eb@%3Ccommits.karaf.apache.org%3E https://lists.apache.org/thread.html/r407538adec3185dd35a05c9a26ae2f74425b15132470cf540f41d85b@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r45e7350dfc92bb192f3f88e9971c11ab2be0953cc375be3dda5170bd@%3Cissues.flink.apache.org%3E https://lists.apache.org/thread.html/r5b130fe668503c4b7e2caf1b16f86b7f2070fd1b7ef8f26195a2ffbd@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r5f8a1608d758936bd6bbc5eed980777437b611537bf6fff40663fc71@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r605764e05e201db33b3e9c2e66ff620658f07ad74f296abe483f7042@%3Creviews.iotdb.apache.org%3E https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc@%3Cdev.kafka.apache.org%3E https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc@%3Cusers.kafka.apache.org%3E https://lists.apache.org/thread.html/r63c87aab97155f3f3cbe11d030c4a184ea0de440ee714977db02e956@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r68d029ee74ab0f3b0569d0c05f5688cb45dd3abe96a6534735252805@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r6a4f3ef6edfed2e0884269d84798f766779bbbc1005f7884e0800d61@%3Cdev.knox.apache.org%3E https://lists.apache.org/thread.html/r6a6df5647583541e3cb71c75141008802f7025cee1c430d4ed78f4cc@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r6b11eca1d646f45eb0d35d174e6b1e47cfae5295b92000856bfb6304@%3Cdev.kafka.apache.org%3E https://lists.apache.org/thread.html/r6b11eca1d646f45eb0d35d174e6b1e47cfae5295b92000856bfb6304@%3Cusers.kafka.apache.org%3E https://lists.apache.org/thread.html/r6cbd599b80e787f02ff7a1391d9278a03f37d6a6f4f943f0f01a62fb@%3Creviews.iotdb.apache.org%3E https://lists.apache.org/thread.html/r6e3d4f7991542119a4ca6330271d7fbf7b9fb3abab24ada82ddf1ee4@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r73bef1bb601a9f093f915f8075eb49fcca51efade57b817afd5def07@%3Ccommits.iotdb.apache.org%3E https://lists.apache.org/thread.html/r765283e145049df9b8998f14dcd444345555aae02b1610cfb3188bf8@%3Cnotifications.iotdb.apache.org%3E https://lists.apache.org/thread.html/r78d53a0a269c18394daf5940105dc8c7f9a2399503c2e78be20abe7e@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/r7cb5b4b3e4bd41a8042e5725b7285877a17bcbf07f4eb3f7b316af60@%3Creviews.iotdb.apache.org%3E https://lists.apache.org/thread.html/r86c78bf7656fdb2dab69cbf17f3d7492300f771025f1a3a65d5e5ce5@%3Ccommits.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r8764bb835bcb8e311c882ff91dd3949c9824e905e880930be56f6ba3@%3Cuser.spark.apache.org%3E https://lists.apache.org/thread.html/r8937a7160717fe8b2221767163c4de4f65bc5466405cb1c5310f9080@%3Cdev.kafka.apache.org%3E https://lists.apache.org/thread.html/r8937a7160717fe8b2221767163c4de4f65bc5466405cb1c5310f9080@%3Cusers.kafka.apache.org%3E https://lists.apache.org/thread.html/r8ae961c80930e2717c75025414ce48a432cea1137c02f648b1fb9524@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r900d4408c4189b376d1ec580ea7740ea6f8710dc2f0b7e9c9eeb5ae0@%3Cdev.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r90d1e97b0a743cf697d89a792a9b669909cc5a1692d1e0083a22e66c@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r91722ecfba688b0c565675f8bf380269fde8ec62b54d6161db544c22@%3Ccommits.karaf.apache.org%3E https://lists.apache.org/thread.html/r94c7e86e546120f157264ba5ba61fd29b3a8d530ed325a9b4fa334d7@%3Ccommits.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r95a297eb5fd1f2d3a2281f15340e2413f952e9d5503296c3adc7201a@%3Ccommits.tomee.apache.org%3E https://lists.apache.org/thread.html/r98bfe3b90ea9408f12c4b447edcb5638703d80bc782430aa0c210a54@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/ra1157e57a01d25e36b0dc17959ace758fc21ba36746de29ba1d8b130@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/ra409f798a1e5a6652b7097429b388650ccd65fd958cee0b6f69bba00@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/ra95faf968f3463acb3f31a6fbec31453fc5045325f99f396961886d3@%3Cissues.flink.apache.org%3E https://lists.apache.org/thread.html/raf13235de6df1d47a717199e1ecd700dff3236632f5c9a1488d9845b@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/rb674520b9f6c808c1bf263b1369e14048ec3243615f35cfd24e33604@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7@%3Cdev.kafka.apache.org%3E https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7@%3Cusers.kafka.apache.org%3E https://lists.apache.org/thread.html/rc15e90bbef196a5c6c01659e015249d6c9a73581ca9afb8aeecf00d2@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/rc82ff47853289e9cd17f5cfbb053c04cafc75ee32e3d7223963f83bb@%3Cdev.knox.apache.org%3E https://lists.apache.org/thread.html/rc88f2fa2b7bd6443921727aeee7704a1fb02433e722e2abf677e0d3d@%3Ccommits.zookeeper.apache.org%3E https://lists.apache.org/thread.html/rc959cdb57c4fe198316130ff4a5ecbf9d680e356032ff2e9f4f05d54@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/rd317f15a675d114dbf5b488d27eeb2467b4424356b16116eb18a652d@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/rd57c7582adc90e233f23f3727db3df9115b27a823b92374f11453f34@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/rd6f6bf848c2d47fa4a85c27d011d948778b8f7e58ba495968435a0b3@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/rdca8711bb7aa5d47a44682606cd0ea3497e2e922f22b7ee83e81e6c1@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/rdf9a34726482222c90d50ae1b9847881de67dde8cfde4999633d2cdc@%3Ccommits.zookeeper.apache.org%3E https://lists.apache.org/thread.html/re16f81d3ad49a93dd2f0cba9f8fc88e5fb89f30bf9a2ad7b6f3e69c1@%3Ccommits.karaf.apache.org%3E https://lists.apache.org/thread.html/re96dc7a13e13e56190a5d80f9e5440a0d0c83aeec6467b562fbf2dca@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/rf1809a1374041a969d77afab21fc38925de066bc97e86157d3ac3402@%3Ccommits.karaf.apache.org%3E https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6X2UT4X6M7DLQYBOOHMXBWGYJ65RL2CT https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6X2UT4X6M7DLQYBOOHMXBWGYJ65RL2CT/ https://nvd.nist.gov/vuln/detail/CVE-2020-25649 https://security.netapp.com/advisory/ntap-20210108-0007 https://security.netapp.com/advisory/ntap-20210108-0007/ https://www.cve.org/CVERecord?id=CVE-2020-25649 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
com.fasterxml.jackson.core:jackson-databind	CVE-2020-36518	HIGH	2.10.5	2.13.2.1, 2.12.6.1	https://access.redhat.com/errata/RHSA-2024:3061 https://access.redhat.com/security/cve/CVE-2020-36518 https://bugzilla.redhat.com/2064698 https://bugzilla.redhat.com/show_bug.cgi?id=2064698 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36518 https://errata.almalinux.org/8/ALSA-2024-3061.html https://errata.rockylinux.org/RLSA-2024:3061 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/0a8157c6ca478b1bc7be4ba7dccdb3863275f0de https://github.com/FasterXML/jackson-databind/commit/3cc52f82ecf943e06c1d7c3b078e405fb3923d2b https://github.com/FasterXML/jackson-databind/commit/8238ab41d0350fb915797c89d46777b4496b74fd https://github.com/FasterXML/jackson-databind/commit/b3587924ee5d8695942f364d0d404d48d0ea6126 https://github.com/FasterXML/jackson-databind/commit/fcfc4998ec23f0b1f7f8a9521c2b317b6c25892b https://github.com/FasterXML/jackson-databind/issues/2816 https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12 https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.13 https://github.com/advisories/GHSA-57j2-w4cx-62h2 https://linux.oracle.com/cve/CVE-2020-36518.html https://linux.oracle.com/errata/ELSA-2024-3061.html https://lists.debian.org/debian-lts-announce/2022/05/msg00001.html https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html https://nvd.nist.gov/vuln/detail/CVE-2020-36518 https://security.netapp.com/advisory/ntap-20220506-0004 https://security.netapp.com/advisory/ntap-20220506-0004/ https://www.cve.org/CVERecord?id=CVE-2020-36518 https://www.debian.org/security/2022/dsa-5283 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujul2022.html
com.fasterxml.jackson.core:jackson-databind	CVE-2021-46877	HIGH	2.10.5	2.12.6, 2.13.1	https://access.redhat.com/security/cve/CVE-2021-46877 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/3ccde7d938fea547e598fdefe9a82cff37fed5cb https://github.com/FasterXML/jackson-databind/commit/3ccde7d938fea547e598fdefe9a82cff37fed5cb%20%28jackson-databind-2.12.6%29 https://github.com/FasterXML/jackson-databind/commit/3ccde7d938fea547e598fdefe9a82cff37fed5cb%20%28jackson-databind-3.13.1%29 https://github.com/FasterXML/jackson-databind/issues/3328 https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12.6 https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.13.1 https://groups.google.com/g/jackson-user/c/OsBsirPM_Vw https://nvd.nist.gov/vuln/detail/CVE-2021-46877 https://www.cve.org/CVERecord?id=CVE-2021-46877
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42003	HIGH	2.10.5	2.12.7.1, 2.13.4.2	https://access.redhat.com/security/cve/CVE-2022-42003 https://advisory.echohq.com/cve/CVE-2022-42003 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51020 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/blob/2.13/release-notes/VERSION-2.x https://github.com/FasterXML/jackson-databind/commit/0e37a39502439ecbaa1a5b5188387c01bf7f7fa1 https://github.com/FasterXML/jackson-databind/commit/2c4a601c626f7790cad9d3c322d244e182838288 https://github.com/FasterXML/jackson-databind/commit/7ba9ac5b87a9d6ac0d2815158ecbeb315ad4dcdc https://github.com/FasterXML/jackson-databind/commit/cd090979b7ea78c75e4de8a4aed04f7e9fa8deea https://github.com/FasterXML/jackson-databind/commit/d499f2e7bbc5ebd63af11e1f5cf1989fa323aa45 https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33 https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33%20%28jackson-databind-2.14.0-rc1%29 https://github.com/FasterXML/jackson-databind/commits/jackson-databind-2.4.0-rc1?after=75b97b8519f0d50c62523ad85170d80a197a2c86+174&branch=jackson-databind-2.4.0-rc1&qualified_name=refs%2Ftags%2Fjackson-databind-2.4.0-rc1 https://github.com/FasterXML/jackson-databind/compare/jackson-databind-2.13.4.1...jackson-databind-2.13.4.2 https://github.com/FasterXML/jackson-databind/issues/3590 https://github.com/FasterXML/jackson-databind/issues/3627 https://github.com/advisories/GHSA-jjjh-jjxp-wpff https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html https://nvd.nist.gov/vuln/detail/CVE-2022-42003 https://security.gentoo.org/glsa/202210-21 https://security.netapp.com/advisory/ntap-20221124-0004 https://security.netapp.com/advisory/ntap-20221124-0004/ https://www.cve.org/CVERecord?id=CVE-2022-42003 https://www.debian.org/security/2022/dsa-5283
com.fasterxml.jackson.core:jackson-databind	CVE-2022-42004	HIGH	2.10.5	2.12.7.1, 2.13.4	https://access.redhat.com/security/cve/CVE-2022-42004 https://advisory.echohq.com/cve/CVE-2022-42004 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50490 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/063183589218fec19a9293ed2f17ec53ea80ba88 https://github.com/FasterXML/jackson-databind/commit/063183589218fec19a9293ed2f17ec53ea80ba88%20%28jackson-databind-2.13.4%29 https://github.com/FasterXML/jackson-databind/commit/0e37a39502439ecbaa1a5b5188387c01bf7f7fa1 https://github.com/FasterXML/jackson-databind/commit/35de19e7144c4df8ab178b800ba86e80c3d84252 https://github.com/FasterXML/jackson-databind/commit/cd090979b7ea78c75e4de8a4aed04f7e9fa8deea https://github.com/FasterXML/jackson-databind/issues/3582 https://github.com/advisories/GHSA-rgv9-q543-rqg4 https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html https://nvd.nist.gov/vuln/detail/CVE-2022-42004 https://security.gentoo.org/glsa/202210-21 https://security.netapp.com/advisory/ntap-20221118-0008 https://security.netapp.com/advisory/ntap-20221118-0008/ https://www.cve.org/CVERecord?id=CVE-2022-42004 https://www.debian.org/security/2022/dsa-5283
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	HIGH	2.10.5	2.18.8, 3.1.4, 2.21.4	https://access.redhat.com/errata/RHSA-2026:40895 https://access.redhat.com/errata/RHSA-2026:43400 https://access.redhat.com/security/cve/CVE-2026-54512 https://advisory.echohq.com/cve/CVE-2026-54512 https://bugzilla.redhat.com/2492010 https://bugzilla.redhat.com/2492015 https://bugzilla.redhat.com/show_bug.cgi?id=2492010 https://bugzilla.redhat.com/show_bug.cgi?id=2492015 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54512 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54513 https://errata.almalinux.org/10/ALSA-2026-43400.html https://errata.rockylinux.org/RLSA-2026:40895 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5 https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5%20%28jackson-databind-2.18.8%29 https://github.com/FasterXML/jackson-databind/issues/5988 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm https://linux.oracle.com/cve/CVE-2026-54512.html https://linux.oracle.com/errata/ELSA-2026-43400.html https://nvd.nist.gov/vuln/detail/CVE-2026-54512 https://www.cve.org/CVERecord?id=CVE-2026-54512
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	HIGH	2.10.5	2.18.8, 2.21.4, 3.1.4	https://access.redhat.com/errata/RHSA-2026:36839 https://access.redhat.com/errata/RHSA-2026:40895 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:43218 https://access.redhat.com/errata/RHSA-2026:43400 https://access.redhat.com/errata/RHSA-2026:44061 https://access.redhat.com/errata/RHSA-2026:44062 https://access.redhat.com/errata/RHSA-2026:44063 https://access.redhat.com/errata/RHSA-2026:44064 https://access.redhat.com/errata/RHSA-2026:44065 https://access.redhat.com/errata/RHSA-2026:44066 https://access.redhat.com/errata/RHSA-2026:44271 https://access.redhat.com/errata/RHSA-2026:48095 https://access.redhat.com/errata/RHSA-2026:48151 https://access.redhat.com/errata/RHSA-2026:50846 https://access.redhat.com/errata/RHSA-2026:50847 https://access.redhat.com/errata/RHSA-2026:50848 https://access.redhat.com/errata/RHSA-2026:50849 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:54622 https://access.redhat.com/errata/RHSA-2026:62260 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-54513 https://advisory.echohq.com/cve/CVE-2026-54513 https://bugzilla.redhat.com/2492010 https://bugzilla.redhat.com/show_bug.cgi?id=2492010 https://bugzilla.redhat.com/show_bug.cgi?id=2492015 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54512 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54513 https://errata.almalinux.org/8/ALSA-2026-43218.html https://errata.rockylinux.org/RLSA-2026:40895 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5 https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e https://github.com/FasterXML/jackson-databind/issues/5981 https://github.com/FasterXML/jackson-databind/issues/5983 https://github.com/FasterXML/jackson-databind/pull/5984 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f https://linux.oracle.com/cve/CVE-2026-54513.html https://linux.oracle.com/errata/ELSA-2026-43400.html https://nvd.nist.gov/vuln/detail/CVE-2026-54513 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54513.json https://www.cve.org/CVERecord?id=CVE-2026-54513
com.fasterxml.jackson.core:jackson-databind	CVE-2026-91776	HIGH	2.10.5	2.18.11, 2.21.7, 2.22.3	https://access.redhat.com/security/cve/CVE-2026-91776 https://advisory.echohq.com/cve/CVE-2026-91776 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/2870d1d6dc1b7e1c07ee11dd5b04ab71cddbb577 https://github.com/FasterXML/jackson-databind/issues/6203 https://github.com/FasterXML/jackson-databind/pull/6203 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54 https://nvd.nist.gov/vuln/detail/CVE-2026-91776 https://www.cve.org/CVERecord?id=CVE-2026-91776
com.fasterxml.jackson.core:jackson-databind	CVE-2026-91777	HIGH	2.10.5	2.21.7, 2.18.11, 2.22.3	https://access.redhat.com/errata/RHSA-2026:85231 https://access.redhat.com/security/cve/CVE-2026-91777 https://advisory.echohq.com/cve/CVE-2026-91777 https://bugzilla.redhat.com/2539085 https://bugzilla.redhat.com/show_bug.cgi?id=2539085 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91777 https://errata.almalinux.org/9/ALSA-2026-85231.html https://errata.rockylinux.org/RLSA-2026:85231 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/37ad9b81712cbb9fb62c2d2c1813593252a24b67 https://github.com/FasterXML/jackson-databind/issues/6204 https://github.com/FasterXML/jackson-databind/pull/6204 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24 https://linux.oracle.com/cve/CVE-2026-91777.html https://linux.oracle.com/errata/ELSA-2026-85231.html https://nvd.nist.gov/vuln/detail/CVE-2026-91777 https://www.cve.org/CVERecord?id=CVE-2026-91777
com.fasterxml.jackson.core:jackson-databind	CVE-2026-19032	MEDIUM	2.10.5	2.18.10, 2.21.6, 2.22.2	https://access.redhat.com/security/cve/CVE-2026-19032 https://advisory.echohq.com/cve/CVE-2026-19032 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551 https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166 https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d https://github.com/FasterXML/jackson-databind/pull/6129 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf https://nvd.nist.gov/vuln/detail/CVE-2026-19032 https://www.cve.org/CVERecord?id=CVE-2026-19032
com.fasterxml.jackson.core:jackson-databind	CVE-2026-50193	MEDIUM	2.10.5	2.14.0	https://access.redhat.com/security/cve/CVE-2026-50193 https://advisory.echohq.com/cve/CVE-2026-50193 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/a1fa4ae4ecf5cee16da465985f135f3e81816f8c https://github.com/FasterXML/jackson-databind/issues/3447 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3wrr-7qpf-2prh https://nvd.nist.gov/vuln/detail/CVE-2026-50193 https://www.cve.org/CVERecord?id=CVE-2026-50193
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	MEDIUM	2.10.5	2.18.8, 2.21.4, 3.1.4	https://access.redhat.com/security/cve/CVE-2026-54514 https://advisory.echohq.com/cve/CVE-2026-54514 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/1f5a1037b1e9e05920e755cb35f198bcd46667e4 https://github.com/FasterXML/jackson-databind/pull/5951 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-hgj6-7826-r7m5 https://nvd.nist.gov/vuln/detail/CVE-2026-54514 https://www.cve.org/CVERecord?id=CVE-2026-54514
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	MEDIUM	2.10.5	3.1.4, 2.18.9, 2.21.5, 2.22.1	https://access.redhat.com/security/cve/CVE-2026-54515 https://advisory.echohq.com/cve/CVE-2026-54515 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/0e1b0b211f7a53baa62ba2f4c9bd006c7bf4d5fa https://github.com/FasterXML/jackson-databind/issues/5962 https://github.com/FasterXML/jackson-databind/issues/5964 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5jmj-h7xm-6q6v https://nvd.nist.gov/vuln/detail/CVE-2026-54515 https://www.cve.org/CVERecord?id=CVE-2026-54515
com.fasterxml.jackson.core:jackson-databind	CVE-2026-59889	MEDIUM	2.10.5	2.21.5, 2.18.9, 2.22.1	https://access.redhat.com/security/cve/CVE-2026-59889 https://advisory.echohq.com/cve/CVE-2026-59889 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/d627a8a86fcb062429282f79f3f256f181ed2c7b https://github.com/FasterXML/jackson-databind/issues/6060 https://github.com/FasterXML/jackson-databind/pull/6056 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5gvw-p9qm-jgwh https://nvd.nist.gov/vuln/detail/CVE-2026-59889 https://www.cve.org/CVERecord?id=CVE-2026-59889
com.fasterxml.jackson.core:jackson-databind	CVE-2026-77310	MEDIUM	2.10.5	2.18.9, 2.21.5, 2.22.1	https://access.redhat.com/security/cve/CVE-2026-77310 https://advisory.echohq.com/cve/CVE-2026-77310 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/2fc7bd9057dd051d7dea0e5fcad89822d0fa5ebd https://github.com/FasterXML/jackson-databind/pull/6058 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.9 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.5 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.1 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.5 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.1 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-vvgp-rfg2-7rr6 https://nvd.nist.gov/vuln/detail/CVE-2026-77310 https://www.cve.org/CVERecord?id=CVE-2026-77310
com.fasterxml.woodstox:woodstox-core	CVE-2022-40152	MEDIUM	6.0.3	6.4.0, 5.4.0	https://access.redhat.com/security/cve/CVE-2022-40152 https://advisory.echohq.com/cve/CVE-2022-40152 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47434 https://github.com/FasterXML/woodstox https://github.com/FasterXML/woodstox/issues/157 https://github.com/FasterXML/woodstox/issues/160 https://github.com/FasterXML/woodstox/pull/159 https://github.com/advisories/GHSA-3f7h-mf4q-vrm4 https://github.com/x-stream/xstream/issues/304 https://nvd.nist.gov/vuln/detail/CVE-2022-40152 https://www.cve.org/CVERecord?id=CVE-2022-40152
com.google.code.gson:gson	CVE-2022-25647	HIGH	2.8.5	2.8.9	https://access.redhat.com/security/cve/CVE-2022-25647 https://github.com/google/gson https://github.com/google/gson/pull/1991 https://github.com/google/gson/pull/1991/commits https://linux.oracle.com/cve/CVE-2022-25647.html https://linux.oracle.com/errata/ELSA-2022-9656.html https://lists.debian.org/debian-lts-announce/2022/05/msg00015.html https://lists.debian.org/debian-lts-announce/2022/09/msg00009.html https://nvd.nist.gov/vuln/detail/CVE-2022-25647 https://security.netapp.com/advisory/ntap-20220901-0009 https://security.netapp.com/advisory/ntap-20220901-0009/ https://snyk.io/vuln/SNYK-JAVA-COMGOOGLECODEGSON-1730327 https://ubuntu.com/security/notices/USN-6692-1 https://www.cve.org/CVERecord?id=CVE-2022-25647 https://www.debian.org/security/2022/dsa-5227 https://www.oracle.com/security-alerts/cpujul2022.html
com.google.code.gson:gson	CVE-2022-25647	HIGH	2.8.6	2.8.9	https://access.redhat.com/security/cve/CVE-2022-25647 https://github.com/google/gson https://github.com/google/gson/pull/1991 https://github.com/google/gson/pull/1991/commits https://linux.oracle.com/cve/CVE-2022-25647.html https://linux.oracle.com/errata/ELSA-2022-9656.html https://lists.debian.org/debian-lts-announce/2022/05/msg00015.html https://lists.debian.org/debian-lts-announce/2022/09/msg00009.html https://nvd.nist.gov/vuln/detail/CVE-2022-25647 https://security.netapp.com/advisory/ntap-20220901-0009 https://security.netapp.com/advisory/ntap-20220901-0009/ https://snyk.io/vuln/SNYK-JAVA-COMGOOGLECODEGSON-1730327 https://ubuntu.com/security/notices/USN-6692-1 https://www.cve.org/CVERecord?id=CVE-2022-25647 https://www.debian.org/security/2022/dsa-5227 https://www.oracle.com/security-alerts/cpujul2022.html
com.google.guava:guava	CVE-2026-102554	HIGH	25.0-jre	33.7.2	https://access.redhat.com/security/cve/CVE-2026-102554 https://advisory.echohq.com/cve/CVE-2026-102554 https://github.com/advisories/GHSA-xxph-c9ww-hj94 https://github.com/google/guava https://github.com/google/guava/commit/b931fe9d6d5cf00bc55714ad3308d086f71850fe https://github.com/google/guava/releases/tag/v33.7.2 https://github.com/google/guava/security/advisories/GHSA-xxph-c9ww-hj94 https://nvd.nist.gov/vuln/detail/CVE-2026-102554 https://www.cve.org/CVERecord?id=CVE-2026-102554
com.google.guava:guava	CVE-2026-102554	HIGH	25.0-jre	33.7.2	https://access.redhat.com/security/cve/CVE-2026-102554 https://advisory.echohq.com/cve/CVE-2026-102554 https://github.com/advisories/GHSA-xxph-c9ww-hj94 https://github.com/google/guava https://github.com/google/guava/commit/b931fe9d6d5cf00bc55714ad3308d086f71850fe https://github.com/google/guava/releases/tag/v33.7.2 https://github.com/google/guava/security/advisories/GHSA-xxph-c9ww-hj94 https://nvd.nist.gov/vuln/detail/CVE-2026-102554 https://www.cve.org/CVERecord?id=CVE-2026-102554
com.google.guava:guava	CVE-2023-2976	MEDIUM	25.0-jre	32.0.0-android	https://access.redhat.com/security/cve/CVE-2023-2976 https://advisory.echohq.com/cve/CVE-2023-2976 https://github.com/advisories/GHSA-7g45-4rm6-3mm3 https://github.com/google/guava https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284 https://github.com/google/guava/issues/2575 https://github.com/google/guava/issues/6532 https://github.com/google/guava/releases/tag/v32.0.0 https://nvd.nist.gov/vuln/detail/CVE-2023-2976 https://security.netapp.com/advisory/ntap-20230818-0008 https://security.netapp.com/advisory/ntap-20230818-0008/ https://security.netapp.com/advisory/ntap-20241108-0002 https://security.netapp.com/advisory/ntap-20241108-0002/ https://www.cve.org/CVERecord?id=CVE-2023-2976 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01006.html
com.google.guava:guava	CVE-2023-2976	MEDIUM	25.0-jre	32.0.0-android	https://access.redhat.com/security/cve/CVE-2023-2976 https://advisory.echohq.com/cve/CVE-2023-2976 https://github.com/advisories/GHSA-7g45-4rm6-3mm3 https://github.com/google/guava https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284 https://github.com/google/guava/issues/2575 https://github.com/google/guava/issues/6532 https://github.com/google/guava/releases/tag/v32.0.0 https://nvd.nist.gov/vuln/detail/CVE-2023-2976 https://security.netapp.com/advisory/ntap-20230818-0008 https://security.netapp.com/advisory/ntap-20230818-0008/ https://security.netapp.com/advisory/ntap-20241108-0002 https://security.netapp.com/advisory/ntap-20241108-0002/ https://www.cve.org/CVERecord?id=CVE-2023-2976 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01006.html
com.google.guava:guava	CVE-2020-8908	LOW	25.0-jre	32.0.0-android	https://access.redhat.com/security/cve/CVE-2020-8908 https://advisory.echohq.com/cve/CVE-2020-8908 https://github.com/advisories/GHSA-5mg8-w23w-74h3 https://github.com/google/guava https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284 https://github.com/google/guava/commit/fec0dbc4634006a6162cfd4d0d09c962073ddf40 https://github.com/google/guava/issues/2575 https://github.com/google/guava/issues/4011 https://github.com/google/guava/issues/4011#issuecomment-1573923586 https://github.com/google/guava/issues/4011#issuecomment-1578991974 https://github.com/google/guava/releases/tag/v32.0.0 https://lists.apache.org/thread.html/r007add131977f4f576c232b25e024249a3d16f66aad14a4b52819d21@%3Ccommon-issues.hadoop.apache.org%3E https://lists.apache.org/thread.html/r037fed1d0ebde50c9caf8d99815db3093c344c3f651c5a49a09824ce@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/r07ed3e4417ad043a27bee7bb33322e9bfc7d7e6d1719b8e3dfd95c14@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/r161b87f8037bbaff400194a63cd2016c9a69f5949f06dcc79beeab54@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/r215b3d50f56faeb2f9383505f3e62faa9f549bb23e8a9848b78a968e@%3Ccommits.ws.apache.org%3E https://lists.apache.org/thread.html/r294be9d31c0312d2c0837087204b5d4bf49d0552890e6eec716fa6a6@%3Cyarn-issues.hadoop.apache.org%3E https://lists.apache.org/thread.html/r2fe45d96eea8434b91592ca08109118f6308d60f6d0e21d52438cfb4@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/r3c3b33ee5bef0c67391d27a97cbfd89d44f328cf072b601b58d4e748@%3Ccommits.pulsar.apache.org%3E https://lists.apache.org/thread.html/r3dd8881de891598d622227e9840dd7c2ef1d08abbb49e9690c7ae1bc@%3Cissues.geode.apache.org%3E https://lists.apache.org/thread.html/r4776f62dfae4a0006658542f43034a7fc199350e35a66d4e18164ee6@%3Ccommits.cxf.apache.org%3E https://lists.apache.org/thread.html/r49549a8322f62cd3acfa4490d25bfba0be04f3f9ff4d14fe36199d27@%3Cyarn-dev.hadoop.apache.org%3E https://lists.apache.org/thread.html/r58a8775205ab1839dba43054b09a9ab3b25b423a4170b2413c4067ac@%3Ccommon-issues.hadoop.apache.org%3E https://lists.apache.org/thread.html/r5b3d93dfdfb7708e796e8762ab40edbde8ff8add48aba53e5ea26f44@%3Cissues.geode.apache.org%3E https://lists.apache.org/thread.html/r5d61b98ceb7bba939a651de5900dbd67be3817db6bfcc41c6e04e199@%3Cyarn-issues.hadoop.apache.org%3E https://lists.apache.org/thread.html/r6874dfe26eefc41b7c9a5e4a0487846fc4accf8c78ff948b24a1104a@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/r68d86f4b06c808204f62bcb254fcb5b0432528ee8d37a07ef4bc8222@%3Ccommits.ws.apache.org%3E https://lists.apache.org/thread.html/r79e47ed555bdb1180e528420a7a2bb898541367a29a3bc6bbf0baf2c@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r7b0e81d8367264d6cad98766a469d64d11248eb654417809bfdacf09@%3Cyarn-issues.hadoop.apache.org%3E https://lists.apache.org/thread.html/r841c5e14e1b55281523ebcde661ece00b38a0569e00ef5e12bd5f6ba@%3Cissues.maven.apache.org%3E https://lists.apache.org/thread.html/ra7ab308481ee729f998691e8e3e02e93b1dedfc98f6b1cd3d86923b3@%3Cyarn-issues.hadoop.apache.org%3E https://lists.apache.org/thread.html/rb2364f4cf4d274eab5a7ecfaf64bf575cedf8b0173551997c749d322@%3Cgitbox.hive.apache.org%3E https://lists.apache.org/thread.html/rb8c0f1b7589864396690fe42a91a71dea9412e86eec66dc85bbacaaf@%3Ccommits.cxf.apache.org%3E https://lists.apache.org/thread.html/rbc7642b9800249553f13457e46b813bea1aec99d2bc9106510e00ff3@%3Ctorque-dev.db.apache.org%3E https://lists.apache.org/thread.html/rc2dbc4633a6eea1fcbce6831876cfa17b73759a98c65326d1896cb1a@%3Ctorque-dev.db.apache.org%3E https://lists.apache.org/thread.html/rc607bc52f3507b8b9c28c6a747c3122f51ac24afe80af2a670785b97@%3Cissues.geode.apache.org%3E https://lists.apache.org/thread.html/rcafc3a637d82bdc9a24036b2ddcad1e519dd0e6f848fcc3d606fd78f@%3Cdev.hive.apache.org%3E https://lists.apache.org/thread.html/rd01f5ff0164c468ec7abc96ff7646cea3cce6378da2e4aa29c6bcb95@%3Cgithub.arrow.apache.org%3E https://lists.apache.org/thread.html/rd2704306ec729ccac726e50339b8a8f079515cc29ccb77713b16e7c5@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/rd5d58088812cf8e677d99b07f73c654014c524c94e7fedbdee047604@%3Ctorque-dev.db.apache.org%3E https://lists.apache.org/thread.html/rd7e12d56d49d73e2b8549694974b07561b79b05455f7f781954231bf@%3Cdev.pig.apache.org%3E https://lists.apache.org/thread.html/re120f6b3d2f8222121080342c5801fdafca2f5188ceeb3b49c8a1d27@%3Cyarn-issues.hadoop.apache.org%3E https://lists.apache.org/thread.html/reebbd63c25bc1a946caa419cec2be78079f8449d1af48e52d47c9e85@%3Cissues.geode.apache.org%3E https://lists.apache.org/thread.html/rf00b688ffa620c990597f829ff85fdbba8bf73ee7bfb34783e1f0d4e@%3Cyarn-dev.hadoop.apache.org%3E https://lists.apache.org/thread.html/rf9f0fa84b8ae1a285f0210bafec6de2a9eba083007d04640b82aa625@%3Cissues.geode.apache.org%3E https://lists.apache.org/thread.html/rfc27e2727a20a574f39273e0432aa97486a332f9b3068f6ac1346594@%3Cdev.myfaces.apache.org%3E https://nvd.nist.gov/vuln/detail/CVE-2020-8908 https://security.netapp.com/advisory/ntap-20220210-0003 https://security.netapp.com/advisory/ntap-20220210-0003/ https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEGUAVA-1015415 https://www.cve.org/CVERecord?id=CVE-2020-8908 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
com.google.guava:guava	CVE-2020-8908	LOW	25.0-jre	32.0.0-android	https://access.redhat.com/security/cve/CVE-2020-8908 https://advisory.echohq.com/cve/CVE-2020-8908 https://github.com/advisories/GHSA-5mg8-w23w-74h3 https://github.com/google/guava https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284 https://github.com/google/guava/commit/fec0dbc4634006a6162cfd4d0d09c962073ddf40 https://github.com/google/guava/issues/2575 https://github.com/google/guava/issues/4011 https://github.com/google/guava/issues/4011#issuecomment-1573923586 https://github.com/google/guava/issues/4011#issuecomment-1578991974 https://github.com/google/guava/releases/tag/v32.0.0 https://lists.apache.org/thread.html/r007add131977f4f576c232b25e024249a3d16f66aad14a4b52819d21@%3Ccommon-issues.hadoop.apache.org%3E https://lists.apache.org/thread.html/r037fed1d0ebde50c9caf8d99815db3093c344c3f651c5a49a09824ce@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/r07ed3e4417ad043a27bee7bb33322e9bfc7d7e6d1719b8e3dfd95c14@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/r161b87f8037bbaff400194a63cd2016c9a69f5949f06dcc79beeab54@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/r215b3d50f56faeb2f9383505f3e62faa9f549bb23e8a9848b78a968e@%3Ccommits.ws.apache.org%3E https://lists.apache.org/thread.html/r294be9d31c0312d2c0837087204b5d4bf49d0552890e6eec716fa6a6@%3Cyarn-issues.hadoop.apache.org%3E https://lists.apache.org/thread.html/r2fe45d96eea8434b91592ca08109118f6308d60f6d0e21d52438cfb4@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/r3c3b33ee5bef0c67391d27a97cbfd89d44f328cf072b601b58d4e748@%3Ccommits.pulsar.apache.org%3E https://lists.apache.org/thread.html/r3dd8881de891598d622227e9840dd7c2ef1d08abbb49e9690c7ae1bc@%3Cissues.geode.apache.org%3E https://lists.apache.org/thread.html/r4776f62dfae4a0006658542f43034a7fc199350e35a66d4e18164ee6@%3Ccommits.cxf.apache.org%3E https://lists.apache.org/thread.html/r49549a8322f62cd3acfa4490d25bfba0be04f3f9ff4d14fe36199d27@%3Cyarn-dev.hadoop.apache.org%3E https://lists.apache.org/thread.html/r58a8775205ab1839dba43054b09a9ab3b25b423a4170b2413c4067ac@%3Ccommon-issues.hadoop.apache.org%3E https://lists.apache.org/thread.html/r5b3d93dfdfb7708e796e8762ab40edbde8ff8add48aba53e5ea26f44@%3Cissues.geode.apache.org%3E https://lists.apache.org/thread.html/r5d61b98ceb7bba939a651de5900dbd67be3817db6bfcc41c6e04e199@%3Cyarn-issues.hadoop.apache.org%3E https://lists.apache.org/thread.html/r6874dfe26eefc41b7c9a5e4a0487846fc4accf8c78ff948b24a1104a@%3Cdev.drill.apache.org%3E https://lists.apache.org/thread.html/r68d86f4b06c808204f62bcb254fcb5b0432528ee8d37a07ef4bc8222@%3Ccommits.ws.apache.org%3E https://lists.apache.org/thread.html/r79e47ed555bdb1180e528420a7a2bb898541367a29a3bc6bbf0baf2c@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r7b0e81d8367264d6cad98766a469d64d11248eb654417809bfdacf09@%3Cyarn-issues.hadoop.apache.org%3E https://lists.apache.org/thread.html/r841c5e14e1b55281523ebcde661ece00b38a0569e00ef5e12bd5f6ba@%3Cissues.maven.apache.org%3E https://lists.apache.org/thread.html/ra7ab308481ee729f998691e8e3e02e93b1dedfc98f6b1cd3d86923b3@%3Cyarn-issues.hadoop.apache.org%3E https://lists.apache.org/thread.html/rb2364f4cf4d274eab5a7ecfaf64bf575cedf8b0173551997c749d322@%3Cgitbox.hive.apache.org%3E https://lists.apache.org/thread.html/rb8c0f1b7589864396690fe42a91a71dea9412e86eec66dc85bbacaaf@%3Ccommits.cxf.apache.org%3E https://lists.apache.org/thread.html/rbc7642b9800249553f13457e46b813bea1aec99d2bc9106510e00ff3@%3Ctorque-dev.db.apache.org%3E https://lists.apache.org/thread.html/rc2dbc4633a6eea1fcbce6831876cfa17b73759a98c65326d1896cb1a@%3Ctorque-dev.db.apache.org%3E https://lists.apache.org/thread.html/rc607bc52f3507b8b9c28c6a747c3122f51ac24afe80af2a670785b97@%3Cissues.geode.apache.org%3E https://lists.apache.org/thread.html/rcafc3a637d82bdc9a24036b2ddcad1e519dd0e6f848fcc3d606fd78f@%3Cdev.hive.apache.org%3E https://lists.apache.org/thread.html/rd01f5ff0164c468ec7abc96ff7646cea3cce6378da2e4aa29c6bcb95@%3Cgithub.arrow.apache.org%3E https://lists.apache.org/thread.html/rd2704306ec729ccac726e50339b8a8f079515cc29ccb77713b16e7c5@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/rd5d58088812cf8e677d99b07f73c654014c524c94e7fedbdee047604@%3Ctorque-dev.db.apache.org%3E https://lists.apache.org/thread.html/rd7e12d56d49d73e2b8549694974b07561b79b05455f7f781954231bf@%3Cdev.pig.apache.org%3E https://lists.apache.org/thread.html/re120f6b3d2f8222121080342c5801fdafca2f5188ceeb3b49c8a1d27@%3Cyarn-issues.hadoop.apache.org%3E https://lists.apache.org/thread.html/reebbd63c25bc1a946caa419cec2be78079f8449d1af48e52d47c9e85@%3Cissues.geode.apache.org%3E https://lists.apache.org/thread.html/rf00b688ffa620c990597f829ff85fdbba8bf73ee7bfb34783e1f0d4e@%3Cyarn-dev.hadoop.apache.org%3E https://lists.apache.org/thread.html/rf9f0fa84b8ae1a285f0210bafec6de2a9eba083007d04640b82aa625@%3Cissues.geode.apache.org%3E https://lists.apache.org/thread.html/rfc27e2727a20a574f39273e0432aa97486a332f9b3068f6ac1346594@%3Cdev.myfaces.apache.org%3E https://nvd.nist.gov/vuln/detail/CVE-2020-8908 https://security.netapp.com/advisory/ntap-20220210-0003 https://security.netapp.com/advisory/ntap-20220210-0003/ https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEGUAVA-1015415 https://www.cve.org/CVERecord?id=CVE-2020-8908 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
com.google.protobuf:protobuf-java	CVE-2021-22569	HIGH	3.12.2	3.16.1, 3.18.2, 3.19.2	http://www.openwall.com/lists/oss-security/2022/01/12/4 http://www.openwall.com/lists/oss-security/2022/01/12/7 https://access.redhat.com/security/cve/CVE-2021-22569 https://advisory.echohq.com/cve/CVE-2021-22569 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39330 https://cloud.google.com/support/bulletins#gcp-2022-001 https://github.com/advisories/GHSA-wrvw-hg22-4m67 https://github.com/protocolbuffers/protobuf https://github.com/protocolbuffers/protobuf/commit/b3093dce58bc9d3042f085666d83c8ef1f51fe7b https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-wrvw-hg22-4m67 https://lists.debian.org/debian-lts-announce/2023/04/msg00019.html https://nvd.nist.gov/vuln/detail/CVE-2021-22569 https://ubuntu.com/security/notices/USN-5945-1 https://www.cve.org/CVERecord?id=CVE-2021-22569 https://www.openwall.com/lists/oss-security/2022/01/12/4 https://www.oracle.com/security-alerts/cpuapr2022.html
com.google.protobuf:protobuf-java	CVE-2022-3509	HIGH	3.12.2	3.16.3, 3.19.6, 3.20.3, 3.21.7	https://access.redhat.com/security/cve/CVE-2022-3509 https://advisory.echohq.com/cve/CVE-2022-3509 https://github.com/advisories/GHSA-g5ww-5jh7-63cx https://github.com/protocolbuffers/protobuf/blob/v2.6.1/java/core/src/main/java/com/google/protobuf/MessageReflection.java https://github.com/protocolbuffers/protobuf/blob/v3.0.0/java/core/src/main/java/com/google/protobuf/MessageReflection.java https://github.com/protocolbuffers/protobuf/commit/a3888f53317a8018e7a439bac4abeb8f3425d5e9 https://github.com/protocolbuffers/protobuf/tree/main/java https://nvd.nist.gov/vuln/detail/CVE-2022-3509 https://www.cve.org/CVERecord?id=CVE-2022-3509
com.google.protobuf:protobuf-java	CVE-2022-3510	HIGH	3.12.2	3.16.3, 3.19.6, 3.20.3, 3.21.7	https://access.redhat.com/security/cve/CVE-2022-3510 https://advisory.echohq.com/cve/CVE-2022-3510 https://github.com/advisories/GHSA-4gg5-vx3j-xwc7 https://github.com/protocolbuffers/protobuf/commit/db7c17803320525722f45c1d26fc08bc41d1bf48 https://github.com/protocolbuffers/protobuf/tree/main/java https://nvd.nist.gov/vuln/detail/CVE-2022-3510 https://www.cve.org/CVERecord?id=CVE-2022-3510
com.google.protobuf:protobuf-java	CVE-2024-7254	HIGH	3.12.2	3.25.5, 4.27.5, 4.28.2	https://access.redhat.com/security/cve/CVE-2024-7254 https://advisory.echohq.com/cve/CVE-2024-7254 https://github.com/advisories/GHSA-735f-pc8j-v9w8 https://github.com/protocolbuffers/protobuf https://github.com/protocolbuffers/protobuf/commit/4728531c162f2f9e8c2ca1add713cfee2db6be3b https://github.com/protocolbuffers/protobuf/commit/850fcce9176e2c9070614dab53537760498c926b https://github.com/protocolbuffers/protobuf/commit/9a5f5fe752a20cbac2e722b06949ac985abdd534 https://github.com/protocolbuffers/protobuf/commit/ac9fb5b4c71b0dd80985b27684e265d1f03abf46 https://github.com/protocolbuffers/protobuf/commit/cc8b3483a5584b3301e3d43d17eb59704857ffaa https://github.com/protocolbuffers/protobuf/commit/d6c82fc55a76481c676f541a255571e8950bb8c3 https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-735f-pc8j-v9w8 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/google-protobuf/CVE-2024-7254.yml https://nvd.nist.gov/vuln/detail/CVE-2024-7254 https://security.netapp.com/advisory/ntap-20241213-0010 https://security.netapp.com/advisory/ntap-20241213-0010/ https://security.netapp.com/advisory/ntap-20250418-0006 https://security.netapp.com/advisory/ntap-20250418-0006/ https://ubuntu.com/security/notices/USN-7435-1 https://ubuntu.com/security/notices/USN-7629-1 https://ubuntu.com/security/notices/USN-7629-2 https://www.cve.org/CVERecord?id=CVE-2024-7254
com.google.protobuf:protobuf-java	CVE-2022-3171	MEDIUM	3.12.2	3.21.7, 3.20.3, 3.19.6, 3.16.3	https://access.redhat.com/security/cve/CVE-2022-3171 https://advisory.echohq.com/cve/CVE-2022-3171 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48771 https://github.com/advisories/GHSA-h4h5-3hr4-j3g2 https://github.com/protocolbuffers/protobuf https://github.com/protocolbuffers/protobuf/releases/tag/v21.7 https://github.com/protocolbuffers/protobuf/releases/tag/v3.16.3 https://github.com/protocolbuffers/protobuf/releases/tag/v3.19.6 https://github.com/protocolbuffers/protobuf/releases/tag/v3.20.3 https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-h4h5-3hr4-j3g2 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/google-protobuf/CVE-2022-3171.yml https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CBAUKJQL6O4TIWYBENORSY5P43TVB4M3 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CBAUKJQL6O4TIWYBENORSY5P43TVB4M3/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPCGUT3T5L6C3IDWUPSUO22QDCGQKTOP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPCGUT3T5L6C3IDWUPSUO22QDCGQKTOP/ https://nvd.nist.gov/vuln/detail/CVE-2022-3171 https://security.gentoo.org/glsa/202301-09 https://www.cve.org/CVERecord?id=CVE-2022-3171
com.h2database:h2	CVE-2021-42392	CRITICAL	1.4.197	2.0.206	https://access.redhat.com/security/cve/CVE-2021-42392 https://github.com/h2database/h2database https://github.com/h2database/h2database/releases/tag/version-2.0.206 https://github.com/h2database/h2database/security/advisories/GHSA-h376-j262-vhq6 https://jfrog.com/blog/the-jndi-strikes-back-unauthenticated-rce-in-h2-database-console https://jfrog.com/blog/the-jndi-strikes-back-unauthenticated-rce-in-h2-database-console/ https://lists.debian.org/debian-lts-announce/2022/02/msg00017.html https://nvd.nist.gov/vuln/detail/CVE-2021-42392 https://security.netapp.com/advisory/ntap-20220119-0001 https://security.netapp.com/advisory/ntap-20220119-0001/ https://ubuntu.com/security/notices/USN-5365-1 https://ubuntu.com/security/notices/USN-6834-1 https://www.cve.org/CVERecord?id=CVE-2021-42392 https://www.debian.org/security/2022/dsa-5076 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.secpod.com/blog/log4shell-critical-remote-code-execution-vulnerability-in-h2database-console https://www.secpod.com/blog/log4shell-critical-remote-code-execution-vulnerability-in-h2database-console/
com.h2database:h2	CVE-2022-23221	CRITICAL	1.4.197	2.1.210	http://packetstormsecurity.com/files/165676/H2-Database-Console-Remote-Code-Execution.html http://seclists.org/fulldisclosure/2022/Jan/39 https://access.redhat.com/security/cve/CVE-2022-23221 https://github.com/advisories/GHSA-45hx-wfhj-473x https://github.com/h2database/h2database https://github.com/h2database/h2database/releases/tag/version-2.1.210 https://github.com/h2database/h2database/security/advisories https://lists.debian.org/debian-lts-announce/2022/02/msg00017.html https://nvd.nist.gov/vuln/detail/CVE-2022-23221 https://security.netapp.com/advisory/ntap-20230818-0011 https://security.netapp.com/advisory/ntap-20230818-0011/ https://twitter.com/d0nkey_man/status/1483824727936450564 https://ubuntu.com/security/notices/USN-5365-1 https://ubuntu.com/security/notices/USN-6834-1 https://www.cve.org/CVERecord?id=CVE-2022-23221 https://www.debian.org/security/2022/dsa-5076 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujul2022.html
com.squareup.okhttp3:okhttp	CVE-2021-0341	HIGH	3.9.0	4.9.2	https://access.redhat.com/security/cve/CVE-2021-0341 https://advisory.echohq.com/cve/CVE-2021-0341 https://github.com/advisories/GHSA-3cqm-mf7h-prrj https://github.com/square/okhttp https://github.com/square/okhttp/commit/f574ea2f5259d9040f264ddeb582fb1ce563f10c https://github.com/square/okhttp/issues/6724 https://github.com/square/okhttp/pull/6741 https://nvd.nist.gov/vuln/detail/CVE-2021-0341 https://source.android.com/security/bulletin/2021-02-01 https://www.cve.org/CVERecord?id=CVE-2021-0341
com.squareup.okio:okio	CVE-2023-3635	MEDIUM	1.13.0	3.4.0, 1.17.6	https://access.redhat.com/security/cve/CVE-2023-3635 https://advisory.echohq.com/cve/CVE-2023-3635 https://github.com/advisories/GHSA-w33c-445m-f8w7 https://github.com/square/okio https://github.com/square/okio/blob/master/CHANGELOG.md#version-1176 https://github.com/square/okio/commit/81bce1a30af244550b0324597720e4799281da7b https://github.com/square/okio/commit/b4fa875dc24950680c386e4b1c593660ce4f7839 https://github.com/square/okio/pull/1280 https://github.com/square/okio/pull/1334 https://nvd.nist.gov/vuln/detail/CVE-2023-3635 https://research.jfrog.com/vulnerabilities/okio-gzip-source-unhandled-exception-dos-xray-523195 https://research.jfrog.com/vulnerabilities/okio-gzip-source-unhandled-exception-dos-xray-523195/ https://www.cve.org/CVERecord?id=CVE-2023-3635
com.sun.mail:jakarta.mail	CVE-2025-7962	MEDIUM	1.6.5	1.6.8, 2.0.2	http://www.openwall.com/lists/oss-security/2025/09/03/4 https://access.redhat.com/security/cve/CVE-2025-7962 https://advisory.echohq.com/cve/CVE-2025-7962 https://github.com/advisories/GHSA-9342-92gg-6v29 https://github.com/eclipse-ee4j/angus-mail https://github.com/eclipse-ee4j/angus-mail/commit/269099b652a0a5c2fa140f1296a18f0fbbea0d44 https://github.com/jakartaee/mail-api/issues/765 https://github.com/jakartaee/mail-api/pull/760 https://gitlab.eclipse.org/security/cve-assignement/-/issues/67 https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/290 https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/290#note_5320539 https://nvd.nist.gov/vuln/detail/CVE-2025-7962 https://www.cve.org/CVERecord?id=CVE-2025-7962
commons-beanutils:commons-beanutils	CVE-2025-48734	HIGH	1.9.4	1.11.0	http://www.openwall.com/lists/oss-security/2025/05/28/6 https://access.redhat.com/errata/RHSA-2025:9318 https://access.redhat.com/security/cve/CVE-2025-48734 https://advisory.echohq.com/cve/CVE-2025-48734 https://bugzilla.redhat.com/1767483 https://bugzilla.redhat.com/2368956 https://bugzilla.redhat.com/show_bug.cgi?id=1767483 https://bugzilla.redhat.com/show_bug.cgi?id=2368956 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10086 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48734 https://dlcdn.apache.org/commons/beanutils/RELEASE-NOTES.txt https://errata.almalinux.org/8/ALSA-2025-9318.html https://errata.rockylinux.org/RLSA-2025:9318 https://github.com/advisories/GHSA-wxr5-93ph-8wr9 https://github.com/apache/commons-beanutils https://github.com/apache/commons-beanutils/commit/28ad955a1613ed5885870cc7da52093c1ce739dc https://github.com/apache/commons-beanutils/commit/bd20740da25b69552ddef8523beec0837297eaf9 https://linux.oracle.com/cve/CVE-2025-48734.html https://linux.oracle.com/errata/ELSA-2025-9318.html https://lists.apache.org/thread/s0hb3jkfj5f3ryx6c57zqtfohb0of1g9 https://lists.debian.org/debian-lts-announce/2025/06/msg00027.html https://nvd.nist.gov/vuln/detail/CVE-2025-48734 https://ubuntu.com/security/notices/USN-8322-1 https://www.cve.org/CVERecord?id=CVE-2025-48734 https://www.openwall.com/lists/oss-security/2025/05/28/6
commons-beanutils:commons-beanutils	CVE-2025-48734	HIGH	1.9.4	1.11.0	http://www.openwall.com/lists/oss-security/2025/05/28/6 https://access.redhat.com/errata/RHSA-2025:9318 https://access.redhat.com/security/cve/CVE-2025-48734 https://advisory.echohq.com/cve/CVE-2025-48734 https://bugzilla.redhat.com/1767483 https://bugzilla.redhat.com/2368956 https://bugzilla.redhat.com/show_bug.cgi?id=1767483 https://bugzilla.redhat.com/show_bug.cgi?id=2368956 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10086 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48734 https://dlcdn.apache.org/commons/beanutils/RELEASE-NOTES.txt https://errata.almalinux.org/8/ALSA-2025-9318.html https://errata.rockylinux.org/RLSA-2025:9318 https://github.com/advisories/GHSA-wxr5-93ph-8wr9 https://github.com/apache/commons-beanutils https://github.com/apache/commons-beanutils/commit/28ad955a1613ed5885870cc7da52093c1ce739dc https://github.com/apache/commons-beanutils/commit/bd20740da25b69552ddef8523beec0837297eaf9 https://linux.oracle.com/cve/CVE-2025-48734.html https://linux.oracle.com/errata/ELSA-2025-9318.html https://lists.apache.org/thread/s0hb3jkfj5f3ryx6c57zqtfohb0of1g9 https://lists.debian.org/debian-lts-announce/2025/06/msg00027.html https://nvd.nist.gov/vuln/detail/CVE-2025-48734 https://ubuntu.com/security/notices/USN-8322-1 https://www.cve.org/CVERecord?id=CVE-2025-48734 https://www.openwall.com/lists/oss-security/2025/05/28/6
commons-io:commons-io	CVE-2024-47554	HIGH	2.5	2.14.0	http://www.openwall.com/lists/oss-security/2024/10/03/2 https://access.redhat.com/security/cve/CVE-2024-47554 https://advisory.echohq.com/cve/CVE-2024-47554 https://github.com/advisories/GHSA-78wr-2p64-hpwj https://github.com/apache/commons-io https://lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1 https://nvd.nist.gov/vuln/detail/CVE-2024-47554 https://security.netapp.com/advisory/ntap-20250131-0010 https://security.netapp.com/advisory/ntap-20250131-0010/ https://ubuntu.com/security/notices/USN-8191-1 https://www.cve.org/CVERecord?id=CVE-2024-47554
commons-io:commons-io	CVE-2021-29425	MEDIUM	2.5	2.7	https://access.redhat.com/security/cve/CVE-2021-29425 https://advisory.echohq.com/cve/CVE-2021-29425 https://arxiv.org/pdf/2306.05534.pdf https://github.com/advisories/GHSA-gwrp-pvrq-jmwv https://github.com/jensdietrich/xshady-release/tree/main/CVE-2021-29425 https://issues.apache.org/jira/browse/IO-556 https://lists.apache.org/thread.html/r01b4a1fcdf3311c936ce33d75a9398b6c255f00c1a2f312ac21effe1@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r0bfa8f7921abdfae788b1f076a12f73a92c93cc0a6e1083bce0027c5@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r0d73e2071d1f1afe1a15da14c5b6feb2cf17e3871168d5a3c8451436@%3Ccommits.pulsar.apache.org%3E https://lists.apache.org/thread.html/r1c2f4683c35696cf6f863e3c107e37ec41305b1930dd40c17260de71@%3Ccommits.pulsar.apache.org%3E https://lists.apache.org/thread.html/r20416f39ca7f7344e7d76fe4d7063bb1d91ad106926626e7e83fb346@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r2345b49dbffa8a5c3c589c082fe39228a2c1d14f11b96c523da701db@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe@%3Cusers.kafka.apache.org%3E https://lists.apache.org/thread.html/r27b1eedda37468256c4bb768fde1e8b79b37ec975cbbfd0d65a7ac34@%3Cdev.myfaces.apache.org%3E https://lists.apache.org/thread.html/r2bc986a070457daca457a54fe71ee09d2584c24dc262336ca32b6a19@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/r2df50af2641d38f432ef025cd2ba5858215cc0cf3fc10396a674ad2e@%3Cpluto-scm.portals.apache.org%3E https://lists.apache.org/thread.html/r345330b7858304938b7b8029d02537a116d75265a598c98fa333504a@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/r4050f9f6b42ebfa47a98cbdee4aabed4bb5fb8093db7dbb88faceba2@%3Ccommits.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r462db908acc1e37c455e11b1a25992b81efd18e641e7e0ceb1b6e046@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r477c285126ada5c3b47946bb702cb222ac4e7fd3100c8549bdd6d3b2@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r47ab6f68cbba8e730f42c4ea752f3a44eb95fb09064070f2476bb401@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/r5149f78be265be69d34eacb4e4b0fc7c9c697bcdfa91a1c1658d717b@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r523a6ffad58f71c4f3761e3cee72df878e48cdc89ebdce933be1475c@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/r808be7d93b17a7055c1981a8453ae5f0d0fce5855407793c5d0ffffa@%3Cuser.commons.apache.org%3E https://lists.apache.org/thread.html/r8569a41d565ca880a4dee0e645dad1cd17ab4a92e68055ad9ebb7375@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/r86528f4b7d222aed7891e7ac03d69a0db2a2dfa17b86ac3470d7f374@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r873d5ddafc0a68fd999725e559776dc4971d1ab39c0f5cc81bd9bc04@%3Ccommits.pulsar.apache.org%3E https://lists.apache.org/thread.html/r8bfc7235e6b39d90e6f446325a5a44c3e9e50da18860fdabcee23e29@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r8efcbabde973ea72f5e0933adc48ef1425db5cde850bf641b3993f31@%3Cdev.commons.apache.org%3E https://lists.apache.org/thread.html/r92ea904f4bae190b03bd42a4355ce3c2fbe8f36ab673e03f6ca3f9fa@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/ra8ef65aedc086d2d3d21492b4c08ae0eb8a3a42cc52e29ba1bc009d8@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/raa053846cae9d497606027816ae87b4e002b2e0eb66cb0dee710e1f5@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/rad4ae544747df32ccd58fff5a86cd556640396aeb161aa71dd3d192a@%3Cuser.commons.apache.org%3E https://lists.apache.org/thread.html/rbebd3e19651baa7a4a5503a9901c95989df9d40602c8e35cb05d3eb5@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/rc10fa20ef4d13cbf6ebe0b06b5edb95466a1424a9b7673074ed03260@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/rc2dd3204260e9227a67253ef68b6f1599446005bfa0e1ddce4573a80@%3Cpluto-dev.portals.apache.org%3E https://lists.apache.org/thread.html/rc359823b5500e9a9a2572678ddb8e01d3505a7ffcadfa8d13b8780ab@%3Cuser.commons.apache.org%3E https://lists.apache.org/thread.html/rc5f3df5316c5237b78a3dff5ab95b311ad08e61d418cd992ca7e34ae@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/rc65f9bc679feffe4589ea0981ee98bc0af9139470f077a91580eeee0@%3Cpluto-dev.portals.apache.org%3E https://lists.apache.org/thread.html/rca71a10ca533eb9bfac2d590533f02e6fb9064d3b6aa3ec90fdc4f51@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/rd09d4ab3e32e4b3a480e2ff6ff118712981ca82e817f28f2a85652a6@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/re41e9967bee064e7369411c28f0f5b2ad28b8334907c9c6208017279@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/red3aea910403d8620c73e1c7b9c9b145798d0469eb3298a7be7891af@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/rfa2f08b7c0caf80ca9f4a18bd875918fdd4e894e2ea47942a4589b9c@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/rfcd2c649c205f12b72dde044f905903460669a220a2eb7e12652d19d@%3Cdev.zookeeper.apache.org%3E https://lists.apache.org/thread.html/rfd01af05babc95b8949e6d8ea78d9834699e1b06981040dde419a330@%3Cdev.commons.apache.org%3E https://lists.debian.org/debian-lts-announce/2021/08/msg00016.html https://nvd.nist.gov/vuln/detail/CVE-2021-29425 https://security.netapp.com/advisory/ntap-20220210-0004 https://security.netapp.com/advisory/ntap-20220210-0004/ https://ubuntu.com/security/notices/USN-5095-1 https://www.cve.org/CVERecord?id=CVE-2021-29425 https://www.openwall.com/lists/oss-security/2021/04/12/1 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
commons-io:commons-io	CVE-2024-47554	HIGH	2.6	2.14.0	http://www.openwall.com/lists/oss-security/2024/10/03/2 https://access.redhat.com/security/cve/CVE-2024-47554 https://advisory.echohq.com/cve/CVE-2024-47554 https://github.com/advisories/GHSA-78wr-2p64-hpwj https://github.com/apache/commons-io https://lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1 https://nvd.nist.gov/vuln/detail/CVE-2024-47554 https://security.netapp.com/advisory/ntap-20250131-0010 https://security.netapp.com/advisory/ntap-20250131-0010/ https://ubuntu.com/security/notices/USN-8191-1 https://www.cve.org/CVERecord?id=CVE-2024-47554
commons-io:commons-io	CVE-2021-29425	MEDIUM	2.6	2.7	https://access.redhat.com/security/cve/CVE-2021-29425 https://advisory.echohq.com/cve/CVE-2021-29425 https://arxiv.org/pdf/2306.05534.pdf https://github.com/advisories/GHSA-gwrp-pvrq-jmwv https://github.com/jensdietrich/xshady-release/tree/main/CVE-2021-29425 https://issues.apache.org/jira/browse/IO-556 https://lists.apache.org/thread.html/r01b4a1fcdf3311c936ce33d75a9398b6c255f00c1a2f312ac21effe1@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r0bfa8f7921abdfae788b1f076a12f73a92c93cc0a6e1083bce0027c5@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r0d73e2071d1f1afe1a15da14c5b6feb2cf17e3871168d5a3c8451436@%3Ccommits.pulsar.apache.org%3E https://lists.apache.org/thread.html/r1c2f4683c35696cf6f863e3c107e37ec41305b1930dd40c17260de71@%3Ccommits.pulsar.apache.org%3E https://lists.apache.org/thread.html/r20416f39ca7f7344e7d76fe4d7063bb1d91ad106926626e7e83fb346@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r2345b49dbffa8a5c3c589c082fe39228a2c1d14f11b96c523da701db@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe@%3Cusers.kafka.apache.org%3E https://lists.apache.org/thread.html/r27b1eedda37468256c4bb768fde1e8b79b37ec975cbbfd0d65a7ac34@%3Cdev.myfaces.apache.org%3E https://lists.apache.org/thread.html/r2bc986a070457daca457a54fe71ee09d2584c24dc262336ca32b6a19@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/r2df50af2641d38f432ef025cd2ba5858215cc0cf3fc10396a674ad2e@%3Cpluto-scm.portals.apache.org%3E https://lists.apache.org/thread.html/r345330b7858304938b7b8029d02537a116d75265a598c98fa333504a@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/r4050f9f6b42ebfa47a98cbdee4aabed4bb5fb8093db7dbb88faceba2@%3Ccommits.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r462db908acc1e37c455e11b1a25992b81efd18e641e7e0ceb1b6e046@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r477c285126ada5c3b47946bb702cb222ac4e7fd3100c8549bdd6d3b2@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r47ab6f68cbba8e730f42c4ea752f3a44eb95fb09064070f2476bb401@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/r5149f78be265be69d34eacb4e4b0fc7c9c697bcdfa91a1c1658d717b@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r523a6ffad58f71c4f3761e3cee72df878e48cdc89ebdce933be1475c@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/r808be7d93b17a7055c1981a8453ae5f0d0fce5855407793c5d0ffffa@%3Cuser.commons.apache.org%3E https://lists.apache.org/thread.html/r8569a41d565ca880a4dee0e645dad1cd17ab4a92e68055ad9ebb7375@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/r86528f4b7d222aed7891e7ac03d69a0db2a2dfa17b86ac3470d7f374@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r873d5ddafc0a68fd999725e559776dc4971d1ab39c0f5cc81bd9bc04@%3Ccommits.pulsar.apache.org%3E https://lists.apache.org/thread.html/r8bfc7235e6b39d90e6f446325a5a44c3e9e50da18860fdabcee23e29@%3Cissues.zookeeper.apache.org%3E https://lists.apache.org/thread.html/r8efcbabde973ea72f5e0933adc48ef1425db5cde850bf641b3993f31@%3Cdev.commons.apache.org%3E https://lists.apache.org/thread.html/r92ea904f4bae190b03bd42a4355ce3c2fbe8f36ab673e03f6ca3f9fa@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/ra8ef65aedc086d2d3d21492b4c08ae0eb8a3a42cc52e29ba1bc009d8@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/raa053846cae9d497606027816ae87b4e002b2e0eb66cb0dee710e1f5@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/rad4ae544747df32ccd58fff5a86cd556640396aeb161aa71dd3d192a@%3Cuser.commons.apache.org%3E https://lists.apache.org/thread.html/rbebd3e19651baa7a4a5503a9901c95989df9d40602c8e35cb05d3eb5@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/rc10fa20ef4d13cbf6ebe0b06b5edb95466a1424a9b7673074ed03260@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/rc2dd3204260e9227a67253ef68b6f1599446005bfa0e1ddce4573a80@%3Cpluto-dev.portals.apache.org%3E https://lists.apache.org/thread.html/rc359823b5500e9a9a2572678ddb8e01d3505a7ffcadfa8d13b8780ab@%3Cuser.commons.apache.org%3E https://lists.apache.org/thread.html/rc5f3df5316c5237b78a3dff5ab95b311ad08e61d418cd992ca7e34ae@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/rc65f9bc679feffe4589ea0981ee98bc0af9139470f077a91580eeee0@%3Cpluto-dev.portals.apache.org%3E https://lists.apache.org/thread.html/rca71a10ca533eb9bfac2d590533f02e6fb9064d3b6aa3ec90fdc4f51@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/rd09d4ab3e32e4b3a480e2ff6ff118712981ca82e817f28f2a85652a6@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/re41e9967bee064e7369411c28f0f5b2ad28b8334907c9c6208017279@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/red3aea910403d8620c73e1c7b9c9b145798d0469eb3298a7be7891af@%3Cnotifications.zookeeper.apache.org%3E https://lists.apache.org/thread.html/rfa2f08b7c0caf80ca9f4a18bd875918fdd4e894e2ea47942a4589b9c@%3Cdev.creadur.apache.org%3E https://lists.apache.org/thread.html/rfcd2c649c205f12b72dde044f905903460669a220a2eb7e12652d19d@%3Cdev.zookeeper.apache.org%3E https://lists.apache.org/thread.html/rfd01af05babc95b8949e6d8ea78d9834699e1b06981040dde419a330@%3Cdev.commons.apache.org%3E https://lists.debian.org/debian-lts-announce/2021/08/msg00016.html https://nvd.nist.gov/vuln/detail/CVE-2021-29425 https://security.netapp.com/advisory/ntap-20220210-0004 https://security.netapp.com/advisory/ntap-20220210-0004/ https://ubuntu.com/security/notices/USN-5095-1 https://www.cve.org/CVERecord?id=CVE-2021-29425 https://www.openwall.com/lists/oss-security/2021/04/12/1 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpuoct2021.html
commons-lang:commons-lang	CVE-2025-48924	MEDIUM	2.6		http://www.openwall.com/lists/oss-security/2025/07/11/1 https://access.redhat.com/security/cve/CVE-2025-48924 https://advisory.echohq.com/cve/CVE-2025-48924 https://github.com/apache/commons-lang https://github.com/apache/commons-lang/commit/b424803abdb2bec818e4fbcb251ce031c22aca53 https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1 https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html https://nvd.nist.gov/vuln/detail/CVE-2025-48924 https://ubuntu.com/security/notices/USN-8364-1 https://www.cve.org/CVERecord?id=CVE-2025-48924 https://www.openwall.com/lists/oss-security/2025/07/11/1
io.undertow:undertow-core	CVE-2022-4492	CRITICAL	2.2.2.Final	2.3.5.Final, 2.2.24.Final	https://access.redhat.com/security/cve/CVE-2022-4492 https://bugzilla.redhat.com/show_bug.cgi?id=2153260 https://github.com/undertow-io/undertow/blob/master/core/src/main/java/io/undertow/security/impl/ClientCertAuthenticationMechanism.java https://github.com/undertow-io/undertow/pull/1447 https://github.com/undertow-io/undertow/pull/1447/commits/e5071e52b72529a14d3ec436ae7102cea5d918c4 https://github.com/undertow-io/undertow/pull/1457 https://github.com/undertow-io/undertow/pull/1457/commits/a4d3b167126a803cc4f7fb740dd9a6ecabf59342 https://issues.redhat.com/browse/MTA-93 https://issues.redhat.com/browse/UNDERTOW-2212 https://nvd.nist.gov/vuln/detail/CVE-2022-4492 https://security.netapp.com/advisory/ntap-20230324-0002 https://security.netapp.com/advisory/ntap-20230324-0002/ https://www.cve.org/CVERecord?id=CVE-2022-4492
io.undertow:undertow-core	CVE-2022-4492	CRITICAL	2.2.2.Final	2.3.5.Final, 2.2.24.Final	https://access.redhat.com/security/cve/CVE-2022-4492 https://bugzilla.redhat.com/show_bug.cgi?id=2153260 https://github.com/undertow-io/undertow/blob/master/core/src/main/java/io/undertow/security/impl/ClientCertAuthenticationMechanism.java https://github.com/undertow-io/undertow/pull/1447 https://github.com/undertow-io/undertow/pull/1447/commits/e5071e52b72529a14d3ec436ae7102cea5d918c4 https://github.com/undertow-io/undertow/pull/1457 https://github.com/undertow-io/undertow/pull/1457/commits/a4d3b167126a803cc4f7fb740dd9a6ecabf59342 https://issues.redhat.com/browse/MTA-93 https://issues.redhat.com/browse/UNDERTOW-2212 https://nvd.nist.gov/vuln/detail/CVE-2022-4492 https://security.netapp.com/advisory/ntap-20230324-0002 https://security.netapp.com/advisory/ntap-20230324-0002/ https://www.cve.org/CVERecord?id=CVE-2022-4492
io.undertow:undertow-core	CVE-2025-12543	CRITICAL	2.2.2.Final	2.3.21.Final, 2.2.39.Final	https://access.redhat.com/errata/RHSA-2026:0383 https://access.redhat.com/errata/RHSA-2026:0384 https://access.redhat.com/errata/RHSA-2026:0386 https://access.redhat.com/errata/RHSA-2026:33371 https://access.redhat.com/errata/RHSA-2026:33372 https://access.redhat.com/errata/RHSA-2026:3889 https://access.redhat.com/errata/RHSA-2026:3890 https://access.redhat.com/errata/RHSA-2026:3891 https://access.redhat.com/errata/RHSA-2026:3892 https://access.redhat.com/errata/RHSA-2026:4915 https://access.redhat.com/errata/RHSA-2026:4916 https://access.redhat.com/errata/RHSA-2026:4917 https://access.redhat.com/errata/RHSA-2026:4924 https://access.redhat.com/errata/RHSA-2026:76128 https://access.redhat.com/errata/RHSA-2026:76129 https://access.redhat.com/errata/RHSA-2026:76130 https://access.redhat.com/errata/RHSA-2026:76132 https://access.redhat.com/errata/RHSA-2026:76134 https://access.redhat.com/security/cve/CVE-2025-12543 https://bugzilla.redhat.com/show_bug.cgi?id=2408784 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/pull/1857 https://github.com/undertow-io/undertow/pull/1857%20%28main%29 https://github.com/undertow-io/undertow/pull/1860 https://github.com/undertow-io/undertow/pull/1860%20%282.3.x%29 https://github.com/undertow-io/undertow/pull/1882%20%282.2.x%29 https://github.com/undertow-io/undertow/pull/1894%20%282.4.x%29 https://github.com/undertow-io/undertow/releases/tag/2.2.39.Final https://github.com/undertow-io/undertow/releases/tag/2.3.21.Final https://issues.redhat.com/browse/UNDERTOW-2656 https://nvd.nist.gov/vuln/detail/CVE-2025-12543 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-12543.json https://ubuntu.com/security/notices/USN-8144-1 https://www.cve.org/CVERecord?id=CVE-2025-12543
io.undertow:undertow-core	CVE-2025-12543	CRITICAL	2.2.2.Final	2.3.21.Final, 2.2.39.Final	https://access.redhat.com/errata/RHSA-2026:0383 https://access.redhat.com/errata/RHSA-2026:0384 https://access.redhat.com/errata/RHSA-2026:0386 https://access.redhat.com/errata/RHSA-2026:33371 https://access.redhat.com/errata/RHSA-2026:33372 https://access.redhat.com/errata/RHSA-2026:3889 https://access.redhat.com/errata/RHSA-2026:3890 https://access.redhat.com/errata/RHSA-2026:3891 https://access.redhat.com/errata/RHSA-2026:3892 https://access.redhat.com/errata/RHSA-2026:4915 https://access.redhat.com/errata/RHSA-2026:4916 https://access.redhat.com/errata/RHSA-2026:4917 https://access.redhat.com/errata/RHSA-2026:4924 https://access.redhat.com/errata/RHSA-2026:76128 https://access.redhat.com/errata/RHSA-2026:76129 https://access.redhat.com/errata/RHSA-2026:76130 https://access.redhat.com/errata/RHSA-2026:76132 https://access.redhat.com/errata/RHSA-2026:76134 https://access.redhat.com/security/cve/CVE-2025-12543 https://bugzilla.redhat.com/show_bug.cgi?id=2408784 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/pull/1857 https://github.com/undertow-io/undertow/pull/1857%20%28main%29 https://github.com/undertow-io/undertow/pull/1860 https://github.com/undertow-io/undertow/pull/1860%20%282.3.x%29 https://github.com/undertow-io/undertow/pull/1882%20%282.2.x%29 https://github.com/undertow-io/undertow/pull/1894%20%282.4.x%29 https://github.com/undertow-io/undertow/releases/tag/2.2.39.Final https://github.com/undertow-io/undertow/releases/tag/2.3.21.Final https://issues.redhat.com/browse/UNDERTOW-2656 https://nvd.nist.gov/vuln/detail/CVE-2025-12543 https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-12543.json https://ubuntu.com/security/notices/USN-8144-1 https://www.cve.org/CVERecord?id=CVE-2025-12543
io.undertow:undertow-core	CVE-2021-3629	HIGH	2.2.2.Final	2.0.40.Final, 2.2.11.Final	https://access.redhat.com/security/cve/CVE-2021-3629 https://bugzilla.redhat.com/show_bug.cgi?id=1977362 https://github.com/undertow-io/undertow https://nvd.nist.gov/vuln/detail/CVE-2021-3629 https://security.netapp.com/advisory/ntap-20220729-0008 https://security.netapp.com/advisory/ntap-20220729-0008/ https://www.cve.org/CVERecord?id=CVE-2021-3629
io.undertow:undertow-core	CVE-2021-3629	HIGH	2.2.2.Final	2.0.40.Final, 2.2.11.Final	https://access.redhat.com/security/cve/CVE-2021-3629 https://bugzilla.redhat.com/show_bug.cgi?id=1977362 https://github.com/undertow-io/undertow https://nvd.nist.gov/vuln/detail/CVE-2021-3629 https://security.netapp.com/advisory/ntap-20220729-0008 https://security.netapp.com/advisory/ntap-20220729-0008/ https://www.cve.org/CVERecord?id=CVE-2021-3629
io.undertow:undertow-core	CVE-2021-3690	HIGH	2.2.2.Final	2.0.40, 2.2.10	https://access.redhat.com/security/cve/CVE-2021-3690 https://access.redhat.com/security/cve/cve-2021-3690#cve-cvss-v3 https://bugzilla.redhat.com/show_bug.cgi?id=1991299 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/commit/c7e84a0b7efced38506d7d1dfea5902366973877 https://issues.redhat.com/browse/UNDERTOW-1935 https://nvd.nist.gov/vuln/detail/CVE-2021-3690 https://www.cve.org/CVERecord?id=CVE-2021-3690 https://www.mend.io/vulnerability-database/CVE-2021-3690
io.undertow:undertow-core	CVE-2021-3690	HIGH	2.2.2.Final	2.0.40, 2.2.10	https://access.redhat.com/security/cve/CVE-2021-3690 https://access.redhat.com/security/cve/cve-2021-3690#cve-cvss-v3 https://bugzilla.redhat.com/show_bug.cgi?id=1991299 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/commit/c7e84a0b7efced38506d7d1dfea5902366973877 https://issues.redhat.com/browse/UNDERTOW-1935 https://nvd.nist.gov/vuln/detail/CVE-2021-3690 https://www.cve.org/CVERecord?id=CVE-2021-3690 https://www.mend.io/vulnerability-database/CVE-2021-3690
io.undertow:undertow-core	CVE-2021-3859	HIGH	2.2.2.Final	2.2.15	https://access.redhat.com/security/cve/CVE-2021-3859 https://access.redhat.com/security/cve/cve-2021-3859 https://bugzilla.redhat.com/show_bug.cgi?id=2010378 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/commit/db0f5be43f8e2a4b88fbedd2eb6d5a95a29ceaa8 https://github.com/undertow-io/undertow/commit/e43f0ada3f4da6e8579e0020cec3cb1a81e487c2 https://github.com/undertow-io/undertow/pull/1296 https://issues.redhat.com/browse/UNDERTOW-1979 https://nvd.nist.gov/vuln/detail/CVE-2021-3859 https://security.netapp.com/advisory/ntap-20221201-0004 https://security.netapp.com/advisory/ntap-20221201-0004/ https://www.cve.org/CVERecord?id=CVE-2021-3859
io.undertow:undertow-core	CVE-2021-3859	HIGH	2.2.2.Final	2.2.15	https://access.redhat.com/security/cve/CVE-2021-3859 https://access.redhat.com/security/cve/cve-2021-3859 https://bugzilla.redhat.com/show_bug.cgi?id=2010378 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/commit/db0f5be43f8e2a4b88fbedd2eb6d5a95a29ceaa8 https://github.com/undertow-io/undertow/commit/e43f0ada3f4da6e8579e0020cec3cb1a81e487c2 https://github.com/undertow-io/undertow/pull/1296 https://issues.redhat.com/browse/UNDERTOW-1979 https://nvd.nist.gov/vuln/detail/CVE-2021-3859 https://security.netapp.com/advisory/ntap-20221201-0004 https://security.netapp.com/advisory/ntap-20221201-0004/ https://www.cve.org/CVERecord?id=CVE-2021-3859
io.undertow:undertow-core	CVE-2022-2053	HIGH	2.2.2.Final	2.2.19.Final, 2.3.0.Alpha2	https://access.redhat.com/security/cve/CVE-2022-2053 https://bugzilla.redhat.com/show_bug.cgi?id=2095862&comment#0 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/pull/1350 https://issues.redhat.com/browse/UNDERTOW-2133 https://nvd.nist.gov/vuln/detail/CVE-2022-2053 https://www.cve.org/CVERecord?id=CVE-2022-2053
io.undertow:undertow-core	CVE-2022-2053	HIGH	2.2.2.Final	2.2.19.Final, 2.3.0.Alpha2	https://access.redhat.com/security/cve/CVE-2022-2053 https://bugzilla.redhat.com/show_bug.cgi?id=2095862&comment#0 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/pull/1350 https://issues.redhat.com/browse/UNDERTOW-2133 https://nvd.nist.gov/vuln/detail/CVE-2022-2053 https://www.cve.org/CVERecord?id=CVE-2022-2053
io.undertow:undertow-core	CVE-2023-1108	HIGH	2.2.2.Final	2.3.5.Final, 2.2.24.Final	https://access.redhat.com/errata/RHSA-2023:1184 https://access.redhat.com/errata/RHSA-2023:1185 https://access.redhat.com/errata/RHSA-2023:1512 https://access.redhat.com/errata/RHSA-2023:1513 https://access.redhat.com/errata/RHSA-2023:1514 https://access.redhat.com/errata/RHSA-2023:1516 https://access.redhat.com/errata/RHSA-2023:2135 https://access.redhat.com/errata/RHSA-2023:3883 https://access.redhat.com/errata/RHSA-2023:3884 https://access.redhat.com/errata/RHSA-2023:3885 https://access.redhat.com/errata/RHSA-2023:3888 https://access.redhat.com/errata/RHSA-2023:3892 https://access.redhat.com/errata/RHSA-2023:3954 https://access.redhat.com/errata/RHSA-2023:4612 https://access.redhat.com/security/cve/CVE-2023-1108 https://bugzilla.redhat.com/show_bug.cgi?id=2174246 https://github.com/advisories/GHSA-m4mm-pg93-fv78 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/commit/1302c8cf4476936802504efe0d36c58dcd954f78 https://github.com/undertow-io/undertow/commit/1b763064a41a30583b5df9a118898513007a70be https://github.com/undertow-io/undertow/commit/ccc053b55f5de9872bc1a4999fd6aa85fc5e146d https://github.com/undertow-io/undertow/pull/1457 https://nvd.nist.gov/vuln/detail/CVE-2023-1108 https://security.netapp.com/advisory/ntap-20231020-0002 https://security.netapp.com/advisory/ntap-20231020-0002/ https://www.cve.org/CVERecord?id=CVE-2023-1108
io.undertow:undertow-core	CVE-2023-1108	HIGH	2.2.2.Final	2.3.5.Final, 2.2.24.Final	https://access.redhat.com/errata/RHSA-2023:1184 https://access.redhat.com/errata/RHSA-2023:1185 https://access.redhat.com/errata/RHSA-2023:1512 https://access.redhat.com/errata/RHSA-2023:1513 https://access.redhat.com/errata/RHSA-2023:1514 https://access.redhat.com/errata/RHSA-2023:1516 https://access.redhat.com/errata/RHSA-2023:2135 https://access.redhat.com/errata/RHSA-2023:3883 https://access.redhat.com/errata/RHSA-2023:3884 https://access.redhat.com/errata/RHSA-2023:3885 https://access.redhat.com/errata/RHSA-2023:3888 https://access.redhat.com/errata/RHSA-2023:3892 https://access.redhat.com/errata/RHSA-2023:3954 https://access.redhat.com/errata/RHSA-2023:4612 https://access.redhat.com/security/cve/CVE-2023-1108 https://bugzilla.redhat.com/show_bug.cgi?id=2174246 https://github.com/advisories/GHSA-m4mm-pg93-fv78 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/commit/1302c8cf4476936802504efe0d36c58dcd954f78 https://github.com/undertow-io/undertow/commit/1b763064a41a30583b5df9a118898513007a70be https://github.com/undertow-io/undertow/commit/ccc053b55f5de9872bc1a4999fd6aa85fc5e146d https://github.com/undertow-io/undertow/pull/1457 https://nvd.nist.gov/vuln/detail/CVE-2023-1108 https://security.netapp.com/advisory/ntap-20231020-0002 https://security.netapp.com/advisory/ntap-20231020-0002/ https://www.cve.org/CVERecord?id=CVE-2023-1108
io.undertow:undertow-core	CVE-2023-4639	HIGH	2.2.2.Final	2.3.11.Final, 2.2.30.Final	https://access.redhat.com/errata/RHSA-2024:1674 https://access.redhat.com/errata/RHSA-2024:1675 https://access.redhat.com/errata/RHSA-2024:1676 https://access.redhat.com/errata/RHSA-2024:1677 https://access.redhat.com/errata/RHSA-2024:2763 https://access.redhat.com/errata/RHSA-2024:2764 https://access.redhat.com/errata/RHSA-2024:3919 https://access.redhat.com/security/cve/CVE-2023-4639 https://bugzilla.redhat.com/show_bug.cgi?id=2166022 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/commit/1f93a979d2ac264798e5779b5b7172dfafe0066f https://nvd.nist.gov/vuln/detail/CVE-2023-4639 https://security.netapp.com/advisory/ntap-20250207-0001 https://security.netapp.com/advisory/ntap-20250207-0001/ https://www.cve.org/CVERecord?id=CVE-2023-4639
io.undertow:undertow-core	CVE-2023-4639	HIGH	2.2.2.Final	2.3.11.Final, 2.2.30.Final	https://access.redhat.com/errata/RHSA-2024:1674 https://access.redhat.com/errata/RHSA-2024:1675 https://access.redhat.com/errata/RHSA-2024:1676 https://access.redhat.com/errata/RHSA-2024:1677 https://access.redhat.com/errata/RHSA-2024:2763 https://access.redhat.com/errata/RHSA-2024:2764 https://access.redhat.com/errata/RHSA-2024:3919 https://access.redhat.com/security/cve/CVE-2023-4639 https://bugzilla.redhat.com/show_bug.cgi?id=2166022 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/commit/1f93a979d2ac264798e5779b5b7172dfafe0066f https://nvd.nist.gov/vuln/detail/CVE-2023-4639 https://security.netapp.com/advisory/ntap-20250207-0001 https://security.netapp.com/advisory/ntap-20250207-0001/ https://www.cve.org/CVERecord?id=CVE-2023-4639
io.undertow:undertow-core	CVE-2024-1635	HIGH	2.2.2.Final	2.3.12.Final, 2.2.31.Final	https://access.redhat.com/errata/RHSA-2024:1674 https://access.redhat.com/errata/RHSA-2024:1675 https://access.redhat.com/errata/RHSA-2024:1676 https://access.redhat.com/errata/RHSA-2024:1677 https://access.redhat.com/errata/RHSA-2024:1860 https://access.redhat.com/errata/RHSA-2024:1861 https://access.redhat.com/errata/RHSA-2024:1862 https://access.redhat.com/errata/RHSA-2024:1864 https://access.redhat.com/errata/RHSA-2024:1866 https://access.redhat.com/errata/RHSA-2024:3354 https://access.redhat.com/errata/RHSA-2024:4884 https://access.redhat.com/errata/RHSA-2025:4226 https://access.redhat.com/errata/RHSA-2025:9583 https://access.redhat.com/security/cve/CVE-2024-1635 https://bugzilla.redhat.com/show_bug.cgi?id=2264928 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/commit/3cdb104e225f34547ce9fd6eb8799eb68e040f19 https://github.com/undertow-io/undertow/commit/7d388c5aae9b82afb63f24e3b6a2044838dfb4de https://nvd.nist.gov/vuln/detail/CVE-2024-1635 https://security.netapp.com/advisory/ntap-20240322-0007 https://security.netapp.com/advisory/ntap-20240322-0007/ https://www.cve.org/CVERecord?id=CVE-2024-1635
io.undertow:undertow-core	CVE-2024-1635	HIGH	2.2.2.Final	2.3.12.Final, 2.2.31.Final	https://access.redhat.com/errata/RHSA-2024:1674 https://access.redhat.com/errata/RHSA-2024:1675 https://access.redhat.com/errata/RHSA-2024:1676 https://access.redhat.com/errata/RHSA-2024:1677 https://access.redhat.com/errata/RHSA-2024:1860 https://access.redhat.com/errata/RHSA-2024:1861 https://access.redhat.com/errata/RHSA-2024:1862 https://access.redhat.com/errata/RHSA-2024:1864 https://access.redhat.com/errata/RHSA-2024:1866 https://access.redhat.com/errata/RHSA-2024:3354 https://access.redhat.com/errata/RHSA-2024:4884 https://access.redhat.com/errata/RHSA-2025:4226 https://access.redhat.com/errata/RHSA-2025:9583 https://access.redhat.com/security/cve/CVE-2024-1635 https://bugzilla.redhat.com/show_bug.cgi?id=2264928 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/commit/3cdb104e225f34547ce9fd6eb8799eb68e040f19 https://github.com/undertow-io/undertow/commit/7d388c5aae9b82afb63f24e3b6a2044838dfb4de https://nvd.nist.gov/vuln/detail/CVE-2024-1635 https://security.netapp.com/advisory/ntap-20240322-0007 https://security.netapp.com/advisory/ntap-20240322-0007/ https://www.cve.org/CVERecord?id=CVE-2024-1635
io.undertow:undertow-core	CVE-2024-3884	HIGH	2.2.2.Final	2.2.39.Final, 2.4.0.Beta1, 2.3.21.Final	https://access.redhat.com/errata/RHSA-2025:22773 https://access.redhat.com/errata/RHSA-2025:22775 https://access.redhat.com/errata/RHSA-2025:22777 https://access.redhat.com/errata/RHSA-2025:3990 https://access.redhat.com/errata/RHSA-2025:3992 https://access.redhat.com/errata/RHSA-2026:0383 https://access.redhat.com/errata/RHSA-2026:0384 https://access.redhat.com/errata/RHSA-2026:0386 https://access.redhat.com/errata/RHSA-2026:3889 https://access.redhat.com/errata/RHSA-2026:3891 https://access.redhat.com/errata/RHSA-2026:3892 https://access.redhat.com/errata/RHSA-2026:4915 https://access.redhat.com/errata/RHSA-2026:4916 https://access.redhat.com/errata/RHSA-2026:4917 https://access.redhat.com/errata/RHSA-2026:4924 https://access.redhat.com/errata/RHSA-2026:6011 https://access.redhat.com/errata/RHSA-2026:6012 https://access.redhat.com/security/cve/CVE-2024-3884 https://bugzilla.redhat.com/show_bug.cgi?id=2275287 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/commit/cb854c779b9e2368c3c274ebd7217c8e75d505be https://github.com/undertow-io/undertow/pull/1856 https://github.com/undertow-io/undertow/pull/1860 https://github.com/undertow-io/undertow/pull/1882 https://github.com/undertow-io/undertow/pull/1894 https://github.com/undertow-io/undertow/releases/tag/2.2.39.Final https://github.com/undertow-io/undertow/releases/tag/2.3.21.Final https://github.com/undertow-io/undertow/releases/tag/2.4.0.Beta1 https://nvd.nist.gov/vuln/detail/CVE-2024-3884 https://www.cve.org/CVERecord?id=CVE-2024-3884
io.undertow:undertow-core	CVE-2024-3884	HIGH	2.2.2.Final	2.2.39.Final, 2.4.0.Beta1, 2.3.21.Final	https://access.redhat.com/errata/RHSA-2025:22773 https://access.redhat.com/errata/RHSA-2025:22775 https://access.redhat.com/errata/RHSA-2025:22777 https://access.redhat.com/errata/RHSA-2025:3990 https://access.redhat.com/errata/RHSA-2025:3992 https://access.redhat.com/errata/RHSA-2026:0383 https://access.redhat.com/errata/RHSA-2026:0384 https://access.redhat.com/errata/RHSA-2026:0386 https://access.redhat.com/errata/RHSA-2026:3889 https://access.redhat.com/errata/RHSA-2026:3891 https://access.redhat.com/errata/RHSA-2026:3892 https://access.redhat.com/errata/RHSA-2026:4915 https://access.redhat.com/errata/RHSA-2026:4916 https://access.redhat.com/errata/RHSA-2026:4917 https://access.redhat.com/errata/RHSA-2026:4924 https://access.redhat.com/errata/RHSA-2026:6011 https://access.redhat.com/errata/RHSA-2026:6012 https://access.redhat.com/security/cve/CVE-2024-3884 https://bugzilla.redhat.com/show_bug.cgi?id=2275287 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/commit/cb854c779b9e2368c3c274ebd7217c8e75d505be https://github.com/undertow-io/undertow/pull/1856 https://github.com/undertow-io/undertow/pull/1860 https://github.com/undertow-io/undertow/pull/1882 https://github.com/undertow-io/undertow/pull/1894 https://github.com/undertow-io/undertow/releases/tag/2.2.39.Final https://github.com/undertow-io/undertow/releases/tag/2.3.21.Final https://github.com/undertow-io/undertow/releases/tag/2.4.0.Beta1 https://nvd.nist.gov/vuln/detail/CVE-2024-3884 https://www.cve.org/CVERecord?id=CVE-2024-3884
io.undertow:undertow-core	CVE-2024-4027	HIGH	2.2.2.Final	2.2.39.Final, 2.4.0.Beta1, 2.3.21.Final	https://access.redhat.com/security/cve/CVE-2024-4027 https://bugzilla.redhat.com/show_bug.cgi?id=2276410 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/commit/6b7c18481ce65ae4012d92fe2b7f17a21ef4d70b https://github.com/undertow-io/undertow/commit/8318dd36fdc2c9842baf10c5f1bfbb3bc23f75e7 https://github.com/undertow-io/undertow/commit/cb854c779b9e2368c3c274ebd7217c8e75d505be https://github.com/undertow-io/undertow/commit/fb14baa51b611a4a9f755f1d8b07d6e12eac68e3 https://github.com/undertow-io/undertow/pull/1860 https://github.com/undertow-io/undertow/pull/1882 https://github.com/undertow-io/undertow/pull/1894 https://github.com/undertow-io/undertow/releases/tag/2.2.39.Final https://github.com/undertow-io/undertow/releases/tag/2.3.21.Final https://github.com/undertow-io/undertow/releases/tag/2.4.0.Beta1 https://issues.redhat.com/browse/UNDERTOW-2377 https://nvd.nist.gov/vuln/detail/CVE-2024-4027 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-4027.json https://www.cve.org/CVERecord?id=CVE-2024-4027
io.undertow:undertow-core	CVE-2024-4027	HIGH	2.2.2.Final	2.2.39.Final, 2.4.0.Beta1, 2.3.21.Final	https://access.redhat.com/security/cve/CVE-2024-4027 https://bugzilla.redhat.com/show_bug.cgi?id=2276410 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/commit/6b7c18481ce65ae4012d92fe2b7f17a21ef4d70b https://github.com/undertow-io/undertow/commit/8318dd36fdc2c9842baf10c5f1bfbb3bc23f75e7 https://github.com/undertow-io/undertow/commit/cb854c779b9e2368c3c274ebd7217c8e75d505be https://github.com/undertow-io/undertow/commit/fb14baa51b611a4a9f755f1d8b07d6e12eac68e3 https://github.com/undertow-io/undertow/pull/1860 https://github.com/undertow-io/undertow/pull/1882 https://github.com/undertow-io/undertow/pull/1894 https://github.com/undertow-io/undertow/releases/tag/2.2.39.Final https://github.com/undertow-io/undertow/releases/tag/2.3.21.Final https://github.com/undertow-io/undertow/releases/tag/2.4.0.Beta1 https://issues.redhat.com/browse/UNDERTOW-2377 https://nvd.nist.gov/vuln/detail/CVE-2024-4027 https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-4027.json https://www.cve.org/CVERecord?id=CVE-2024-4027
io.undertow:undertow-core	CVE-2024-5971	HIGH	2.2.2.Final	2.3.15.Final, 2.2.34.Final	https://access.redhat.com/errata/RHSA-2024:4392 https://access.redhat.com/errata/RHSA-2024:4884 https://access.redhat.com/errata/RHSA-2024:5143 https://access.redhat.com/errata/RHSA-2024:5144 https://access.redhat.com/errata/RHSA-2024:5145 https://access.redhat.com/errata/RHSA-2024:5147 https://access.redhat.com/errata/RHSA-2024:6508 https://access.redhat.com/errata/RHSA-2024:6883 https://access.redhat.com/security/cve/CVE-2024-5971 https://bugzilla.redhat.com/show_bug.cgi?id=2292211 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/pull/1638 https://github.com/undertow-io/undertow/pull/1640 https://github.com/undertow-io/undertow/pull/1641 https://issues.redhat.com/browse/UNDERTOW-2413 https://nvd.nist.gov/vuln/detail/CVE-2024-5971 https://security.netapp.com/advisory/ntap-20240828-0001/ https://www.cve.org/CVERecord?id=CVE-2024-5971
io.undertow:undertow-core	CVE-2024-5971	HIGH	2.2.2.Final	2.3.15.Final, 2.2.34.Final	https://access.redhat.com/errata/RHSA-2024:4392 https://access.redhat.com/errata/RHSA-2024:4884 https://access.redhat.com/errata/RHSA-2024:5143 https://access.redhat.com/errata/RHSA-2024:5144 https://access.redhat.com/errata/RHSA-2024:5145 https://access.redhat.com/errata/RHSA-2024:5147 https://access.redhat.com/errata/RHSA-2024:6508 https://access.redhat.com/errata/RHSA-2024:6883 https://access.redhat.com/security/cve/CVE-2024-5971 https://bugzilla.redhat.com/show_bug.cgi?id=2292211 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/pull/1638 https://github.com/undertow-io/undertow/pull/1640 https://github.com/undertow-io/undertow/pull/1641 https://issues.redhat.com/browse/UNDERTOW-2413 https://nvd.nist.gov/vuln/detail/CVE-2024-5971 https://security.netapp.com/advisory/ntap-20240828-0001/ https://www.cve.org/CVERecord?id=CVE-2024-5971
io.undertow:undertow-core	CVE-2024-6162	HIGH	2.2.2.Final	2.3.14.Final, 2.2.33.Final	https://access.redhat.com/errata/RHSA-2024:1194 https://access.redhat.com/errata/RHSA-2024:4386 https://access.redhat.com/errata/RHSA-2024:4884 https://access.redhat.com/security/cve/CVE-2024-6162 https://bugzilla.redhat.com/show_bug.cgi?id=2293069 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/commit/90f202ada89b6d9883beed0f1fe10c99d470d9a8 https://github.com/undertow-io/undertow/commit/a28ac53076e2fa532266d25e0c0b1a01d0e9d2cf https://github.com/undertow-io/undertow/pull/1612 https://github.com/undertow-io/undertow/releases/tag/2.2.33.Final https://github.com/undertow-io/undertow/releases/tag/2.3.14.Final https://issues.redhat.com/browse/JBEAP-26268 https://issues.redhat.com/browse/UNDERTOW-2334 https://nvd.nist.gov/vuln/detail/CVE-2024-6162 https://security.netapp.com/advisory/ntap-20241129-0009 https://security.netapp.com/advisory/ntap-20241129-0009/ https://www.cve.org/CVERecord?id=CVE-2024-6162
io.undertow:undertow-core	CVE-2024-6162	HIGH	2.2.2.Final	2.3.14.Final, 2.2.33.Final	https://access.redhat.com/errata/RHSA-2024:1194 https://access.redhat.com/errata/RHSA-2024:4386 https://access.redhat.com/errata/RHSA-2024:4884 https://access.redhat.com/security/cve/CVE-2024-6162 https://bugzilla.redhat.com/show_bug.cgi?id=2293069 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/commit/90f202ada89b6d9883beed0f1fe10c99d470d9a8 https://github.com/undertow-io/undertow/commit/a28ac53076e2fa532266d25e0c0b1a01d0e9d2cf https://github.com/undertow-io/undertow/pull/1612 https://github.com/undertow-io/undertow/releases/tag/2.2.33.Final https://github.com/undertow-io/undertow/releases/tag/2.3.14.Final https://issues.redhat.com/browse/JBEAP-26268 https://issues.redhat.com/browse/UNDERTOW-2334 https://nvd.nist.gov/vuln/detail/CVE-2024-6162 https://security.netapp.com/advisory/ntap-20241129-0009 https://security.netapp.com/advisory/ntap-20241129-0009/ https://www.cve.org/CVERecord?id=CVE-2024-6162
io.undertow:undertow-core	CVE-2024-7885	HIGH	2.2.2.Final	2.2.36.Final, 2.3.17.Final	https://access.redhat.com/errata/RHSA-2024:11023 https://access.redhat.com/errata/RHSA-2024:6508 https://access.redhat.com/errata/RHSA-2024:6883 https://access.redhat.com/errata/RHSA-2024:7441 https://access.redhat.com/errata/RHSA-2024:7442 https://access.redhat.com/errata/RHSA-2024:7735 https://access.redhat.com/errata/RHSA-2024:7736 https://access.redhat.com/errata/RHSA-2024:8080 https://access.redhat.com/errata/RHSA-2025:16667 https://access.redhat.com/errata/RHSA-2026:0743 https://access.redhat.com/security/cve/CVE-2024-7885 https://bugzilla.redhat.com/show_bug.cgi?id=2305290 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/blob/182e4ca1543c52f438b0244c930dca3d8b6e68e3/core/src/main/java/io/undertow/server/protocol/proxy/ProxyProtocolReadListener.java https://github.com/undertow-io/undertow/commit/80c125e09068ac52ed0a9acde266ef12f8ed7ae1 https://github.com/undertow-io/undertow/commit/ce5182c37376982ef0abee34fce0d8c0aab0fab8 https://nvd.nist.gov/vuln/detail/CVE-2024-7885 https://security.netapp.com/advisory/ntap-20241011-0004 https://security.netapp.com/advisory/ntap-20241011-0004/ https://www.cve.org/CVERecord?id=CVE-2024-7885
io.undertow:undertow-core	CVE-2024-7885	HIGH	2.2.2.Final	2.2.36.Final, 2.3.17.Final	https://access.redhat.com/errata/RHSA-2024:11023 https://access.redhat.com/errata/RHSA-2024:6508 https://access.redhat.com/errata/RHSA-2024:6883 https://access.redhat.com/errata/RHSA-2024:7441 https://access.redhat.com/errata/RHSA-2024:7442 https://access.redhat.com/errata/RHSA-2024:7735 https://access.redhat.com/errata/RHSA-2024:7736 https://access.redhat.com/errata/RHSA-2024:8080 https://access.redhat.com/errata/RHSA-2025:16667 https://access.redhat.com/errata/RHSA-2026:0743 https://access.redhat.com/security/cve/CVE-2024-7885 https://bugzilla.redhat.com/show_bug.cgi?id=2305290 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/blob/182e4ca1543c52f438b0244c930dca3d8b6e68e3/core/src/main/java/io/undertow/server/protocol/proxy/ProxyProtocolReadListener.java https://github.com/undertow-io/undertow/commit/80c125e09068ac52ed0a9acde266ef12f8ed7ae1 https://github.com/undertow-io/undertow/commit/ce5182c37376982ef0abee34fce0d8c0aab0fab8 https://nvd.nist.gov/vuln/detail/CVE-2024-7885 https://security.netapp.com/advisory/ntap-20241011-0004 https://security.netapp.com/advisory/ntap-20241011-0004/ https://www.cve.org/CVERecord?id=CVE-2024-7885
io.undertow:undertow-core	CVE-2025-9784	HIGH	2.2.2.Final	2.2.38.Final, 2.3.20.Final	https://access.redhat.com/errata/RHSA-2025:23143 https://access.redhat.com/errata/RHSA-2026:0383 https://access.redhat.com/errata/RHSA-2026:0384 https://access.redhat.com/errata/RHSA-2026:0386 https://access.redhat.com/errata/RHSA-2026:33371 https://access.redhat.com/errata/RHSA-2026:33372 https://access.redhat.com/errata/RHSA-2026:3889 https://access.redhat.com/errata/RHSA-2026:3891 https://access.redhat.com/errata/RHSA-2026:3892 https://access.redhat.com/errata/RHSA-2026:4915 https://access.redhat.com/errata/RHSA-2026:4916 https://access.redhat.com/errata/RHSA-2026:4917 https://access.redhat.com/errata/RHSA-2026:4924 https://access.redhat.com/errata/RHSA-2026:76128 https://access.redhat.com/errata/RHSA-2026:76129 https://access.redhat.com/errata/RHSA-2026:76130 https://access.redhat.com/errata/RHSA-2026:76132 https://access.redhat.com/errata/RHSA-2026:76134 https://access.redhat.com/security/cve/CVE-2025-9784 https://bugzilla.redhat.com/show_bug.cgi?id=2392306 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/pull/1778 https://github.com/undertow-io/undertow/pull/1802 https://github.com/undertow-io/undertow/pull/1803 https://github.com/undertow-io/undertow/pull/1804 https://github.com/undertow-io/undertow/pull/1805 https://github.com/undertow-io/undertow/releases/tag/2.2.38.Final https://issues.redhat.com/browse/UNDERTOW-2598 https://kb.cert.org/vuls/id/767506 https://nvd.nist.gov/vuln/detail/CVE-2025-9784 https://www.cve.org/CVERecord?id=CVE-2025-9784 https://www.kb.cert.org/vuls/id/767506
io.undertow:undertow-core	CVE-2025-9784	HIGH	2.2.2.Final	2.2.38.Final, 2.3.20.Final	https://access.redhat.com/errata/RHSA-2025:23143 https://access.redhat.com/errata/RHSA-2026:0383 https://access.redhat.com/errata/RHSA-2026:0384 https://access.redhat.com/errata/RHSA-2026:0386 https://access.redhat.com/errata/RHSA-2026:33371 https://access.redhat.com/errata/RHSA-2026:33372 https://access.redhat.com/errata/RHSA-2026:3889 https://access.redhat.com/errata/RHSA-2026:3891 https://access.redhat.com/errata/RHSA-2026:3892 https://access.redhat.com/errata/RHSA-2026:4915 https://access.redhat.com/errata/RHSA-2026:4916 https://access.redhat.com/errata/RHSA-2026:4917 https://access.redhat.com/errata/RHSA-2026:4924 https://access.redhat.com/errata/RHSA-2026:76128 https://access.redhat.com/errata/RHSA-2026:76129 https://access.redhat.com/errata/RHSA-2026:76130 https://access.redhat.com/errata/RHSA-2026:76132 https://access.redhat.com/errata/RHSA-2026:76134 https://access.redhat.com/security/cve/CVE-2025-9784 https://bugzilla.redhat.com/show_bug.cgi?id=2392306 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/pull/1778 https://github.com/undertow-io/undertow/pull/1802 https://github.com/undertow-io/undertow/pull/1803 https://github.com/undertow-io/undertow/pull/1804 https://github.com/undertow-io/undertow/pull/1805 https://github.com/undertow-io/undertow/releases/tag/2.2.38.Final https://issues.redhat.com/browse/UNDERTOW-2598 https://kb.cert.org/vuls/id/767506 https://nvd.nist.gov/vuln/detail/CVE-2025-9784 https://www.cve.org/CVERecord?id=CVE-2025-9784 https://www.kb.cert.org/vuls/id/767506
io.undertow:undertow-core	CVE-2021-3597	MEDIUM	2.2.2.Final	2.2.9.Final, 2.0.39.Final	https://access.redhat.com/security/cve/CVE-2021-3597 https://bugzilla.redhat.com/show_bug.cgi?id=1970930 https://github.com/undertow-io/undertow https://nvd.nist.gov/vuln/detail/CVE-2021-3597 https://security.netapp.com/advisory/ntap-20220804-0003 https://security.netapp.com/advisory/ntap-20220804-0003/ https://www.cve.org/CVERecord?id=CVE-2021-3597
io.undertow:undertow-core	CVE-2021-3597	MEDIUM	2.2.2.Final	2.2.9.Final, 2.0.39.Final	https://access.redhat.com/security/cve/CVE-2021-3597 https://bugzilla.redhat.com/show_bug.cgi?id=1970930 https://github.com/undertow-io/undertow https://nvd.nist.gov/vuln/detail/CVE-2021-3597 https://security.netapp.com/advisory/ntap-20220804-0003 https://security.netapp.com/advisory/ntap-20220804-0003/ https://www.cve.org/CVERecord?id=CVE-2021-3597
io.undertow:undertow-core	CVE-2023-1973	MEDIUM	2.2.2.Final	2.2.32.Final, 2.3.13.Final	https://access.redhat.com/errata/RHSA-2024:1674 https://access.redhat.com/errata/RHSA-2024:1675 https://access.redhat.com/errata/RHSA-2024:1676 https://access.redhat.com/errata/RHSA-2024:1677 https://access.redhat.com/errata/RHSA-2024:2763 https://access.redhat.com/errata/RHSA-2024:2764 https://access.redhat.com/security/cve/CVE-2023-1973 https://bugzilla.redhat.com/show_bug.cgi?id=2185662 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/commit/0410f3c4d9b39b754a2203a29834cac51da11258 https://github.com/undertow-io/undertow/commit/b289b18bc0ba40c134698a430c70ca1835c51d78 https://nvd.nist.gov/vuln/detail/CVE-2023-1973 https://www.cve.org/CVERecord?id=CVE-2023-1973
io.undertow:undertow-core	CVE-2023-1973	MEDIUM	2.2.2.Final	2.2.32.Final, 2.3.13.Final	https://access.redhat.com/errata/RHSA-2024:1674 https://access.redhat.com/errata/RHSA-2024:1675 https://access.redhat.com/errata/RHSA-2024:1676 https://access.redhat.com/errata/RHSA-2024:1677 https://access.redhat.com/errata/RHSA-2024:2763 https://access.redhat.com/errata/RHSA-2024:2764 https://access.redhat.com/security/cve/CVE-2023-1973 https://bugzilla.redhat.com/show_bug.cgi?id=2185662 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/commit/0410f3c4d9b39b754a2203a29834cac51da11258 https://github.com/undertow-io/undertow/commit/b289b18bc0ba40c134698a430c70ca1835c51d78 https://nvd.nist.gov/vuln/detail/CVE-2023-1973 https://www.cve.org/CVERecord?id=CVE-2023-1973
io.undertow:undertow-core	CVE-2024-1459	MEDIUM	2.2.2.Final	2.2.31.Final, 2.3.12.Final	https://access.redhat.com/errata/RHSA-2024:1674 https://access.redhat.com/errata/RHSA-2024:1675 https://access.redhat.com/errata/RHSA-2024:1676 https://access.redhat.com/errata/RHSA-2024:1677 https://access.redhat.com/errata/RHSA-2024:2763 https://access.redhat.com/errata/RHSA-2024:2764 https://access.redhat.com/security/cve/CVE-2024-1459 https://bugzilla.redhat.com/show_bug.cgi?id=2259475 https://github.com/undertow-io/undertow/commit/40bb3314f013247af8e222870bd5045ca8650c5c https://github.com/undertow-io/undertow/commit/54f3e4325425c472f5af5fc973e02df83d7a711a https://github.com/undertow-io/undertow/pull/1556 https://issues.redhat.com/browse/UNDERTOW-2339 https://nvd.nist.gov/vuln/detail/CVE-2024-1459 https://security.netapp.com/advisory/ntap-20241122-0008 https://security.netapp.com/advisory/ntap-20241122-0008/ https://www.cve.org/CVERecord?id=CVE-2024-1459
io.undertow:undertow-core	CVE-2024-1459	MEDIUM	2.2.2.Final	2.2.31.Final, 2.3.12.Final	https://access.redhat.com/errata/RHSA-2024:1674 https://access.redhat.com/errata/RHSA-2024:1675 https://access.redhat.com/errata/RHSA-2024:1676 https://access.redhat.com/errata/RHSA-2024:1677 https://access.redhat.com/errata/RHSA-2024:2763 https://access.redhat.com/errata/RHSA-2024:2764 https://access.redhat.com/security/cve/CVE-2024-1459 https://bugzilla.redhat.com/show_bug.cgi?id=2259475 https://github.com/undertow-io/undertow/commit/40bb3314f013247af8e222870bd5045ca8650c5c https://github.com/undertow-io/undertow/commit/54f3e4325425c472f5af5fc973e02df83d7a711a https://github.com/undertow-io/undertow/pull/1556 https://issues.redhat.com/browse/UNDERTOW-2339 https://nvd.nist.gov/vuln/detail/CVE-2024-1459 https://security.netapp.com/advisory/ntap-20241122-0008 https://security.netapp.com/advisory/ntap-20241122-0008/ https://www.cve.org/CVERecord?id=CVE-2024-1459
io.undertow:undertow-core	CVE-2024-3653	MEDIUM	2.2.2.Final	2.3.15.Final, 2.2.34.Final	https://access.redhat.com/errata/RHSA-2024:4392 https://access.redhat.com/errata/RHSA-2024:5143 https://access.redhat.com/errata/RHSA-2024:5144 https://access.redhat.com/errata/RHSA-2024:5145 https://access.redhat.com/errata/RHSA-2024:5147 https://access.redhat.com/errata/RHSA-2024:6437 https://access.redhat.com/security/cve/CVE-2024-3653 https://bugzilla.redhat.com/show_bug.cgi?id=2274437 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/pull/1639 https://github.com/undertow-io/undertow/pull/1640 https://github.com/undertow-io/undertow/pull/1641 https://issues.redhat.com/browse/UNDERTOW-2382 https://nvd.nist.gov/vuln/detail/CVE-2024-3653 https://security.netapp.com/advisory/ntap-20240828-0002/ https://www.cve.org/CVERecord?id=CVE-2024-3653
io.undertow:undertow-core	CVE-2024-3653	MEDIUM	2.2.2.Final	2.3.15.Final, 2.2.34.Final	https://access.redhat.com/errata/RHSA-2024:4392 https://access.redhat.com/errata/RHSA-2024:5143 https://access.redhat.com/errata/RHSA-2024:5144 https://access.redhat.com/errata/RHSA-2024:5145 https://access.redhat.com/errata/RHSA-2024:5147 https://access.redhat.com/errata/RHSA-2024:6437 https://access.redhat.com/security/cve/CVE-2024-3653 https://bugzilla.redhat.com/show_bug.cgi?id=2274437 https://github.com/undertow-io/undertow https://github.com/undertow-io/undertow/pull/1639 https://github.com/undertow-io/undertow/pull/1640 https://github.com/undertow-io/undertow/pull/1641 https://issues.redhat.com/browse/UNDERTOW-2382 https://nvd.nist.gov/vuln/detail/CVE-2024-3653 https://security.netapp.com/advisory/ntap-20240828-0002/ https://www.cve.org/CVERecord?id=CVE-2024-3653
org.apache.activemq:artemis-cli	CVE-2023-50780	HIGH	2.10.1	2.29.0	http://www.openwall.com/lists/oss-security/2024/10/14/2 https://access.redhat.com/security/cve/CVE-2023-50780 https://github.com/apache/activemq-artemis https://github.com/apache/activemq-artemis/commit/cfb585eaf61d570eecd65c6ad0e92282df7d3869 https://issues.apache.org/jira/browse/ARTEMIS-4150 https://lists.apache.org/thread/63b78shqz312phsx7v1ryr7jv7bprg58 https://nvd.nist.gov/vuln/detail/CVE-2023-50780 https://www.cve.org/CVERecord?id=CVE-2023-50780
org.apache.activemq:artemis-commons	CVE-2020-10727	MEDIUM	2.10.1	2.13.0	https://access.redhat.com/security/cve/CVE-2020-10727 https://bugzilla.redhat.com/show_bug.cgi?id=1827200 https://github.com/apache/artemis https://issues.redhat.com/browse/ENTMQBR-3435 https://nvd.nist.gov/vuln/detail/CVE-2020-10727 https://security.netapp.com/advisory/ntap-20210827-0001 https://security.netapp.com/advisory/ntap-20210827-0001/ https://www.cve.org/CVERecord?id=CVE-2020-10727
org.apache.activemq:artemis-commons	CVE-2020-10727	MEDIUM	2.10.1	2.13.0	https://access.redhat.com/security/cve/CVE-2020-10727 https://bugzilla.redhat.com/show_bug.cgi?id=1827200 https://github.com/apache/artemis https://issues.redhat.com/browse/ENTMQBR-3435 https://nvd.nist.gov/vuln/detail/CVE-2020-10727 https://security.netapp.com/advisory/ntap-20210827-0001 https://security.netapp.com/advisory/ntap-20210827-0001/ https://www.cve.org/CVERecord?id=CVE-2020-10727
org.apache.activemq:artemis-core-client	CVE-2022-23913	HIGH	2.10.1	2.19.1	https://access.redhat.com/security/cve/CVE-2022-23913 https://github.com/apache/activemq-artemis https://github.com/apache/activemq-artemis/pull/3862 https://github.com/apache/activemq-artemis/pull/3862/commits/1f92368240229b8f5db92a92a72c703faf83e9b7 https://github.com/apache/activemq-artemis/pull/3871 https://github.com/apache/activemq-artemis/pull/3871/commits/153d2e9a979aead8dff95fbc91d659ecc7d0fb82 https://github.com/github/codeql-java-CVE-coverage/issues/1061 https://issues.apache.org/jira/browse/ARTEMIS-3593 https://lists.apache.org/thread/fjynj57rd99s814rdn5hzvmx8lz403q2 https://nvd.nist.gov/vuln/detail/CVE-2022-23913 https://security.netapp.com/advisory/ntap-20220303-0003 https://security.netapp.com/advisory/ntap-20220303-0003/ https://www.cve.org/CVERecord?id=CVE-2022-23913
org.apache.activemq:artemis-core-client	CVE-2022-23913	HIGH	2.10.1	2.19.1	https://access.redhat.com/security/cve/CVE-2022-23913 https://github.com/apache/activemq-artemis https://github.com/apache/activemq-artemis/pull/3862 https://github.com/apache/activemq-artemis/pull/3862/commits/1f92368240229b8f5db92a92a72c703faf83e9b7 https://github.com/apache/activemq-artemis/pull/3871 https://github.com/apache/activemq-artemis/pull/3871/commits/153d2e9a979aead8dff95fbc91d659ecc7d0fb82 https://github.com/github/codeql-java-CVE-coverage/issues/1061 https://issues.apache.org/jira/browse/ARTEMIS-3593 https://lists.apache.org/thread/fjynj57rd99s814rdn5hzvmx8lz403q2 https://nvd.nist.gov/vuln/detail/CVE-2022-23913 https://security.netapp.com/advisory/ntap-20220303-0003 https://security.netapp.com/advisory/ntap-20220303-0003/ https://www.cve.org/CVERecord?id=CVE-2022-23913
org.apache.activemq:artemis-core-client	CVE-2021-4040	MEDIUM	2.10.1	2.19.1	https://access.redhat.com/security/cve/CVE-2021-4040 https://bugzilla.redhat.com/show_bug.cgi?id=2028254 https://github.com/apache/activemq-artemis https://github.com/apache/activemq-artemis/pull/3862 https://github.com/apache/activemq-artemis/pull/3871 https://github.com/apache/activemq-artemis/pull/3871/commits https://github.com/apache/activemq-artemis/pull/3871/commits/153d2e9a979aead8dff95fbc91d659ecc7d0fb82 https://issues.apache.org/jira/browse/ARTEMIS-3593 https://nvd.nist.gov/vuln/detail/CVE-2021-4040 https://www.cve.org/CVERecord?id=CVE-2021-4040
org.apache.activemq:artemis-core-client	CVE-2021-4040	MEDIUM	2.10.1	2.19.1	https://access.redhat.com/security/cve/CVE-2021-4040 https://bugzilla.redhat.com/show_bug.cgi?id=2028254 https://github.com/apache/activemq-artemis https://github.com/apache/activemq-artemis/pull/3862 https://github.com/apache/activemq-artemis/pull/3871 https://github.com/apache/activemq-artemis/pull/3871/commits https://github.com/apache/activemq-artemis/pull/3871/commits/153d2e9a979aead8dff95fbc91d659ecc7d0fb82 https://issues.apache.org/jira/browse/ARTEMIS-3593 https://nvd.nist.gov/vuln/detail/CVE-2021-4040 https://www.cve.org/CVERecord?id=CVE-2021-4040
org.apache.activemq:artemis-server	CVE-2022-35278	MEDIUM	2.10.1	2.24.0	https://access.redhat.com/security/cve/CVE-2022-35278 https://lists.apache.org/thread/bh6y81wtotg75337bpvxcjy436zfgf3n https://nvd.nist.gov/vuln/detail/CVE-2022-35278 https://security.netapp.com/advisory/ntap-20221209-0005 https://security.netapp.com/advisory/ntap-20221209-0005/ https://www.cve.org/CVERecord?id=CVE-2022-35278
org.apache.activemq:artemis-server	CVE-2025-27427	LOW	2.10.1	2.40.0	http://www.openwall.com/lists/oss-security/2025/03/31/1 https://access.redhat.com/security/cve/CVE-2025-27427 https://github.com/apache/activemq-artemis https://github.com/apache/activemq-artemis/commit/2216a75a57f098295abb283d556c8b8bda91324d https://github.com/apache/activemq-artemis/commit/6ab458015689303db8878941abe1bc973299fc2e https://issues.apache.org/jira/browse/ARTEMIS-5346 https://lists.apache.org/thread/8dzlm2vkqphyrnkrby8r8kzndsm5o6x8 https://nvd.nist.gov/vuln/detail/CVE-2025-27427 https://www.cve.org/CVERecord?id=CVE-2025-27427
org.apache.avro:avro	CVE-2024-47561	CRITICAL	1.7.6	1.11.4	http://www.openwall.com/lists/oss-security/2024/10/03/1 https://access.redhat.com/security/cve/CVE-2024-47561 https://advisory.echohq.com/cve/CVE-2024-47561 https://github.com/advisories/GHSA-r7pg-v2c8-mfg3 https://github.com/apache/avro https://github.com/apache/avro/commit/8f89868d29272e3afea2ff8de8c85cb81a57d900 https://github.com/apache/avro/commit/f6b3bd7e50e6e09fedddb98c61558c022ba31285 https://github.com/apache/avro/pull/2934 https://github.com/apache/avro/pull/2980 https://issues.apache.org/jira/browse/AVRO-3985 https://lists.apache.org/thread/c2v7mhqnmq0jmbwxqq3r5jbj1xg43h5x https://nvd.nist.gov/vuln/detail/CVE-2024-47561 https://security.netapp.com/advisory/ntap-20241011-0003 https://security.netapp.com/advisory/ntap-20241011-0003/ https://thehackernews.com/2024/10/critical-apache-avro-sdk-flaw-allows.html https://www.cve.org/CVERecord?id=CVE-2024-47561 https://www.openwall.com/lists/oss-security/2024/10/03/1
org.apache.avro:avro	CVE-2023-39410	HIGH	1.7.6	1.11.3	http://www.openwall.com/lists/oss-security/2023/09/29/6 https://access.redhat.com/security/cve/CVE-2023-39410 https://advisory.echohq.com/cve/CVE-2023-39410 https://github.com/advisories/GHSA-rhrv-645h-fjfh https://github.com/apache/avro https://github.com/apache/avro/commit/a12a7e44ddbe060c3dc731863cad5c15f9267828 https://github.com/pypa/advisory-database/tree/main/vulns/avro/PYSEC-2023-188.yaml https://issues.apache.org/jira/browse/AVRO-3819 https://lists.apache.org/thread/q142wj99cwdd0jo5lvdoxzoymlqyjdds https://nvd.nist.gov/vuln/detail/CVE-2023-39410 https://security.netapp.com/advisory/ntap-20240621-0006 https://security.netapp.com/advisory/ntap-20240621-0006/ https://www.cve.org/CVERecord?id=CVE-2023-39410 https://www.openwall.com/lists/oss-security/2023/09/29/6
org.apache.commons:commons-lang3	CVE-2025-48924	MEDIUM	3.10	3.18.0	http://www.openwall.com/lists/oss-security/2025/07/11/1 https://access.redhat.com/security/cve/CVE-2025-48924 https://advisory.echohq.com/cve/CVE-2025-48924 https://github.com/apache/commons-lang https://github.com/apache/commons-lang/commit/b424803abdb2bec818e4fbcb251ce031c22aca53 https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1 https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html https://nvd.nist.gov/vuln/detail/CVE-2025-48924 https://ubuntu.com/security/notices/USN-8364-1 https://www.cve.org/CVERecord?id=CVE-2025-48924 https://www.openwall.com/lists/oss-security/2025/07/11/1
org.apache.cxf:cxf-core	CVE-2022-46364	CRITICAL	3.3.7	3.4.10, 3.5.5	https://access.redhat.com/security/cve/CVE-2022-46364 https://cxf.apache.org/security-advisories.data/CVE-2022-46364.txt?version=1&modificationDate=1670944472739&api=v2 https://nvd.nist.gov/vuln/detail/CVE-2022-46364 https://www.cve.org/CVERecord?id=CVE-2022-46364
org.apache.cxf:cxf-core	CVE-2026-49875	CRITICAL	3.3.7	4.2.2, 4.1.7, 3.6.12	http://www.openwall.com/lists/oss-security/2026/06/11/2 https://access.redhat.com/errata/RHSA-2026:36839 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/security/cve/CVE-2026-49875 https://advisory.echohq.com/cve/CVE-2026-49875 https://bugzilla.redhat.com/show_bug.cgi?id=2488309 https://cxf.apache.org/security-advisories.data/CVE-2026-49875.txt https://github.com/advisories/GHSA-xw5h-cmh3-8j6j https://github.com/apache/cxf https://lists.apache.org/thread/3kb9w5bg90xcp06fccoz9k3gpsvyy79o https://nvd.nist.gov/vuln/detail/CVE-2026-49875 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-49875.json https://www.cve.org/CVERecord?id=CVE-2026-49875
org.apache.cxf:cxf-core	CVE-2022-46363	HIGH	3.3.7	3.4.10, 3.5.5	https://access.redhat.com/security/cve/CVE-2022-46363 https://github.com/apache/cxf https://lists.apache.org/thread/pdzo1qgyplf4y523tnnzrcm7hoco3l8c https://nvd.nist.gov/vuln/detail/CVE-2022-46363 https://www.cve.org/CVERecord?id=CVE-2022-46363
org.apache.cxf:cxf-core	CVE-2025-23184	HIGH	3.3.7	3.5.10, 3.6.5, 4.0.6	http://www.openwall.com/lists/oss-security/2025/01/20/3 https://access.redhat.com/security/cve/CVE-2025-23184 https://github.com/apache/cxf https://github.com/apache/cxf/pull/2048 https://github.com/apache/cxf/pull/2111 https://issues.apache.org/jira/browse/CXF-7396 https://lists.apache.org/thread/lfs8l63rnctnj2skfrxyys7v8fgnt122 https://nvd.nist.gov/vuln/detail/CVE-2025-23184 https://security.netapp.com/advisory/ntap-20250214-0003 https://security.netapp.com/advisory/ntap-20250214-0003/ https://www.cve.org/CVERecord?id=CVE-2025-23184 https://www.vicarius.io/vsociety/posts/cve-2025-23184-detect-apache-cxf-vulnerability https://www.vicarius.io/vsociety/posts/cve-2025-23184-mitigate-apache-cxf-vulnerability
org.apache.cxf:cxf-core	CVE-2026-50645	HIGH	3.3.7	4.2.2, 4.1.7, 3.6.12	http://www.openwall.com/lists/oss-security/2026/06/11/12 https://advisory.echohq.com/cve/CVE-2026-50645 https://cxf.apache.org/security-advisories.data/CVE-2026-50645.txt https://github.com/advisories/GHSA-ghvc-7hp8-2g2v https://github.com/apache/cxf https://lists.apache.org/thread/24zb7cqcvykhwm0j797dmdq25s61mj93 https://nvd.nist.gov/vuln/detail/CVE-2026-50645
org.apache.cxf:cxf-core	CVE-2025-48795	MEDIUM	3.3.7	3.5.11, 3.6.6, 4.0.7, 4.1.1	http://www.openwall.com/lists/oss-security/2025/07/15/3 https://access.redhat.com/security/cve/CVE-2025-48795 https://github.com/apache/cxf https://github.com/apache/cxf/commit/1c1d687f8e295f433a3592a3bc0b0a63c432bfde https://github.com/apache/cxf/pull/2258 https://lists.apache.org/thread/vo5qv02mvv5plmb6z2xf1ktjmrpv3jmn https://nvd.nist.gov/vuln/detail/CVE-2025-48795 https://www.cve.org/CVERecord?id=CVE-2025-48795
org.apache.cxf:cxf-rt-databinding-aegis	CVE-2024-28752	CRITICAL	3.3.7	3.5.8, 3.6.3, 4.0.4	http://www.openwall.com/lists/oss-security/2024/03/14/3 https://access.redhat.com/security/cve/CVE-2024-28752 https://cxf.apache.org/security-advisories.data/CVE-2024-28752.txt https://github.com/advisories/GHSA-qmgx-j96g-4428 https://github.com/apache/cxf https://github.com/apache/cxf/commit/d0baeb3ee64c6d7c883bd2f5c4cb0de6b0b5f463 https://nvd.nist.gov/vuln/detail/CVE-2024-28752 https://security.netapp.com/advisory/ntap-20240517-0001 https://security.netapp.com/advisory/ntap-20240517-0001/ https://www.cve.org/CVERecord?id=CVE-2024-28752
org.apache.cxf:cxf-rt-transports-jms	CVE-2026-50632	CRITICAL	3.3.7	4.2.2, 4.1.7, 3.6.12	https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/security/cve/CVE-2026-50632 https://advisory.echohq.com/cve/CVE-2026-50632 https://bugzilla.redhat.com/show_bug.cgi?id=2488304 https://github.com/apache/cxf https://lists.apache.org/thread/740ghch5z5y675cn2kzgtyo5k37n6qcw https://nvd.nist.gov/vuln/detail/CVE-2026-50632 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50632.json https://www.cve.org/CVERecord?id=CVE-2026-50632
org.apache.cxf:cxf-rt-transports-jms	CVE-2026-44417	HIGH	3.3.7	4.2.1, 4.1.6, 3.6.11	https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/security/cve/CVE-2026-44417 https://bugzilla.redhat.com/show_bug.cgi?id=2480729 https://github.com/apache/cxf https://lists.apache.org/thread/bqg6gjy2cx7rfyqjxcpv3jwjvmclvz4o https://nvd.nist.gov/vuln/detail/CVE-2026-44417 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44417.json https://www.cve.org/CVERecord?id=CVE-2026-44417
org.apache.cxf:cxf-rt-transports-jms	CVE-2025-48913	MEDIUM	3.3.7	3.6.8, 4.0.9, 4.1.3	http://www.openwall.com/lists/oss-security/2025/08/07/2 https://access.redhat.com/security/cve/CVE-2025-48913 https://github.com/apache/cxf https://github.com/apache/cxf/commit/24e50ffeca3132570c2f297c5c7dbd05a1bb1bfa https://github.com/mbhatt1/disclosures/security/advisories/GHSA-hv69-h8rg-7jg2 https://lists.apache.org/thread/f1nv488ztc0js4g5ml2v88mzkzslyh83 https://nvd.nist.gov/vuln/detail/CVE-2025-48913 https://www.cve.org/CVERecord?id=CVE-2025-48913
org.apache.neethi:neethi	CVE-2026-42402	HIGH	3.1.1	3.2.2	http://www.openwall.com/lists/oss-security/2026/05/01/6 https://access.redhat.com/security/cve/CVE-2026-42402 https://advisory.echohq.com/cve/CVE-2026-42402 https://github.com/apache/ws-neethi https://lists.apache.org/thread/p826j0phhmr9f83wzpmys1y0bdfrr2q4 https://nvd.nist.gov/vuln/detail/CVE-2026-42402 https://www.cve.org/CVERecord?id=CVE-2026-42402
org.apache.neethi:neethi	CVE-2026-42403	HIGH	3.1.1	3.2.2	http://www.openwall.com/lists/oss-security/2026/05/01/7 https://access.redhat.com/security/cve/CVE-2026-42403 https://advisory.echohq.com/cve/CVE-2026-42403 https://github.com/apache/ws-neethi https://lists.apache.org/thread/zm6t8skkkskjwk1881l4m4n0l7dqclzo https://nvd.nist.gov/vuln/detail/CVE-2026-42403 https://www.cve.org/CVERecord?id=CVE-2026-42403
org.apache.neethi:neethi	CVE-2026-42404	MEDIUM	3.1.1	3.2.2	http://www.openwall.com/lists/oss-security/2026/05/01/8 https://access.redhat.com/security/cve/CVE-2026-42404 https://advisory.echohq.com/cve/CVE-2026-42404 https://github.com/apache/ws-neethi https://lists.apache.org/thread/zdspnt64zznyjyn648553kptx69w23oq https://nvd.nist.gov/vuln/detail/CVE-2026-42404 https://www.cve.org/CVERecord?id=CVE-2026-42404
org.apache.santuario:xmlsec	CVE-2021-40690	HIGH	2.1.4	2.2.3, 2.1.7	https://access.redhat.com/security/cve/CVE-2021-40690 https://lists.apache.org/thread.html/r3b3f5ba9b0de8c9c125077b71af06026d344a709a8ba67db81ee9faa@%3Ccommits.tomee.apache.org%3E https://lists.apache.org/thread.html/r401ecb7274794f040cd757b259ebe3e8c463ae74f7961209ccad3c59@%3Cissues.cxf.apache.org%3E https://lists.apache.org/thread.html/r8848751b6a5dd78cc9e99d627e74fecfaffdfa1bb615dce827aad633@%3Cdev.santuario.apache.org%3E https://lists.apache.org/thread.html/r8a5c0ce9014bd07303aec1e5eed55951704878016465d3dae00e0c28@%3Ccommits.tomee.apache.org%3E https://lists.apache.org/thread.html/r9c100d53c84d54cf71975e3f0cfcc2856a8846554a04c99390156ce4@%3Ccommits.tomee.apache.org%3E https://lists.apache.org/thread.html/raf352f95c19c0c4051af3180752cb69acbea88d0d066ab176c6170e8@%3Cuser.poi.apache.org%3E https://lists.apache.org/thread.html/rbbbac0759b12472abd0c278d32b5e0867bb21934df8e14e5e641597c@%3Ccommits.tomee.apache.org%3E https://lists.apache.org/thread.html/rbdac116aef912b563da54f4c152222c0754e32fb2f785519ac5e059f@%3Ccommits.tomee.apache.org%3E https://lists.apache.org/thread.html/re294cfc61f509512874ea514d8d64fd276253d54ac378ffa7a4880c8@%3Ccommits.tomee.apache.org%3E https://lists.debian.org/debian-lts-announce/2021/09/msg00015.html https://nvd.nist.gov/vuln/detail/CVE-2021-40690 https://santuario.apache.org/secadv.data/CVE-2021-40690.txt.asc https://security.netapp.com/advisory/ntap-20230818-0002 https://security.netapp.com/advisory/ntap-20230818-0002/ https://ubuntu.com/security/notices/USN-5525-1 https://www.cve.org/CVERecord?id=CVE-2021-40690 https://www.debian.org/security/2021/dsa-5010 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujul2022.html
org.apache.santuario:xmlsec	CVE-2023-44483	MEDIUM	2.1.4	2.3.4, 2.2.6, 3.0.3	http://www.openwall.com/lists/oss-security/2023/10/20/5 https://access.redhat.com/security/cve/CVE-2023-44483 https://github.com/apache/santuario-java https://lists.apache.org/thread/vmqbp9mfxtrf0kmbnnmbn3h9j6dr9q55 https://nvd.nist.gov/vuln/detail/CVE-2023-44483 https://santuario.apache.org/secadv.data/CVE-2023-44483.txt.asc?version=1&modificationDate=1697782758000&api=v2 https://security.netapp.com/advisory/ntap-20241108-0002 https://security.netapp.com/advisory/ntap-20241108-0002/ https://www.cve.org/CVERecord?id=CVE-2023-44483
org.apache.sshd:sshd-common	CVE-2022-45047	CRITICAL	2.3.0	2.9.2	https://access.redhat.com/security/cve/CVE-2022-45047 https://github.com/apache/mina-sshd https://github.com/apache/mina-sshd/commit/03238d51586f6b3c0bdbb1a23cf16799344d6c32 https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0 https://github.com/apache/mina-sshd/commit/5a8fe830b2a2308a2b24ac8115a391af477f64f5 https://nvd.nist.gov/vuln/detail/CVE-2022-45047 https://security.netapp.com/advisory/ntap-20240216-0008/ https://www.cve.org/CVERecord?id=CVE-2022-45047 https://www.mail-archive.com/dev@mina.apache.org/msg39312.html
org.apache.sshd:sshd-common	CVE-2022-45047	CRITICAL	2.3.0	2.9.2	https://access.redhat.com/security/cve/CVE-2022-45047 https://github.com/apache/mina-sshd https://github.com/apache/mina-sshd/commit/03238d51586f6b3c0bdbb1a23cf16799344d6c32 https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0 https://github.com/apache/mina-sshd/commit/5a8fe830b2a2308a2b24ac8115a391af477f64f5 https://nvd.nist.gov/vuln/detail/CVE-2022-45047 https://security.netapp.com/advisory/ntap-20240216-0008/ https://www.cve.org/CVERecord?id=CVE-2022-45047 https://www.mail-archive.com/dev@mina.apache.org/msg39312.html
org.apache.sshd:sshd-common	CVE-2022-45047	CRITICAL	2.3.0	2.9.2	https://access.redhat.com/security/cve/CVE-2022-45047 https://github.com/apache/mina-sshd https://github.com/apache/mina-sshd/commit/03238d51586f6b3c0bdbb1a23cf16799344d6c32 https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0 https://github.com/apache/mina-sshd/commit/5a8fe830b2a2308a2b24ac8115a391af477f64f5 https://nvd.nist.gov/vuln/detail/CVE-2022-45047 https://security.netapp.com/advisory/ntap-20240216-0008/ https://www.cve.org/CVERecord?id=CVE-2022-45047 https://www.mail-archive.com/dev@mina.apache.org/msg39312.html
org.apache.sshd:sshd-common	CVE-2024-41909	HIGH	2.3.0	2.12.0	https://access.redhat.com/security/cve/CVE-2024-41909 https://github.com/apache/mina-sshd https://github.com/apache/mina-sshd/commit/315739e4e9d1dc7a4ff32ea64936982ed0b73e76 https://github.com/apache/mina-sshd/commit/6b0fd46f64bcb75eeeee31d65f10242660aad7c1 https://github.com/apache/mina-sshd/commit/7b2c781640a7a78a9455b86593a1f63c9e8cab92 https://github.com/apache/mina-sshd/issues/445 https://github.com/apache/mina-sshd/pull/449 https://github.com/apache/mina-sshd/releases/tag/sshd-2.12.0 https://lists.apache.org/thread/vwf1ot8wx1njyy8n19j5j2tcnjnozt3b https://nvd.nist.gov/vuln/detail/CVE-2024-41909 https://security.netapp.com/advisory/ntap-20241011-0006 https://security.netapp.com/advisory/ntap-20241011-0006/ https://www.cve.org/CVERecord?id=CVE-2024-41909
org.apache.sshd:sshd-common	CVE-2024-41909	HIGH	2.3.0	2.12.0	https://access.redhat.com/security/cve/CVE-2024-41909 https://github.com/apache/mina-sshd https://github.com/apache/mina-sshd/commit/315739e4e9d1dc7a4ff32ea64936982ed0b73e76 https://github.com/apache/mina-sshd/commit/6b0fd46f64bcb75eeeee31d65f10242660aad7c1 https://github.com/apache/mina-sshd/commit/7b2c781640a7a78a9455b86593a1f63c9e8cab92 https://github.com/apache/mina-sshd/issues/445 https://github.com/apache/mina-sshd/pull/449 https://github.com/apache/mina-sshd/releases/tag/sshd-2.12.0 https://lists.apache.org/thread/vwf1ot8wx1njyy8n19j5j2tcnjnozt3b https://nvd.nist.gov/vuln/detail/CVE-2024-41909 https://security.netapp.com/advisory/ntap-20241011-0006 https://security.netapp.com/advisory/ntap-20241011-0006/ https://www.cve.org/CVERecord?id=CVE-2024-41909
org.apache.sshd:sshd-common	CVE-2024-41909	HIGH	2.3.0	2.12.0	https://access.redhat.com/security/cve/CVE-2024-41909 https://github.com/apache/mina-sshd https://github.com/apache/mina-sshd/commit/315739e4e9d1dc7a4ff32ea64936982ed0b73e76 https://github.com/apache/mina-sshd/commit/6b0fd46f64bcb75eeeee31d65f10242660aad7c1 https://github.com/apache/mina-sshd/commit/7b2c781640a7a78a9455b86593a1f63c9e8cab92 https://github.com/apache/mina-sshd/issues/445 https://github.com/apache/mina-sshd/pull/449 https://github.com/apache/mina-sshd/releases/tag/sshd-2.12.0 https://lists.apache.org/thread/vwf1ot8wx1njyy8n19j5j2tcnjnozt3b https://nvd.nist.gov/vuln/detail/CVE-2024-41909 https://security.netapp.com/advisory/ntap-20241011-0006 https://security.netapp.com/advisory/ntap-20241011-0006/ https://www.cve.org/CVERecord?id=CVE-2024-41909
org.apache.sshd:sshd-common	CVE-2023-35887	MEDIUM	2.3.0	2.9.3	https://access.redhat.com/security/cve/CVE-2023-35887 https://github.com/apache/mina-sshd https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0 https://github.com/apache/mina-sshd/commit/a61e93035f06bff8fc622ad94870fb773d48b9f0 https://github.com/apache/mina-sshd/commit/c20739b43aab0f7bf2ccad982a6cb37b9d5a8a0b https://github.com/apache/mina-sshd/pull/362 https://issues.apache.org/jira/browse/SSHD-1324 https://lists.apache.org/thread/b9qgtqvhnvgfpn0w1gz918p21p53tqk2 https://nvd.nist.gov/vuln/detail/CVE-2023-35887 https://www.cve.org/CVERecord?id=CVE-2023-35887
org.apache.sshd:sshd-common	CVE-2023-35887	MEDIUM	2.3.0	2.9.3	https://access.redhat.com/security/cve/CVE-2023-35887 https://github.com/apache/mina-sshd https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0 https://github.com/apache/mina-sshd/commit/a61e93035f06bff8fc622ad94870fb773d48b9f0 https://github.com/apache/mina-sshd/commit/c20739b43aab0f7bf2ccad982a6cb37b9d5a8a0b https://github.com/apache/mina-sshd/pull/362 https://issues.apache.org/jira/browse/SSHD-1324 https://lists.apache.org/thread/b9qgtqvhnvgfpn0w1gz918p21p53tqk2 https://nvd.nist.gov/vuln/detail/CVE-2023-35887 https://www.cve.org/CVERecord?id=CVE-2023-35887
org.apache.sshd:sshd-common	CVE-2023-35887	MEDIUM	2.3.0	2.9.3	https://access.redhat.com/security/cve/CVE-2023-35887 https://github.com/apache/mina-sshd https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0 https://github.com/apache/mina-sshd/commit/a61e93035f06bff8fc622ad94870fb773d48b9f0 https://github.com/apache/mina-sshd/commit/c20739b43aab0f7bf2ccad982a6cb37b9d5a8a0b https://github.com/apache/mina-sshd/pull/362 https://issues.apache.org/jira/browse/SSHD-1324 https://lists.apache.org/thread/b9qgtqvhnvgfpn0w1gz918p21p53tqk2 https://nvd.nist.gov/vuln/detail/CVE-2023-35887 https://www.cve.org/CVERecord?id=CVE-2023-35887
org.apache.sshd:sshd-common	CVE-2022-45047	CRITICAL	2.4.0	2.9.2	https://access.redhat.com/security/cve/CVE-2022-45047 https://github.com/apache/mina-sshd https://github.com/apache/mina-sshd/commit/03238d51586f6b3c0bdbb1a23cf16799344d6c32 https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0 https://github.com/apache/mina-sshd/commit/5a8fe830b2a2308a2b24ac8115a391af477f64f5 https://nvd.nist.gov/vuln/detail/CVE-2022-45047 https://security.netapp.com/advisory/ntap-20240216-0008/ https://www.cve.org/CVERecord?id=CVE-2022-45047 https://www.mail-archive.com/dev@mina.apache.org/msg39312.html
org.apache.sshd:sshd-common	CVE-2024-41909	HIGH	2.4.0	2.12.0	https://access.redhat.com/security/cve/CVE-2024-41909 https://github.com/apache/mina-sshd https://github.com/apache/mina-sshd/commit/315739e4e9d1dc7a4ff32ea64936982ed0b73e76 https://github.com/apache/mina-sshd/commit/6b0fd46f64bcb75eeeee31d65f10242660aad7c1 https://github.com/apache/mina-sshd/commit/7b2c781640a7a78a9455b86593a1f63c9e8cab92 https://github.com/apache/mina-sshd/issues/445 https://github.com/apache/mina-sshd/pull/449 https://github.com/apache/mina-sshd/releases/tag/sshd-2.12.0 https://lists.apache.org/thread/vwf1ot8wx1njyy8n19j5j2tcnjnozt3b https://nvd.nist.gov/vuln/detail/CVE-2024-41909 https://security.netapp.com/advisory/ntap-20241011-0006 https://security.netapp.com/advisory/ntap-20241011-0006/ https://www.cve.org/CVERecord?id=CVE-2024-41909
org.apache.sshd:sshd-common	CVE-2023-35887	MEDIUM	2.4.0	2.9.3	https://access.redhat.com/security/cve/CVE-2023-35887 https://github.com/apache/mina-sshd https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0 https://github.com/apache/mina-sshd/commit/a61e93035f06bff8fc622ad94870fb773d48b9f0 https://github.com/apache/mina-sshd/commit/c20739b43aab0f7bf2ccad982a6cb37b9d5a8a0b https://github.com/apache/mina-sshd/pull/362 https://issues.apache.org/jira/browse/SSHD-1324 https://lists.apache.org/thread/b9qgtqvhnvgfpn0w1gz918p21p53tqk2 https://nvd.nist.gov/vuln/detail/CVE-2023-35887 https://www.cve.org/CVERecord?id=CVE-2023-35887
org.apache.sshd:sshd-core	CVE-2022-45047	CRITICAL	2.4.0	2.9.2	https://access.redhat.com/security/cve/CVE-2022-45047 https://github.com/apache/mina-sshd https://github.com/apache/mina-sshd/commit/03238d51586f6b3c0bdbb1a23cf16799344d6c32 https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0 https://github.com/apache/mina-sshd/commit/5a8fe830b2a2308a2b24ac8115a391af477f64f5 https://nvd.nist.gov/vuln/detail/CVE-2022-45047 https://security.netapp.com/advisory/ntap-20240216-0008/ https://www.cve.org/CVERecord?id=CVE-2022-45047 https://www.mail-archive.com/dev@mina.apache.org/msg39312.html
org.apache.sshd:sshd-core	CVE-2021-30129	HIGH	2.4.0	2.7.0	http://www.openwall.com/lists/oss-security/2021/07/12/1 https://access.redhat.com/security/cve/CVE-2021-30129 https://issues.apache.org/jira/browse/SSHD-1125 https://lists.apache.org/thread.html/r6d4f78e192a0c8eabd671a018da464024642980ecd24096bde6db36f@%3Cusers.mina.apache.org%3E https://lists.apache.org/thread.html/red01829efa2a8c893c4baff4f23c9312bd938543a9b8658e172b853b@%3Cannounce.apache.org%3E https://nvd.nist.gov/vuln/detail/CVE-2021-30129 https://www.cve.org/CVERecord?id=CVE-2021-30129 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujul2022.html
org.apache.thrift:libthrift	CVE-2020-13949	HIGH	0.13.0	0.14.0	https://access.redhat.com/security/cve/CVE-2020-13949 https://advisory.echohq.com/cve/CVE-2020-13949 https://github.com/advisories/GHSA-g2fg-mr77-6vrm https://github.com/apache/hbase https://github.com/apache/hbase/pull/2958 https://lists.apache.org/thread.html/r01b34416677f1ba869525e1b891ac66fa6f88c024ee4d7cdea6b456b@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r02ba8db500d15a5949e9a7742815438002ba1cf1b361bdda52ed40ca@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r02f7771863383ae993eb83cdfb70c3cb65a355c913242c850f61f1b8@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r0372f0af2dad0b76fbd7a6cfdaad29d50384ad48dda475a5026ff9a3@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r08a7bd19470ef8950d58cc9d9e7b02bc69c43f56c601989a7729cce5@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r1084a911dff90b2733b442ee0f5929d19b168035d447f2d25f534fe4@%3Cissues.solr.apache.org%3E https://lists.apache.org/thread.html/r117d5d2b08d505b69558a2a31b0a1cf8990cd0385060b147e70e76a9@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r12090c81b67d21a814de6cf54428934a5e5613fde222759bbb05e99b@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r13f40151513ff095a44a86556c65597a7e55c00f5e19764a05530266@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r143ca388b0c83fe659db14be76889d50b453b0ee06f423181f736933@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r1456eab5f3768be69436d5b0a68b483eb316eb85eb3ef6eba156a302@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r1504886a550426d3c05772c47b1a6350c3235e51fd1fdffbec43e974@%3Cuser.thrift.apache.org%3E https://lists.apache.org/thread.html/r15eed5d21e16a5cce810c1e096ffcffc36cd08c2f78ce2f9b24b4a6a@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r179119bbfb5610499286a84c316f6789c5afbfa5340edec6eb28d027@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/r17cca685ad53bc8300ee7fcfe874cb784a222343f217dd076e7dc1b6@%3Ccommits.camel.apache.org%3E https://lists.apache.org/thread.html/r18732bb1343894143d68db58fe4c8f56d9cd221b37f1378ed7373372@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r191a9279e2863b68e5496ee4ecd8be0d4fe43b324b934f0d1f106e1d@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r196409cc4df929d540a2e66169104f2b3b258d8bd96b5f083c59ee51@%3Ccommits.camel.apache.org%3E https://lists.apache.org/thread.html/r1d4a247329a8478073163567bbc8c8cb6b49c6bfc2bf58153a857af1@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/r1dea91f0562e0a960b45b1c5635b2a47b258b77171334276bcf260a7@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r1fb2d26b81c64ce96c4fd42b9e6842ff315b02c36518213b6c057350@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r20f6f8f8cf07986dc5304baed3bf4d8a1c4cf135ff6fe3640be4d7ec@%3Cissues.solr.apache.org%3E https://lists.apache.org/thread.html/r278e96edc4bc13efb2cb1620a73e48f569162b833c6bda3e6ea18b80@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r27b7d3d95ffa8498899ef1c9de553d469f8fe857640a3f6e58dba640@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r286e9a13d3ab0550042997219101cb87871834b8d5ec293b0c60f009@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r298a25228868ebc0943d56c8f3641212a0962d2dbcf1507d5860038e@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r2d180180f37c2ab5cebd711d080d01d8452efa8ad43c5d9cd7064621@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r2ed66a3823990306b742b281af1834b9bc85f98259c870b8ffb13d93@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r2f6a547f226579f542eb08793631d1f2d47d7aed7e2f9d11a4e6af9f@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r3550b61639688e0efbc253c6c3e6358851c1f053109f1c149330b535@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r36581cc7047f007dd6aadbdd34e18545ec2c1eb7ccdae6dd47a877a9@%3Ccommits.pulsar.apache.org%3E https://lists.apache.org/thread.html/r3a1291a7ab8ee43db87cb0253371489810877028fc6e7c68dc640926@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r3de0e0c26d4bd00dd28cab27fb44fba11d1c1d20275f7cce71393dd1@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r3e31ec7e8c39db7553be4f4fd4d27cf27c41f1ba9c985995c4ea9c5a@%3Cnotifications.thrift.apache.org%3E https://lists.apache.org/thread.html/r3f3e1d562c528b4bafef2dde51f79dd444a4b68ef24920d68068b6f9@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r3f97dbbbb1b2a7324521208bb595392853714e141a37b8f68d395835@%3Cnotifications.thrift.apache.org%3E https://lists.apache.org/thread.html/r409e296c890753296c544a74d4de0d4a3ce719207a5878262fa2bd71@%3Ccommits.hbase.apache.org%3E https://lists.apache.org/thread.html/r421a9a76811c1aed7637b5fe5376ab14c09ccdd7b70d5211d6e76d1e@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r43dc2b2e928e9d845b07ac075634cb759d91bb852421dc282f87a74a@%3Cdev.thrift.apache.org%3E https://lists.apache.org/thread.html/r449288f6a941a2585262e0f4454fdefe169d5faee33314f6f89fab30@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r4d90b6d8de9697beb38814596d3a0d4994fa9aba1f6731a2c648d3ae@%3Cissues.solr.apache.org%3E https://lists.apache.org/thread.html/r4fa53eacca2ac38904f38dc226caebb3f2f668b2da887f2fd416f4a7@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r515e01a30443cfa2dbb355c44c63149869afd684fb7b0344c58fa67b@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r533a172534ae67f6f17c4d33a1b814d3d5ada9ccd4eb442249f33fa2@%3Ccommits.camel.apache.org%3E https://lists.apache.org/thread.html/r587b4a5bcbc290269df0906bafba074f3fe4e50d4e959212f56fa7ea@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r62aa6d07b23095d980f348d330ed766560f9a9e940fec051f534ce37@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r635133a74fa07ef3331cae49a9a088365922266edd58099a6162a5d3@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r668aed02e287c93403e0b8df16089011ee4a96afc8f479809f1fc07f@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r6990c849aeafe65366794bfd002febd47b7ffa8cf3c059b400bbb11d@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r699c031e6921b0ad0f943848e7ba1d0e88c953619d47908618998f76@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r6ae3c68b0bfe430fb32f24236475276b6302bed625b23f53b68748b5@%3Cuser.thrift.apache.org%3E https://lists.apache.org/thread.html/r6ba4f0817f98bf7c1cb314301cb7a24ba11a0b3e7a5be8b0ae3190b0@%3Cissues.solr.apache.org%3E https://lists.apache.org/thread.html/r6c5b7324274fd361b038c5cc316e99344b7ae20beae7163214fac14d@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r72c3d1582d50b2ca7dd1ee97e81c847a5cf3458be26d42653c39d7a6@%3Ccommits.camel.apache.org%3E https://lists.apache.org/thread.html/r741364444c3b238ab4a161f67f0d3a8f68acc517a39e6a93aa85d753@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r74eb88b422421c65514c23cb9c2b2216efb9254317ea1b6a264fe6dc@%3Ccommits.hbase.apache.org%3E https://lists.apache.org/thread.html/r7597683cc8b87a31ec864835225a543dad112d7841bf1f17bf7eb8db@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r7ae909438ff5a2ffed9211e6ab0bd926396fd0b1fc33f31a406ee704@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r812915ecfa541ad2ca65c68a97b2c014dc87141dfaefc4de85049681@%3Ccommits.camel.apache.org%3E https://lists.apache.org/thread.html/r850522c56c05aa06391546bdb530bb8fc3437f2b77d16e571ae73309@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r869331422580d35b4e65bd74cf3090298c4651bf4f31bfb19ae769da@%3Cissues.solr.apache.org%3E https://lists.apache.org/thread.html/r886b6d9a89b6fa0aafbf0a8f8f14351548d6c6f027886a3646dbd075@%3Cissues.solr.apache.org%3E https://lists.apache.org/thread.html/r8897a41f50d4eb19b268bde99328e943ba586f77779efa6de720c39f@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/r890b8ec5203d70a59a6b1289420d46938d9029ed706aa724978789be@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r89fdd39965efb7c6d22bc21c286d203252cea476e1782724aca0748e@%3Cuser.thrift.apache.org%3E https://lists.apache.org/thread.html/r8dfbefcd606af6737b62461a45a9af9222040b62eab474ff2287cf75@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r90b4473950e26607ed77f3d70f120166f6a36a3f80888e4eeabcaf91@%3Cissues.solr.apache.org%3E https://lists.apache.org/thread.html/r93f23f74315e009f4fb68ef7fc794dceee42cf87fe6613814dcd8c70@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r950ced188d62320fdb84d9e2c6ba896328194952eff7430c4f55e4b0@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/r995b945cc8f6ec976d8c52d42ba931a688b45fb32cbdde715b6a816a@%3Cuser.thrift.apache.org%3E https://lists.apache.org/thread.html/r9b51e7c253cb0989b4c03ed9f4e5f0478e427473357209ccc4d08ebf@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/r9ec75f690dd60fec8621ba992290962705d5b7f0d8fd0a42fab0ac9f@%3Cissues.solr.apache.org%3E https://lists.apache.org/thread.html/ra3f7f06a1759c8e2985ed24ae2f5483393c744c1956d661adc873f2c@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/ra7371efd8363c1cd0f5331aafd359a808cf7277472b8616d7b392128@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/ra9f7c755790313e1adb95d29794043fb102029e803daf4212ae18063@%3Cissues.solr.apache.org%3E https://lists.apache.org/thread.html/race178e9500ab8a5a6112667d27c48559150cadb60f2814bc67c40af@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/rad635e16b300cf434280001ee6ecd2ed2c70987bf16eb862bfa86e02@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/rada9d2244a66ede0be29afc5d5f178a209f9988db56b9b845d955741@%3Ccommits.hbase.apache.org%3E https://lists.apache.org/thread.html/rae95c2234b6644bfd666b2671a1b42a09f38514d0f27cca3c7d5d55a@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/raea1bb8cf2eb39c5e10543f547bdbbdbb563c2ac6377652f161d4e37@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/rb3574bc1036b577b265be510e6b208f0a5d5d84cd7198347dc8482df@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/rb44ec04e5a9b1f87fef97bb5f054010cbfaa3b8586472a3a38a16fca@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/rb51977d392b01434b0b5df5c19b9ad5b6178cfea59e676c14f24c053@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/rb91c32194eb5006f0b0c8bcdbd512c13495a1b277d4d51d45687f036@%3Cissues.solr.apache.org%3E https://lists.apache.org/thread.html/rbc5cad06a46d23253a3c819229efedecfc05f89ef53f5fdde77a86d6@%3Cuser.thrift.apache.org%3E https://lists.apache.org/thread.html/rbfbb81e7fb5d5009caf25798f02f42a7bd064a316097303ba2f9ed76@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/rc48ab5455bdece9a4afab53ca0f1e4f742d5baacb241323454a87b4e@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/rc7a241e0af086b226ff9ccabc4a243d206f0f887037994bfd8fcaaeb@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/rc7a79b08822337c68705f16ee7ddcfd352313b836e78a4b86c7a7e3d@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/rc896ce7761999b088f3adabcb99dde2102b6a66130b8eec6c8265eab@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/rcace846f74ea9e2af2f7c30cef0796724aa74089f109c8029b850163@%3Cdev.hive.apache.org%3E https://lists.apache.org/thread.html/rcae4c66f67e701db44d742156dee1f3e5e4e07ad7ce10c740a76b669@%3Cissues.hive.apache.org%3E https://lists.apache.org/thread.html/rcdf62ecd36e39e4ff9c61802eee4927ce9ecff1602eed1493977ef4c@%3Cuser.thrift.apache.org%3E https://lists.apache.org/thread.html/rd0734d91f16d5b050f0bcff78b4719300042a34fadf5e52d0edf898e@%3Cissues.solr.apache.org%3E https://lists.apache.org/thread.html/rd370fdb419652c5219409b315a6349b07a7e479bd3f151e9a5671774@%3Ccommits.hbase.apache.org%3E https://lists.apache.org/thread.html/rd49d53b146d94a7d3a135f6b505589655ffec24ea470e345d31351bb@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/rd78cdd87d84499a404202f015f55935db3658bd0983ecec81e6b18c6@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/rdc8e0f92d06decaee5db58de4ded16d80016a7db2240a8db17225c49@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/rdcf00186c34d69826d9c6b1f010136c98b00a586136de0061f7d267e@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/rf568168e7f83871969928c0379813da6d034485f8b20fa73884816d6@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/rf603d25213cfff81d6727c259328846b366fd32a43107637527c9768@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/rf65df763f630163a3f620887efec082080555cee1adb0b8eaf2c7ddb@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/rf741d08c7e0ab1542c81ea718467422bd01159ed284796a36ad88311@%3Cissues.hbase.apache.org%3E https://lists.apache.org/thread.html/rf75979ae0ffd526f3afa935a8f0ee13c82808ea8b2bc0325eb9dcd90@%3Ccommits.camel.apache.org%3E https://lists.apache.org/thread.html/rfbb01bb85cdc2022f3b96bdc416dbfcb49a2855b3a340aa88b2e1de9@%3Ccommits.druid.apache.org%3E https://nvd.nist.gov/vuln/detail/CVE-2020-13949 https://security.gentoo.org/glsa/202107-32 https://www.cve.org/CVERecord?id=CVE-2020-13949 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpujan2022.html
org.apache.thrift:libthrift	CVE-2026-43869	HIGH	0.13.0	0.23.0	http://www.openwall.com/lists/oss-security/2026/05/05/3 https://access.redhat.com/errata/RHSA-2026:21769 https://access.redhat.com/errata/RHSA-2026:22347 https://access.redhat.com/errata/RHSA-2026:22423 https://access.redhat.com/errata/RHSA-2026:23345 https://access.redhat.com/errata/RHSA-2026:24503 https://access.redhat.com/errata/RHSA-2026:24539 https://access.redhat.com/errata/RHSA-2026:25273 https://access.redhat.com/errata/RHSA-2026:26586 https://access.redhat.com/errata/RHSA-2026:27126 https://access.redhat.com/errata/RHSA-2026:28010 https://access.redhat.com/errata/RHSA-2026:30651 https://access.redhat.com/errata/RHSA-2026:36882 https://access.redhat.com/errata/RHSA-2026:42644 https://access.redhat.com/security/cve/CVE-2026-43869 https://advisory.echohq.com/cve/CVE-2026-43869 https://bugzilla.redhat.com/show_bug.cgi?id=2466660 https://github.com/apache/thrift https://github.com/apache/thrift/commit/0919c3d5506151514e283a63e1fe1ce83e2449d8 https://github.com/apache/thrift/releases/tag/v0.23.0 https://lists.apache.org/thread/3hsgl1b69wzq3ry39scqbv2dhyl3j52r https://nvd.nist.gov/vuln/detail/CVE-2026-43869 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43869.json https://www.cve.org/CVERecord?id=CVE-2026-43869
org.apache.thrift:libthrift	CVE-2026-43871	HIGH	0.13.0	0.24.0	http://www.openwall.com/lists/oss-security/2026/07/24/33 https://access.redhat.com/security/cve/CVE-2026-43871 https://advisory.echohq.com/cve/CVE-2026-43871 https://github.com/apache/thrift https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9 https://lists.apache.org/thread/l4dwf14zbyqsmkc28c99ojj3t3gg9qby https://nvd.nist.gov/vuln/detail/CVE-2026-43871 https://www.cve.org/CVERecord?id=CVE-2026-43871
org.bitbucket.b_c:jose4j	CVE-2023-31582	HIGH	0.7.0	0.9.3	https://access.redhat.com/security/cve/CVE-2023-31582 https://bitbucket.org/b_c/jose4j https://bitbucket.org/b_c/jose4j/commits/1929fe3 https://bitbucket.org/b_c/jose4j/issues/203/insecure-support-of-setting-pbe-less-then https://github.com/KANIXB/JWTIssues/blob/main/jose4j%20issue.md https://nvd.nist.gov/vuln/detail/CVE-2023-31582 https://www.cve.org/CVERecord?id=CVE-2023-31582
org.bitbucket.b_c:jose4j	CVE-2024-29371	HIGH	0.7.0	0.9.6	https://access.redhat.com/security/cve/CVE-2024-29371 https://advisory.echohq.com/cve/CVE-2024-29371 https://bitbucket.org/b_c/jose4j/commits/19a90a64c47bb07c4aa5462f1316d5c293d81fcf https://bitbucket.org/b_c/jose4j/issues/220/vuln-zip-bomb-attack https://bitbucket.org/b_c/jose4j/wiki/Home https://github.com/advisories/GHSA-3677-xxcr-wjqv https://nvd.nist.gov/vuln/detail/CVE-2024-29371 https://www.cve.org/CVERecord?id=CVE-2024-29371
org.bitbucket.b_c:jose4j	CVE-2023-51775	MEDIUM	0.7.0	0.9.4	https://access.redhat.com/security/cve/CVE-2023-51775 https://bitbucket.org/b_c/jose4j/commits/1afaa1e174b3 https://bitbucket.org/b_c/jose4j/issues/212 https://nvd.nist.gov/vuln/detail/CVE-2023-51775 https://security.netapp.com/advisory/ntap-20241108-0002 https://security.netapp.com/advisory/ntap-20241108-0002/ https://www.cve.org/CVERecord?id=CVE-2023-51775
org.bitbucket.b_c:jose4j	GHSA-jgvc-jfgh-rjvv	MEDIUM	0.7.0	0.9.3	https://bitbucket.org/b_c/jose4j/commits/14e62a8dee9decb4ff6e0625aedc5724601bfdb6 https://bitbucket.org/b_c/jose4j/commits/63b86581e7bfcc2d9d04ee15caea4b5bfb911f59 https://bitbucket.org/b_c/jose4j/commits/tag/jose4j-0.9.3 https://github.com/google/security-research https://github.com/google/security-research/security/advisories/GHSA-jgvc-jfgh-rjvv
org.bouncycastle:bcpg-jdk15on	CVE-2026-3505	HIGH	1.65		https://access.redhat.com/errata/RHSA-2026:13631 https://access.redhat.com/errata/RHSA-2026:17668 https://access.redhat.com/errata/RHSA-2026:18054 https://access.redhat.com/errata/RHSA-2026:18055 https://access.redhat.com/errata/RHSA-2026:18059 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:60239 https://access.redhat.com/errata/RHSA-2026:60246 https://access.redhat.com/errata/RHSA-2026:60247 https://access.redhat.com/errata/RHSA-2026:60248 https://access.redhat.com/errata/RHSA-2026:60249 https://access.redhat.com/errata/RHSA-2026:60250 https://access.redhat.com/errata/RHSA-2026:60251 https://access.redhat.com/errata/RHSA-2026:60252 https://access.redhat.com/errata/RHSA-2026:60254 https://access.redhat.com/errata/RHSA-2026:60256 https://access.redhat.com/errata/RHSA-2026:60259 https://access.redhat.com/security/cve/CVE-2026-3505 https://advisory.echohq.com/cve/CVE-2026-3505 https://bugzilla.redhat.com/show_bug.cgi?id=2458638 https://github.com/advisories/GHSA-cj8j-37rh-8475 https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/commit/dc7530939ffb6cdb57636f3609d98e23b94e71c1 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%903505 https://nvd.nist.gov/vuln/detail/CVE-2026-3505 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3505.json https://www.cve.org/CVERecord?id=CVE-2026-3505
org.bouncycastle:bcpkix-jdk15on	CVE-2025-8916	MEDIUM	1.65	1.79	https://access.redhat.com/security/cve/CVE-2025-8916 https://advisory.echohq.com/cve/CVE-2025-8916 https://cert-portal.siemens.com/productcert/html/ssa-032379.html https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/commit/310b30a4fbf36d13f6cc201ffa7771715641e67e https://github.com/bcgit/bc-java/commit/ff444a479942d88de64004dc82c3ee32a9e9075a https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%908916 https://nvd.nist.gov/vuln/detail/CVE-2025-8916 https://ubuntu.com/security/notices/USN-8108-1 https://www.cve.org/CVERecord?id=CVE-2025-8916
org.bouncycastle:bcpkix-jdk15on	CVE-2026-5588	MEDIUM	1.65	1.84	https://access.redhat.com/errata/RHSA-2026:11720 https://access.redhat.com/errata/RHSA-2026:11721 https://access.redhat.com/errata/RHSA-2026:13631 https://access.redhat.com/errata/RHSA-2026:14272 https://access.redhat.com/errata/RHSA-2026:14276 https://access.redhat.com/errata/RHSA-2026:17668 https://access.redhat.com/errata/RHSA-2026:18054 https://access.redhat.com/errata/RHSA-2026:18055 https://access.redhat.com/errata/RHSA-2026:18059 https://access.redhat.com/errata/RHSA-2026:21772 https://access.redhat.com/errata/RHSA-2026:53644 https://access.redhat.com/errata/RHSA-2026:53645 https://access.redhat.com/errata/RHSA-2026:53646 https://access.redhat.com/errata/RHSA-2026:60239 https://access.redhat.com/errata/RHSA-2026:60246 https://access.redhat.com/errata/RHSA-2026:60247 https://access.redhat.com/errata/RHSA-2026:60248 https://access.redhat.com/errata/RHSA-2026:60249 https://access.redhat.com/errata/RHSA-2026:60250 https://access.redhat.com/errata/RHSA-2026:60251 https://access.redhat.com/errata/RHSA-2026:60252 https://access.redhat.com/errata/RHSA-2026:60254 https://access.redhat.com/errata/RHSA-2026:60256 https://access.redhat.com/errata/RHSA-2026:60259 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/security/cve/CVE-2026-5588 https://advisory.echohq.com/cve/CVE-2026-5588 https://bugzilla.redhat.com/show_bug.cgi?id=2458634 https://github.com/advisories/GHSA-wg6q-6289-32hp https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/commit/656bae0dbd9b1521f840521ff786e78749fe3057 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905588 https://nvd.nist.gov/vuln/detail/CVE-2026-5588 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5588.json https://www.cve.org/CVERecord?id=CVE-2026-5588
org.bouncycastle:bcprov-jdk15on	CVE-2020-28052	HIGH	1.65	1.67	https://access.redhat.com/security/cve/CVE-2020-28052 https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/commit/97578f9b7ed277e6ecb58834e85e3d18385a4219 https://github.com/bcgit/bc-java/wiki/CVE-2020-28052 https://lists.apache.org/thread.html/r167dbc42ef7c59802c2ca1ac14735ef9cf687c25208229993d6206fe@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/r175f5a25d100dbe2b1bd3459b3ce882a84c3ff91b120ed4ff2d57b53@%3Ccommits.pulsar.apache.org%3E https://lists.apache.org/thread.html/r25d53acd06f29244b8a103781b0339c5e7efee9099a4d52f0c230e4a@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/r2ddabd06d94b60cfb0141e4abb23201c628ab925e30742f61a04d013@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/r30a139c165b3da6e0d5536434ab1550534011b1fdfcd2f5d95892c5b@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/r37d332c0bf772f4982d1fdeeb2f88dd71dab6451213e69e43734eadc@%3Ccommits.pulsar.apache.org%3E https://lists.apache.org/thread.html/r4e1619cfefcd031fac62064a3858f5c9229eef907bd5d8ef14c594fc@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/r77af3ac7c3bfbd5454546e13faf7aec21d627bdcf36c9ca240436b94@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/r8c36ba34e80e05eecb1f80071cc834d705616f315b634ec0c7d8f42e@%3Cissues.solr.apache.org%3E https://lists.apache.org/thread.html/r954d80fd18e9dafef6e813963eb7e08c228151c2b6268ecd63b35d1f@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/rc9e441c1576bdc4375d32526d5cf457226928e9c87b9f54ded26271c@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/rcd37d9214b08067a2e8f2b5b4fd123a1f8cb6008698d11ef44028c21@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/rdcbad6d8ce72c79827ed8c635f9a62dd919bb21c94a0b64cab2efc31@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/rddd2237b8636a48d573869006ee809262525efb2b6ffa6eff50d2a2d@%3Cjira.kafka.apache.org%3E https://lists.apache.org/thread.html/rdfd2901b8b697a3f6e2c9c6ecc688fd90d7f881937affb5144d61d6e@%3Ccommits.druid.apache.org%3E https://lists.apache.org/thread.html/rf9abfc0223747a56694825c050cc6b66627a293a32ea926b3de22402@%3Cissues.karaf.apache.org%3E https://lists.apache.org/thread.html/rfc0db1f3c375087e69a239f9284ded72d04fbb55849eadde58fa9dc2@%3Cissues.karaf.apache.org%3E https://nvd.nist.gov/vuln/detail/CVE-2020-28052 https://www.bouncycastle.org/releasenotes.html https://www.cve.org/CVERecord?id=CVE-2020-28052 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://www.oracle.com/security-alerts/cpuoct2021.html https://www.synopsys.com/blogs/software-security/cve-2020-28052-bouncy-castle https://www.synopsys.com/blogs/software-security/cve-2020-28052-bouncy-castle/
org.bouncycastle:bcprov-jdk15on	CVE-2020-15522	MEDIUM	1.65	1.66	https://access.redhat.com/security/cve/CVE-2020-15522 https://github.com/bcgit/bc-csharp/wiki/CVE-2020-15522 https://github.com/bcgit/bc-java/wiki/CVE-2020-15522 https://nvd.nist.gov/vuln/detail/CVE-2020-15522 https://security.netapp.com/advisory/ntap-20210622-0007 https://security.netapp.com/advisory/ntap-20210622-0007/ https://www.bouncycastle.org/releasenotes.html https://www.cve.org/CVERecord?id=CVE-2020-15522
org.bouncycastle:bcprov-jdk15on	CVE-2023-33201	MEDIUM	1.65		https://access.redhat.com/security/cve/CVE-2023-33201 https://bouncycastle.org https://bouncycastle.org/releasenotes.html#r1rv74 https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/commit/ccf93ca736b89250ff4ce079a5aa56f5cbf0ebbd https://github.com/bcgit/bc-java/commit/e8c409a8389c815ea3fda5e8b94c92fdfe583bcc https://github.com/bcgit/bc-java/commits/main/prov/src/main/java/org/bouncycastle/jce/provider/X509LDAPCertStoreSpi.java https://github.com/bcgit/bc-java/wiki/CVE-2023-33201 https://lists.debian.org/debian-lts-announce/2023/08/msg00000.html https://nvd.nist.gov/vuln/detail/CVE-2023-33201 https://security.netapp.com/advisory/ntap-20230824-0008 https://security.netapp.com/advisory/ntap-20230824-0008/ https://ubuntu.com/security/notices/USN-8108-1 https://www.cve.org/CVERecord?id=CVE-2023-33201
org.bouncycastle:bcprov-jdk15on	CVE-2023-33202	MEDIUM	1.65	1.70	https://access.redhat.com/security/cve/CVE-2023-33202 https://bouncycastle.org https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/commit/0c576892862ed41894f49a8f639112e8d66d229c https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902023%E2%80%9033202 https://github.com/bcgit/bc-java/wiki/CVE-2023-33202 https://nvd.nist.gov/vuln/detail/CVE-2023-33202 https://security.netapp.com/advisory/ntap-20240125-0001 https://security.netapp.com/advisory/ntap-20240125-0001/ https://www.cve.org/CVERecord?id=CVE-2023-33202
org.bouncycastle:bcprov-jdk15on	CVE-2024-29857	MEDIUM	1.65	1.78	https://access.redhat.com/security/cve/CVE-2024-29857 https://github.com/bcgit/bc-csharp/commit/56daa6eac526f165416d17f661422d60de0dfd63 https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9029857 https://github.com/bcgit/bc-java/commit/efc498ca4caa340ac2fe11f2efee06c1a294501f https://github.com/bcgit/bc-java/commit/fee80dd230e7fba132d03a34f1dd1d6aae0d0281 https://github.com/bcgit/bc-java/issues/1635 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9029857 https://nvd.nist.gov/vuln/detail/CVE-2024-29857 https://security.netapp.com/advisory/ntap-20241206-0008 https://security.netapp.com/advisory/ntap-20241206-0008/ https://ubuntu.com/security/notices/USN-8108-1 https://www.bouncycastle.org/latest_releases.html https://www.cve.org/CVERecord?id=CVE-2024-29857
org.bouncycastle:bcprov-jdk15on	CVE-2024-30171	MEDIUM	1.65	1.78	https://access.redhat.com/security/cve/CVE-2024-30171 https://github.com/bcgit/bc-csharp/commit/c984b8bfd8544dfc55dba91a02cbbbb9c580c217 https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9030171 https://github.com/bcgit/bc-java/commit/d7d5e735abd64bf0f413f54fd9e495fc02400fb0 https://github.com/bcgit/bc-java/commit/e0569dcb1dea9d421d84fc4c5c5688fe101afa2d https://github.com/bcgit/bc-java/issues/1528 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9030171 https://nvd.nist.gov/vuln/detail/CVE-2024-30171 https://people.redhat.com/~hkario/marvin/ https://security.netapp.com/advisory/ntap-20240614-0008 https://security.netapp.com/advisory/ntap-20240614-0008/ https://ubuntu.com/security/notices/USN-8108-1 https://www.bouncycastle.org/latest_releases.html https://www.cve.org/CVERecord?id=CVE-2024-30171
org.bouncycastle:bcprov-jdk15on	CVE-2024-34447	MEDIUM	1.65	1.78	http://security.netapp.com/advisory/ntap-20240614-0007 https://access.redhat.com/security/cve/CVE-2024-34447 https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/issues/1656 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9034447 https://nvd.nist.gov/vuln/detail/CVE-2024-34447 https://security.netapp.com/advisory/ntap-20240614-0007/ https://ubuntu.com/security/notices/USN-8108-1 https://www.bouncycastle.org/latest_releases.html https://www.cve.org/CVERecord?id=CVE-2024-34447
org.codehaus.jettison:jettison	CVE-2022-40150	HIGH	1.4.0	1.5.2	https://access.redhat.com/security/cve/CVE-2022-40150 https://advisory.echohq.com/cve/CVE-2022-40150 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46549 https://github.com/advisories/GHSA-x27m-9w8j-5vcw https://github.com/jettison-json/jettison https://github.com/jettison-json/jettison/issues/45 https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.1 https://lists.debian.org/debian-lts-announce/2022/12/msg00045.html https://nvd.nist.gov/vuln/detail/CVE-2022-40150 https://ubuntu.com/security/notices/USN-6177-1 https://www.cve.org/CVERecord?id=CVE-2022-40150 https://www.debian.org/security/2023/dsa-5312
org.codehaus.jettison:jettison	CVE-2022-45685	HIGH	1.4.0	1.5.2	https://access.redhat.com/security/cve/CVE-2022-45685 https://advisory.echohq.com/cve/CVE-2022-45685 https://github.com/advisories/GHSA-7rf3-mqpx-h7xg https://github.com/jettison-json/jettison https://github.com/jettison-json/jettison/issues/54 https://lists.debian.org/debian-lts-announce/2022/12/msg00045.html https://nvd.nist.gov/vuln/detail/CVE-2022-45685 https://ubuntu.com/security/notices/USN-6177-1 https://www.cve.org/CVERecord?id=CVE-2022-45685 https://www.debian.org/security/2023/dsa-5312
org.codehaus.jettison:jettison	CVE-2022-45693	HIGH	1.4.0	1.5.2	https://access.redhat.com/security/cve/CVE-2022-45693 https://advisory.echohq.com/cve/CVE-2022-45693 https://github.com/advisories/GHSA-grr4-wv38-f68w https://github.com/jettison-json/jettison https://github.com/jettison-json/jettison/issues/52 https://lists.debian.org/debian-lts-announce/2022/12/msg00045.html https://nvd.nist.gov/vuln/detail/CVE-2022-45693 https://ubuntu.com/security/notices/USN-6177-1 https://www.cve.org/CVERecord?id=CVE-2022-45693 https://www.debian.org/security/2023/dsa-5312
org.codehaus.jettison:jettison	CVE-2023-1436	HIGH	1.4.0	1.5.4	https://access.redhat.com/security/cve/CVE-2023-1436 https://advisory.echohq.com/cve/CVE-2023-1436 https://github.com/advisories/GHSA-q6g2-g7f3-rr83 https://github.com/jettison-json/jettison https://github.com/jettison-json/jettison/issues/60 https://github.com/jettison-json/jettison/pull/62 https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.4 https://nvd.nist.gov/vuln/detail/CVE-2023-1436 https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911 https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911/ https://ubuntu.com/security/notices/USN-6179-1 https://www.cve.org/CVERecord?id=CVE-2023-1436
org.codehaus.jettison:jettison	CVE-2022-40149	MEDIUM	1.4.0	1.5.1	https://access.redhat.com/security/cve/CVE-2022-40149 https://advisory.echohq.com/cve/CVE-2022-40149 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46538 https://github.com/advisories/GHSA-56h3-78gp-v83r https://github.com/jettison-json/jettison https://github.com/jettison-json/jettison/issues/45 https://github.com/jettison-json/jettison/pull/49/files https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.1 https://lists.debian.org/debian-lts-announce/2022/11/msg00011.html https://nvd.nist.gov/vuln/detail/CVE-2022-40149 https://ubuntu.com/security/notices/USN-6177-1 https://www.cve.org/CVERecord?id=CVE-2022-40149 https://www.debian.org/security/2023/dsa-5312
org.eclipse.jgit:org.eclipse.jgit	CVE-2023-4759	HIGH	5.9.0.202009080501-r	6.6.1.202309021850-r, 5.13.3.202401111512-r	https://access.redhat.com/security/cve/CVE-2023-4759 https://git.eclipse.org/c/jgit/jgit.git https://git.eclipse.org/c/jgit/jgit.git/commit/?id=9072103f3b3cf64dd12ad2949836ab98f62dabf1 https://github.com/eclipse-jgit/jgit/issues/30 https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/11 https://nvd.nist.gov/vuln/detail/CVE-2023-4759 https://projects.eclipse.org/projects/technology.jgit/releases/5.13.3 https://projects.eclipse.org/projects/technology.jgit/releases/6.6.1 https://www.cve.org/CVERecord?id=CVE-2023-4759
org.eclipse.jgit:org.eclipse.jgit	CVE-2025-4949	MEDIUM	5.9.0.202009080501-r	7.2.1.202505142326-r, 7.1.1.202505221757-r, 7.0.1.202505221510-r, 6.10.1.202505221210-r, 6.0.0.202111291000-r, 5.13.4.202507202350-r	https://access.redhat.com/security/cve/CVE-2025-4949 https://advisory.echohq.com/cve/CVE-2025-4949 https://github.com/advisories/GHSA-vrpq-qp53-qv56 https://github.com/eclipse-jgit/jgit https://gitlab.eclipse.org/security/cve-assignement/-/issues/64 https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/281 https://nvd.nist.gov/vuln/detail/CVE-2025-4949 https://projects.eclipse.org/projects/technology.jgit/releases/5.13.4 https://projects.eclipse.org/projects/technology.jgit/releases/5.13.5 https://projects.eclipse.org/projects/technology.jgit/releases/6.10.1 https://projects.eclipse.org/projects/technology.jgit/releases/7.0.1 https://projects.eclipse.org/projects/technology.jgit/releases/7.1.1 https://projects.eclipse.org/projects/technology.jgit/releases/7.2.1 https://www.cve.org/CVERecord?id=CVE-2025-4949
org.glassfish:jakarta.el	CVE-2021-28170	MEDIUM	3.0.3.jbossorg-2	3.0.4	https://access.redhat.com/security/cve/CVE-2021-28170 https://github.com/eclipse-ee4j/el-ri https://github.com/eclipse-ee4j/el-ri/issues/155 https://github.com/eclipse-ee4j/el-ri/pull/160/commits/b6a3943ac5fba71cbc6719f092e319caa747855b https://nvd.nist.gov/vuln/detail/CVE-2021-28170 https://security.snyk.io/vuln/SNYK-JAVA-ORGGLASSFISH-1297098 https://security.snyk.io/vuln/SNYK-JAVA-ORGGLASSFISH-2841368 https://securitylab.github.com/advisories/GHSL-2020-021-jakarta-el https://securitylab.github.com/advisories/GHSL-2020-021-jakarta-el/ https://www.cve.org/CVERecord?id=CVE-2021-28170 https://www.oracle.com/security-alerts/cpuapr2022.html
org.hibernate.validator:hibernate-validator	CVE-2023-1932	MEDIUM	6.0.21.Final	6.2.0.Final	https://access.redhat.com/security/cve/CVE-2023-1932 https://bugzilla.redhat.com/show_bug.cgi?id=1809444 https://github.com/hibernate/hibernate-validator https://nvd.nist.gov/vuln/detail/CVE-2023-1932 https://www.cve.org/CVERecord?id=CVE-2023-1932
org.hibernate.validator:hibernate-validator	CVE-2025-35036	MEDIUM	6.0.21.Final	6.2.0.CR1, 7.0.0.CR1	https://access.redhat.com/security/cve/CVE-2025-35036 https://docs.jboss.org/hibernate/stable/validator/reference/en-US/html_single/#section-hibernateconstraintvalidatorcontext https://github.com/hibernate/hibernate-validator https://github.com/hibernate/hibernate-validator/commit/05f795bb7cf18856004f40e5042709e550ed0d6e https://github.com/hibernate/hibernate-validator/commit/254858d9dcc4e7cd775d1b0f47f482218077c5e1 https://github.com/hibernate/hibernate-validator/commit/d2db40b9e7d22c7a0b44d7665242dfc7b4d14d78 https://github.com/hibernate/hibernate-validator/commit/e076293b0ee1bfa97b6e67d05ad9eee1ad77e893 https://github.com/hibernate/hibernate-validator/compare/6.1.7.Final...6.2.0.Final https://github.com/hibernate/hibernate-validator/pull/1138 https://hibernate.atlassian.net/browse/HV-1816 https://hibernate.org/validator/documentation/migration-guide/#6-2-0-cr1 https://in.relation.to/2021/01/06/hibernate-validator-700-62-final-released/#expression-language https://labs.watchtowr.com/expression-payloads-meet-mayhem-cve-2025-4427-and-cve-2025-4428 https://labs.watchtowr.com/expression-payloads-meet-mayhem-cve-2025-4427-and-cve-2025-4428/ https://nvd.nist.gov/vuln/detail/CVE-2025-35036 https://www.cve.org/CVERecord?id=CVE-2020-5245 https://www.cve.org/CVERecord?id=CVE-2025-35036 https://www.cve.org/CVERecord?id=CVE-2025-4428
org.hibernate:hibernate-core	CVE-2026-0603	HIGH	5.3.20.Final	5.3.38	https://access.redhat.com/errata/RHSA-2026:4915 https://access.redhat.com/errata/RHSA-2026:4916 https://access.redhat.com/errata/RHSA-2026:4917 https://access.redhat.com/errata/RHSA-2026:4924 https://access.redhat.com/errata/RHSA-2026:6011 https://access.redhat.com/errata/RHSA-2026:6012 https://access.redhat.com/errata/RHSA-2026:76128 https://access.redhat.com/errata/RHSA-2026:76129 https://access.redhat.com/errata/RHSA-2026:76130 https://access.redhat.com/errata/RHSA-2026:76132 https://access.redhat.com/errata/RHSA-2026:76134 https://access.redhat.com/security/cve/CVE-2026-0603 https://advisory.echohq.com/cve/CVE-2026-0603 https://bugzilla.redhat.com/show_bug.cgi?id=2427147 https://github.com/advisories/GHSA-2p5w-cvg5-gc5c https://github.com/hibernate/hibernate-orm https://github.com/hibernate/hibernate-orm/commit/3f820fdf16ee4d1f556bc73b259625416d703048 https://nvd.nist.gov/vuln/detail/CVE-2026-0603 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0603.json https://www.cve.org/CVERecord?id=CVE-2026-0603
org.hornetq:hornetq-core-client	CVE-2024-51127	HIGH	2.4.7.Final		http://hornetq.com https://access.redhat.com/security/cve/CVE-2024-51127 https://github.com/JAckLosingHeart/CWE-378/blob/main/CVE-2024-51127.md https://github.com/darranl/hornetq https://github.com/hornetq/hornetq/blob/HornetQ_2_4_9_Final/hornetq-core-client/src/main/java/org/hornetq/core/client/impl/ClientConsumerImpl.java#L665C35-L665C49 https://nvd.nist.gov/vuln/detail/CVE-2024-51127 https://www.cve.org/CVERecord?id=CVE-2024-51127
org.infinispan.protostream:protostream	CVE-2023-5236	HIGH	4.3.4.Final	4.6.2.Final	https://access.redhat.com/errata/RHSA-2023:5396 https://access.redhat.com/security/cve/CVE-2023-5236 https://bugzilla.redhat.com/show_bug.cgi?id=2240999 https://github.com/infinispan/infinispan https://github.com/infinispan/protostream/commit/4501b6b307a6bab545346f66238f8be7e42f83eb https://github.com/infinispan/protostream/commit/4ef66958f2c4890ae1c6a7acd629d27bd88aa4cb https://github.com/infinispan/protostream/commit/50320b5987dc87bc04b616b87e8cf93472ee19c1 https://issues.redhat.com/browse/IPROTO-262 https://issues.redhat.com/browse/IPROTO-263 https://issues.redhat.com/browse/ISPN-14534 https://nvd.nist.gov/vuln/detail/CVE-2023-5236 https://security.netapp.com/advisory/ntap-20240125-0004 https://security.netapp.com/advisory/ntap-20240125-0004/ https://www.cve.org/CVERecord?id=CVE-2023-5236
org.infinispan:infinispan-cachestore-jdbc	CVE-2023-5384	MEDIUM	11.0.4.Final	15.0.0.Dev07, 14.0.25.Final	https://access.redhat.com/errata/RHSA-2023:7676 https://access.redhat.com/security/cve/CVE-2023-5384 https://bugzilla.redhat.com/show_bug.cgi?id=2242156 https://github.com/infinispan/infinispan https://github.com/infinispan/infinispan/commit/7140fc9b026ec55786c1aa78bb3cd8bf951fad47 https://github.com/infinispan/infinispan/commit/fd3e18ec3b1a4e7fcfd79392f5bf78792a2b8c61 https://github.com/infinispan/infinispan/pull/11555 https://github.com/infinispan/infinispan/pull/11995 https://issues.redhat.com/browse/ISPN-15202 https://nvd.nist.gov/vuln/detail/CVE-2023-5384 https://security.netapp.com/advisory/ntap-20240125-0004 https://security.netapp.com/advisory/ntap-20240125-0004/ https://www.cve.org/CVERecord?id=CVE-2023-5384
org.infinispan:infinispan-cachestore-remote	CVE-2023-5384	MEDIUM	11.0.4.Final	15.0.0.Dev07, 14.0.25.Final	https://access.redhat.com/errata/RHSA-2023:7676 https://access.redhat.com/security/cve/CVE-2023-5384 https://bugzilla.redhat.com/show_bug.cgi?id=2242156 https://github.com/infinispan/infinispan https://github.com/infinispan/infinispan/commit/7140fc9b026ec55786c1aa78bb3cd8bf951fad47 https://github.com/infinispan/infinispan/commit/fd3e18ec3b1a4e7fcfd79392f5bf78792a2b8c61 https://github.com/infinispan/infinispan/pull/11555 https://github.com/infinispan/infinispan/pull/11995 https://issues.redhat.com/browse/ISPN-15202 https://nvd.nist.gov/vuln/detail/CVE-2023-5384 https://security.netapp.com/advisory/ntap-20240125-0004 https://security.netapp.com/advisory/ntap-20240125-0004/ https://www.cve.org/CVERecord?id=CVE-2023-5384
org.infinispan:infinispan-client-hotrod	CVE-2023-5384	MEDIUM	11.0.4.Final	15.0.0.Dev07, 14.0.25.Final	https://access.redhat.com/errata/RHSA-2023:7676 https://access.redhat.com/security/cve/CVE-2023-5384 https://bugzilla.redhat.com/show_bug.cgi?id=2242156 https://github.com/infinispan/infinispan https://github.com/infinispan/infinispan/commit/7140fc9b026ec55786c1aa78bb3cd8bf951fad47 https://github.com/infinispan/infinispan/commit/fd3e18ec3b1a4e7fcfd79392f5bf78792a2b8c61 https://github.com/infinispan/infinispan/pull/11555 https://github.com/infinispan/infinispan/pull/11995 https://issues.redhat.com/browse/ISPN-15202 https://nvd.nist.gov/vuln/detail/CVE-2023-5384 https://security.netapp.com/advisory/ntap-20240125-0004 https://security.netapp.com/advisory/ntap-20240125-0004/ https://www.cve.org/CVERecord?id=CVE-2023-5384
org.infinispan:infinispan-commons	CVE-2023-5384	MEDIUM	11.0.4.Final	15.0.0.Dev07, 14.0.25.Final	https://access.redhat.com/errata/RHSA-2023:7676 https://access.redhat.com/security/cve/CVE-2023-5384 https://bugzilla.redhat.com/show_bug.cgi?id=2242156 https://github.com/infinispan/infinispan https://github.com/infinispan/infinispan/commit/7140fc9b026ec55786c1aa78bb3cd8bf951fad47 https://github.com/infinispan/infinispan/commit/fd3e18ec3b1a4e7fcfd79392f5bf78792a2b8c61 https://github.com/infinispan/infinispan/pull/11555 https://github.com/infinispan/infinispan/pull/11995 https://issues.redhat.com/browse/ISPN-15202 https://nvd.nist.gov/vuln/detail/CVE-2023-5384 https://security.netapp.com/advisory/ntap-20240125-0004 https://security.netapp.com/advisory/ntap-20240125-0004/ https://www.cve.org/CVERecord?id=CVE-2023-5384
org.infinispan:infinispan-core	CVE-2020-25711	MEDIUM	11.0.4.Final	11.0.6.Final	https://access.redhat.com/security/cve/CVE-2020-25711 https://bugzilla.redhat.com/show_bug.cgi?id=1897618 https://nvd.nist.gov/vuln/detail/CVE-2020-25711 https://security.netapp.com/advisory/ntap-20220210-0023 https://security.netapp.com/advisory/ntap-20220210-0023/ https://www.cve.org/CVERecord?id=CVE-2020-25711
org.infinispan:infinispan-core	CVE-2023-5384	MEDIUM	11.0.4.Final	15.0.0.Dev07, 14.0.25.Final	https://access.redhat.com/errata/RHSA-2023:7676 https://access.redhat.com/security/cve/CVE-2023-5384 https://bugzilla.redhat.com/show_bug.cgi?id=2242156 https://github.com/infinispan/infinispan https://github.com/infinispan/infinispan/commit/7140fc9b026ec55786c1aa78bb3cd8bf951fad47 https://github.com/infinispan/infinispan/commit/fd3e18ec3b1a4e7fcfd79392f5bf78792a2b8c61 https://github.com/infinispan/infinispan/pull/11555 https://github.com/infinispan/infinispan/pull/11995 https://issues.redhat.com/browse/ISPN-15202 https://nvd.nist.gov/vuln/detail/CVE-2023-5384 https://security.netapp.com/advisory/ntap-20240125-0004 https://security.netapp.com/advisory/ntap-20240125-0004/ https://www.cve.org/CVERecord?id=CVE-2023-5384
org.jberet:jberet-core	CVE-2024-1102	MEDIUM	1.3.7.Final	2.2.1.Final	https://access.redhat.com/errata/RHSA-2024:1677 https://access.redhat.com/errata/RHSA-2024:3580 https://access.redhat.com/errata/RHSA-2024:3581 https://access.redhat.com/errata/RHSA-2024:3583 https://access.redhat.com/security/cve/CVE-2024-1102 https://bugzilla.redhat.com/show_bug.cgi?id=2262060 https://github.com/jberet/jsr352 https://github.com/jberet/jsr352/commit/eeef999663d7da0e372aeeeac26ecf7201a3121d https://github.com/jberet/jsr352/issues/452 https://nvd.nist.gov/vuln/detail/CVE-2024-1102 https://www.cve.org/CVERecord?id=CVE-2024-1102
org.jboss.hal:hal-console	CVE-2025-23366	MEDIUM	3.2.11.Final	3.7.7.Final	https://access.redhat.com/errata/RHSA-2025:10924 https://access.redhat.com/errata/RHSA-2025:10925 https://access.redhat.com/errata/RHSA-2025:10926 https://access.redhat.com/errata/RHSA-2025:10931 https://access.redhat.com/security/cve/CVE-2025-23366 https://bugzilla.redhat.com/show_bug.cgi?id=2337619 https://github.com/hal/console https://github.com/hal/console/releases/tag/v3.7.7 https://github.com/hal/console/security/advisories/GHSA-jhvj-f397-8w6q https://nvd.nist.gov/vuln/detail/CVE-2025-23366 https://www.cve.org/CVERecord?id=CVE-2025-23366
org.jboss.hal:hal-console	GHSA-64gp-r758-8pfm	MEDIUM	3.2.11.Final	3.7.7.Final	https://github.com/hal/console https://github.com/hal/console/releases/tag/v3.7.7 https://github.com/hal/console/security/advisories/GHSA-64gp-r758-8pfm https://issues.redhat.com/browse/WFLY-19969
org.jboss.remoting:jboss-remoting	CVE-2020-35510	HIGH	5.0.19.Final	5.0.20.Final	https://access.redhat.com/security/cve/CVE-2020-35510 https://bugzilla.redhat.com/show_bug.cgi?id=1905796 https://nvd.nist.gov/vuln/detail/CVE-2020-35510 https://www.cve.org/CVERecord?id=CVE-2020-35510
org.jboss.remoting:jboss-remoting	CVE-2020-35510	HIGH	5.0.19.Final	5.0.20.Final	https://access.redhat.com/security/cve/CVE-2020-35510 https://bugzilla.redhat.com/show_bug.cgi?id=1905796 https://nvd.nist.gov/vuln/detail/CVE-2020-35510 https://www.cve.org/CVERecord?id=CVE-2020-35510
org.jboss.remoting:jboss-remoting	CVE-2020-35510	HIGH	5.0.19.Final	5.0.20.Final	https://access.redhat.com/security/cve/CVE-2020-35510 https://bugzilla.redhat.com/show_bug.cgi?id=1905796 https://nvd.nist.gov/vuln/detail/CVE-2020-35510 https://www.cve.org/CVERecord?id=CVE-2020-35510
org.jboss.resteasy:resteasy-client	CVE-2020-25633	MEDIUM	3.13.2.Final	4.5.7.Final, 3.14.0.Final	https://access.redhat.com/security/cve/CVE-2020-25633 https://bugzilla.redhat.com/show_bug.cgi?id=1879042 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25633 https://github.com/resteasy/Resteasy/pull/2665/commits/13c808b5967242eec1e877edbc0014a84dcd6eb0 https://issues.redhat.com/browse/RESTEASY-2820 https://nvd.nist.gov/vuln/detail/CVE-2020-25633 https://ubuntu.com/security/notices/USN-7351-1 https://ubuntu.com/security/notices/USN-7630-1 https://www.cve.org/CVERecord?id=CVE-2020-25633
org.jboss.resteasy:resteasy-client-microprofile	CVE-2020-25633	MEDIUM	3.13.2.Final	4.5.7.Final, 3.14.0.Final	https://access.redhat.com/security/cve/CVE-2020-25633 https://bugzilla.redhat.com/show_bug.cgi?id=1879042 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25633 https://github.com/resteasy/Resteasy/pull/2665/commits/13c808b5967242eec1e877edbc0014a84dcd6eb0 https://issues.redhat.com/browse/RESTEASY-2820 https://nvd.nist.gov/vuln/detail/CVE-2020-25633 https://ubuntu.com/security/notices/USN-7351-1 https://ubuntu.com/security/notices/USN-7630-1 https://www.cve.org/CVERecord?id=CVE-2020-25633
org.jboss.resteasy:resteasy-multipart-provider	CVE-2023-0482	MEDIUM	3.13.2.Final	6.2.3.Final, 5.0.6.Final, 4.7.8.Final, 3.15.5.Final	https://access.redhat.com/security/cve/CVE-2023-0482 https://bugzilla.redhat.com/show_bug.cgi?id=2166004 https://github.com/orgs/resteasy/discussions/3415 https://github.com/orgs/resteasy/discussions/3504 https://github.com/orgs/resteasy/discussions/3506 https://github.com/resteasy/resteasy https://github.com/resteasy/resteasy/commit/3d8a551d80b98f185edaff6f895188ec8211366b https://github.com/resteasy/resteasy/pull/3409 https://github.com/resteasy/resteasy/pull/3409/ https://github.com/resteasy/resteasy/pull/3409/commits/807d7456f2137cde8ef7c316707211bf4e542d56 https://github.com/resteasy/resteasy/pull/3410 https://github.com/resteasy/resteasy/pull/3412 https://github.com/resteasy/resteasy/pull/3413 https://github.com/resteasy/resteasy/pull/3423 https://github.com/resteasy/resteasy/security/advisories/GHSA-2c6g-pfx3-w7h8 https://issues.redhat.com/browse/RESTEASY-3286 https://nvd.nist.gov/vuln/detail/CVE-2023-0482 https://security.netapp.com/advisory/ntap-20230427-0001 https://security.netapp.com/advisory/ntap-20230427-0001/ https://ubuntu.com/security/notices/USN-7351-1 https://ubuntu.com/security/notices/USN-7630-1 https://www.cve.org/CVERecord?id=CVE-2023-0482
org.jboss.xnio:xnio-api	CVE-2023-5685	HIGH	3.8.2.Final	3.8.14.Final	https://access.redhat.com/errata/RHSA-2023:7637 https://access.redhat.com/errata/RHSA-2023:7638 https://access.redhat.com/errata/RHSA-2023:7639 https://access.redhat.com/errata/RHSA-2023:7641 https://access.redhat.com/errata/RHSA-2024:10207 https://access.redhat.com/errata/RHSA-2024:10208 https://access.redhat.com/errata/RHSA-2024:2707 https://access.redhat.com/security/cve/CVE-2023-5685 https://bugzilla.redhat.com/show_bug.cgi?id=2241822 https://github.com/xnio/xnio https://github.com/xnio/xnio/blob/3.8.13.Final/api/src/main/java/org/xnio/AbstractIoFuture.java#L249 https://github.com/xnio/xnio/commit/ffabdcdda508ef87aeadad5ca3f854e274d60ec1 https://issues.redhat.com/browse/XNIO-423 https://nvd.nist.gov/vuln/detail/CVE-2023-5685 https://www.cve.org/CVERecord?id=CVE-2023-5685
org.jboss.xnio:xnio-api	CVE-2023-5685	HIGH	3.8.2.Final	3.8.14.Final	https://access.redhat.com/errata/RHSA-2023:7637 https://access.redhat.com/errata/RHSA-2023:7638 https://access.redhat.com/errata/RHSA-2023:7639 https://access.redhat.com/errata/RHSA-2023:7641 https://access.redhat.com/errata/RHSA-2024:10207 https://access.redhat.com/errata/RHSA-2024:10208 https://access.redhat.com/errata/RHSA-2024:2707 https://access.redhat.com/security/cve/CVE-2023-5685 https://bugzilla.redhat.com/show_bug.cgi?id=2241822 https://github.com/xnio/xnio https://github.com/xnio/xnio/blob/3.8.13.Final/api/src/main/java/org/xnio/AbstractIoFuture.java#L249 https://github.com/xnio/xnio/commit/ffabdcdda508ef87aeadad5ca3f854e274d60ec1 https://issues.redhat.com/browse/XNIO-423 https://nvd.nist.gov/vuln/detail/CVE-2023-5685 https://www.cve.org/CVERecord?id=CVE-2023-5685
org.jboss.xnio:xnio-api	CVE-2023-5685	HIGH	3.8.2.Final	3.8.14.Final	https://access.redhat.com/errata/RHSA-2023:7637 https://access.redhat.com/errata/RHSA-2023:7638 https://access.redhat.com/errata/RHSA-2023:7639 https://access.redhat.com/errata/RHSA-2023:7641 https://access.redhat.com/errata/RHSA-2024:10207 https://access.redhat.com/errata/RHSA-2024:10208 https://access.redhat.com/errata/RHSA-2024:2707 https://access.redhat.com/security/cve/CVE-2023-5685 https://bugzilla.redhat.com/show_bug.cgi?id=2241822 https://github.com/xnio/xnio https://github.com/xnio/xnio/blob/3.8.13.Final/api/src/main/java/org/xnio/AbstractIoFuture.java#L249 https://github.com/xnio/xnio/commit/ffabdcdda508ef87aeadad5ca3f854e274d60ec1 https://issues.redhat.com/browse/XNIO-423 https://nvd.nist.gov/vuln/detail/CVE-2023-5685 https://www.cve.org/CVERecord?id=CVE-2023-5685
org.jboss:jboss-ejb-client	CVE-2020-14297	MEDIUM	4.0.33.Final	4.0.34.Final	https://access.redhat.com/errata/RHSA-2020:3141 https://access.redhat.com/errata/RHSA-2020:3142 https://access.redhat.com/errata/RHSA-2020:3143 https://access.redhat.com/errata/RHSA-2020:3144 https://access.redhat.com/errata/RHSA-2020:3461 https://access.redhat.com/errata/RHSA-2020:3462 https://access.redhat.com/errata/RHSA-2020:3463 https://access.redhat.com/errata/RHSA-2020:3464 https://access.redhat.com/errata/RHSA-2020:3501 https://access.redhat.com/errata/RHSA-2020:3539 https://access.redhat.com/errata/RHSA-2020:3637 https://access.redhat.com/errata/RHSA-2020:3638 https://access.redhat.com/errata/RHSA-2020:3639 https://access.redhat.com/errata/RHSA-2020:3642 https://access.redhat.com/errata/RHSA-2020:3817 https://access.redhat.com/errata/RHSA-2021:3140 https://access.redhat.com/security/cve/CVE-2020-14297 https://access.redhat.com/solutions/21906 https://bugzilla.redhat.com/show_bug.cgi?id=1853595 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14297 https://github.com/wildfly/jboss-ejb-client https://github.com/wildfly/jboss-ejb-client/commit/e5f8e4b591f1698a53adc7e430584ca2a8fc9f1b https://github.com/wildfly/jboss-ejb-client/commits/4.0.34.Final https://nvd.nist.gov/vuln/detail/CVE-2020-14297 https://www.cve.org/CVERecord?id=CVE-2020-14297
org.jboss:jboss-ejb-client	CVE-2020-14297	MEDIUM	4.0.33.Final	4.0.34.Final	https://access.redhat.com/errata/RHSA-2020:3141 https://access.redhat.com/errata/RHSA-2020:3142 https://access.redhat.com/errata/RHSA-2020:3143 https://access.redhat.com/errata/RHSA-2020:3144 https://access.redhat.com/errata/RHSA-2020:3461 https://access.redhat.com/errata/RHSA-2020:3462 https://access.redhat.com/errata/RHSA-2020:3463 https://access.redhat.com/errata/RHSA-2020:3464 https://access.redhat.com/errata/RHSA-2020:3501 https://access.redhat.com/errata/RHSA-2020:3539 https://access.redhat.com/errata/RHSA-2020:3637 https://access.redhat.com/errata/RHSA-2020:3638 https://access.redhat.com/errata/RHSA-2020:3639 https://access.redhat.com/errata/RHSA-2020:3642 https://access.redhat.com/errata/RHSA-2020:3817 https://access.redhat.com/errata/RHSA-2021:3140 https://access.redhat.com/security/cve/CVE-2020-14297 https://access.redhat.com/solutions/21906 https://bugzilla.redhat.com/show_bug.cgi?id=1853595 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14297 https://github.com/wildfly/jboss-ejb-client https://github.com/wildfly/jboss-ejb-client/commit/e5f8e4b591f1698a53adc7e430584ca2a8fc9f1b https://github.com/wildfly/jboss-ejb-client/commits/4.0.34.Final https://nvd.nist.gov/vuln/detail/CVE-2020-14297 https://www.cve.org/CVERecord?id=CVE-2020-14297
org.jboss:jboss-ejb-client	CVE-2021-20250	MEDIUM	4.0.33.Final	4.0.39	https://access.redhat.com/security/cve/CVE-2021-20250 https://bugzilla.redhat.com/show_bug.cgi?id=1929479 https://nvd.nist.gov/vuln/detail/CVE-2021-20250 https://www.cve.org/CVERecord?id=CVE-2021-20250
org.jboss:jboss-ejb-client	CVE-2021-20250	MEDIUM	4.0.33.Final	4.0.39	https://access.redhat.com/security/cve/CVE-2021-20250 https://bugzilla.redhat.com/show_bug.cgi?id=1929479 https://nvd.nist.gov/vuln/detail/CVE-2021-20250 https://www.cve.org/CVERecord?id=CVE-2021-20250
org.jsoup:jsoup	CVE-2021-37714	HIGH	1.8.3	1.14.2	https://access.redhat.com/security/cve/CVE-2021-37714 https://github.com/jhy/jsoup https://github.com/jhy/jsoup/security/advisories/GHSA-m72m-mhq2-9p6c https://jsoup.org/news/release-1.14.1 https://jsoup.org/news/release-1.14.2 https://lists.apache.org/thread.html/r215009dbf7467a9f6506d0c0024cb36cad30071010e62c9352cfaaf0@%3Cissues.maven.apache.org%3E https://lists.apache.org/thread.html/r377b93d79817ce649e9e68b3456e6f499747ef1643fa987b342e082e@%3Cissues.maven.apache.org%3E https://lists.apache.org/thread.html/r3d71f18adb78e50f626dde689161ca63d3b7491bd9718fcddfaecba7@%3Cissues.maven.apache.org%3E https://lists.apache.org/thread.html/r50e9c9466c592ca9d707a5dea549524d19e3287da08d8392f643960e@%3Cissues.maven.apache.org%3E https://lists.apache.org/thread.html/r685c5235235ad0c26e86d0ee987fb802c9675de6081dbf0516464e0b@%3Cnotifications.james.apache.org%3E https://lists.apache.org/thread.html/r97404676a5cf591988faedb887d64e278f522adcaa823d89ca69defe@%3Cnotifications.james.apache.org%3E https://lists.apache.org/thread.html/rc3354080fc67fb50b45b3c2d12dc4ca2a3c1c78dad3d3ba012c038aa@%3Cnotifications.james.apache.org%3E https://nvd.nist.gov/vuln/detail/CVE-2021-37714 https://security.netapp.com/advisory/ntap-20220210-0022 https://security.netapp.com/advisory/ntap-20220210-0022/ https://www.cve.org/CVERecord?id=CVE-2021-37714 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpujul2022.html
org.jsoup:jsoup	CVE-2026-75140	HIGH	1.8.3	1.23.2	https://access.redhat.com/security/cve/CVE-2026-75140 https://advisory.echohq.com/cve/CVE-2026-75140 https://github.com/jhy/jsoup https://github.com/jhy/jsoup/commit/862ba2f1d48ee95609183dbcfc848c9fd7afc76a https://github.com/jhy/jsoup/pull/2556 https://github.com/jhy/jsoup/releases/tag/jsoup-1.23.2 https://nvd.nist.gov/vuln/detail/CVE-2026-75140 https://www.cve.org/CVERecord?id=CVE-2026-75140 https://www.vulncheck.com/advisories/jsoup-uncontrolled-resource-consumption-in-xmltreebuilder
org.jsoup:jsoup	CVE-2022-36033	MEDIUM	1.8.3	1.15.3	https://access.redhat.com/security/cve/CVE-2022-36033 https://github.com/jhy/jsoup https://github.com/jhy/jsoup/releases/tag/jsoup-1.15.3 https://github.com/jhy/jsoup/security/advisories/GHSA-gp7f-rwcx-9369 https://jsoup.org/news/release-1.15.3 https://nvd.nist.gov/vuln/detail/CVE-2022-36033 https://security.netapp.com/advisory/ntap-20221104-0006 https://security.netapp.com/advisory/ntap-20221104-0006/ https://www.cve.org/CVERecord?id=CVE-2022-36033
org.keycloak:keycloak-adapter-core	CVE-2026-1180	MEDIUM	12.0.4		https://access.redhat.com/errata/RHSA-2026:6477 https://access.redhat.com/errata/RHSA-2026:6478 https://access.redhat.com/security/cve/CVE-2026-1180 https://bugzilla.redhat.com/show_bug.cgi?id=2430781 https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/issues/45645 https://nvd.nist.gov/vuln/detail/CVE-2026-1180 https://www.cve.org/CVERecord?id=CVE-2026-1180
org.keycloak:keycloak-core	CVE-2021-20195	CRITICAL	12.0.4	13.0.0	https://access.redhat.com/security/cve/CVE-2021-20195 https://bugzilla.redhat.com/show_bug.cgi?id=1919143 https://github.com/keycloak/keycloak/commit/717d9515fa131e3d8c8936e41b2e52270fdec976 https://nvd.nist.gov/vuln/detail/CVE-2021-20195 https://www.cve.org/CVERecord?id=CVE-2021-20195
org.keycloak:keycloak-core	CVE-2021-20202	HIGH	12.0.4	13.0.0	https://access.redhat.com/security/cve/CVE-2021-20202 https://bugzilla.redhat.com/show_bug.cgi?id=1922128 https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-7gf3-89f6-823j https://issues.redhat.com/browse/KEYCLOAK-17000 https://nvd.nist.gov/vuln/detail/CVE-2021-20202 https://www.cve.org/CVERecord?id=CVE-2021-20202
org.keycloak:keycloak-core	CVE-2021-3632	HIGH	12.0.4	15.1.0	https://access.redhat.com/security/cve/CVE-2021-3632 https://bugzilla.redhat.com/show_bug.cgi?id=1978196 https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/commit/65480cb5a11630909c086f79d396004499fbd1e4 https://github.com/keycloak/keycloak/pull/8203 https://issues.redhat.com/browse/KEYCLOAK-18500 https://nvd.nist.gov/vuln/detail/CVE-2021-3632 https://www.cve.org/CVERecord?id=CVE-2021-3632
org.keycloak:keycloak-core	CVE-2023-6841	HIGH	12.0.4	24.0.0	https://access.redhat.com/security/cve/CVE-2023-6841 https://bugzilla.redhat.com/show_bug.cgi?id=2254714 https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/issues/32837 https://github.com/keycloak/keycloak/releases/tag/24.0.0 https://nvd.nist.gov/vuln/detail/CVE-2023-6841 https://www.cve.org/CVERecord?id=CVE-2023-6841
org.keycloak:keycloak-core	CVE-2024-10039	HIGH	12.0.4	26.0.6	https://access.redhat.com/security/cve/CVE-2024-10039 https://advisory.echohq.com/cve/CVE-2024-10039 https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/issues/35217 https://github.com/keycloak/keycloak/security/advisories/GHSA-93ww-43rr-79v3 https://nvd.nist.gov/vuln/detail/CVE-2024-10039 https://www.cve.org/CVERecord?id=CVE-2024-10039
org.keycloak:keycloak-core	CVE-2020-10770	MEDIUM	12.0.4	13.0.0	http://packetstormsecurity.com/files/164499/Keycloak-12.0.1-Server-Side-Request-Forgery.html https://access.redhat.com/security/cve/CVE-2020-10770 https://bugzilla.redhat.com/show_bug.cgi?id=1846270 https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak-documentation/pull/1086 https://github.com/keycloak/keycloak/pull/7714 https://issues.redhat.com/browse/KEYCLOAK-14019 https://issues.redhat.com/browse/KEYCLOAK-3426 https://nvd.nist.gov/vuln/detail/CVE-2020-10770 https://www.cve.org/CVERecord?id=CVE-2020-10770
org.keycloak:keycloak-core	CVE-2020-27838	MEDIUM	12.0.4	13.0.0	https://access.redhat.com/security/cve/CVE-2020-27838 https://bugzilla.redhat.com/show_bug.cgi?id=1906797 https://github.com/keycloak/keycloak/commit/9356843c6c3d7097d010b3bb6f91e25fcaba378c https://github.com/keycloak/keycloak/pull/7790 https://nvd.nist.gov/vuln/detail/CVE-2020-27838 https://www.cve.org/CVERecord?id=CVE-2020-27838
org.keycloak:keycloak-core	CVE-2020-35509	MEDIUM	12.0.4	14.0.0	https://access.redhat.com/security/cve/CVE-2020-35509 https://access.redhat.com/security/cve/cve-2020-35509 https://bugzilla.redhat.com/show_bug.cgi?id=1912427 https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/blob/4f330f4a57cbfcf6202b60546518261c66e59a35/services/src/main/java/org/keycloak/authentication/authenticators/x509/ValidateX509CertificateUsername.java#L74-L76 https://github.com/keycloak/keycloak/commit/478319348bdfdb9b6d39122f41edf2af79f679bb https://github.com/keycloak/keycloak/pull/6330 https://github.com/keycloak/keycloak/pull/8067 https://nvd.nist.gov/vuln/detail/CVE-2020-35509 https://www.cve.org/CVERecord?id=CVE-2020-35509
org.keycloak:keycloak-core	CVE-2021-20262	MEDIUM	12.0.4		https://access.redhat.com/security/cve/CVE-2021-20262 https://bugzilla.redhat.com/show_bug.cgi?id=1933639 https://github.com/keycloak/keycloak/security/advisories/GHSA-ff8c-cgcp-p9gm https://nvd.nist.gov/vuln/detail/CVE-2021-20262 https://www.cve.org/CVERecord?id=CVE-2021-20262
org.keycloak:keycloak-core	CVE-2021-3856	MEDIUM	12.0.4	15.1.0	https://access.redhat.com/security/cve/CVE-2021-3856 https://bugzilla.redhat.com/show_bug.cgi?id=2010164 https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/commit/73f0474008e1bebd0733e62a22aceda9e5de6743 https://github.com/keycloak/keycloak/pull/8588 https://issues.redhat.com/browse/KEYCLOAK-19422 https://nvd.nist.gov/vuln/detail/CVE-2021-3856 https://www.cve.org/CVERecord?id=CVE-2021-3856
org.keycloak:keycloak-core	CVE-2022-0225	MEDIUM	12.0.4		https://access.redhat.com/security/cve/CVE-2022-0225 https://bugzilla.redhat.com/show_bug.cgi?id=2040268 https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/security/advisories/GHSA-755v-r4x4-qf7m https://nvd.nist.gov/vuln/detail/CVE-2022-0225 https://www.cve.org/CVERecord?id=CVE-2022-0225
org.keycloak:keycloak-core	CVE-2022-1466	MEDIUM	12.0.4	17.0.1	https://access.redhat.com/security/cve/CVE-2022-1466 https://bugzilla.redhat.com/show_bug.cgi?id=2050228 https://github.com/keycloak/keycloak https://nvd.nist.gov/vuln/detail/CVE-2022-1466 https://www.cve.org/CVERecord?id=CVE-2022-1466 https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-076.txt https://www.syss.de/pentest-blog/fehlerhafte-autorisierung-bei-red-hat-single-sign-on-750ga-syss-2021-076
org.keycloak:keycloak-core	CVE-2023-0091	MEDIUM	12.0.4	20.0.3	https://access.redhat.com/security/cve/CVE-2023-0091 https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/security/advisories/GHSA-v436-q368-hvgg https://github.com/keycloak/security/issues/27 https://nvd.nist.gov/vuln/detail/CVE-2023-0091 https://www.cve.org/CVERecord?id=CVE-2023-0091
org.keycloak:keycloak-core	CVE-2023-0105	MEDIUM	12.0.4	22.0.1	https://access.redhat.com/security/cve/CVE-2023-0105 https://bugzilla.redhat.com/show_bug.cgi?id=2158910 https://github.com/advisories/GHSA-c7xw-p58w-h6fj https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/commit/87a50d3ba790b049e436c9925874f9b418af7988 https://github.com/keycloak/keycloak/security/advisories/GHSA-c7xw-p58w-h6fj https://nvd.nist.gov/vuln/detail/CVE-2023-0105 https://www.cve.org/CVERecord?id=CVE-2023-0105
org.keycloak:keycloak-core	CVE-2023-1664	MEDIUM	12.0.4	21.1.2	https://access.redhat.com/security/cve/CVE-2023-1664 https://bugzilla.redhat.com/show_bug.cgi?id=2182196&comment#0 https://github.com/advisories/GHSA-5cc8-pgp5-7mpm https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/security/advisories/GHSA-5cc8-pgp5-7mpm https://nvd.nist.gov/vuln/detail/CVE-2023-1664 https://www.cve.org/CVERecord?id=CVE-2023-1664
org.keycloak:keycloak-core	CVE-2023-6927	MEDIUM	12.0.4	23.0.4	https://access.redhat.com/errata/RHSA-2024:0094 https://access.redhat.com/errata/RHSA-2024:0095 https://access.redhat.com/errata/RHSA-2024:0096 https://access.redhat.com/errata/RHSA-2024:0097 https://access.redhat.com/errata/RHSA-2024:0098 https://access.redhat.com/errata/RHSA-2024:0100 https://access.redhat.com/errata/RHSA-2024:0101 https://access.redhat.com/errata/RHSA-2024:0798 https://access.redhat.com/errata/RHSA-2024:0799 https://access.redhat.com/errata/RHSA-2024:0800 https://access.redhat.com/errata/RHSA-2024:0801 https://access.redhat.com/errata/RHSA-2024:0804 https://access.redhat.com/security/cve/CVE-2023-6927 https://bugzilla.redhat.com/show_bug.cgi?id=2255027 https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/security/advisories/GHSA-9vm7-v8wj-3fqw https://nvd.nist.gov/vuln/detail/CVE-2023-6927 https://www.cve.org/CVERecord?id=CVE-2023-6927
org.keycloak:keycloak-core	CVE-2024-7260	MEDIUM	12.0.4	24.0.7	https://access.redhat.com/errata/RHSA-2024:6502 https://access.redhat.com/errata/RHSA-2024:6503 https://access.redhat.com/security/cve/CVE-2024-7260 https://bugzilla.redhat.com/show_bug.cgi?id=2301875 https://github.com/keycloak/keycloak https://nvd.nist.gov/vuln/detail/CVE-2024-7260 https://www.cve.org/CVERecord?id=CVE-2024-7260
org.keycloak:keycloak-core	CVE-2024-7318	MEDIUM	12.0.4	24.0.7, 25.0.4	https://access.redhat.com/errata/RHSA-2024:6502 https://access.redhat.com/errata/RHSA-2024:6503 https://access.redhat.com/security/cve/CVE-2024-7318 https://bugzilla.redhat.com/show_bug.cgi?id=2301876 https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/security/advisories/GHSA-xmmm-jw76-q7vg https://nvd.nist.gov/vuln/detail/CVE-2024-7318 https://www.cve.org/CVERecord?id=CVE-2024-7318
org.keycloak:keycloak-core	GHSA-755v-r4x4-qf7m	MEDIUM	12.0.4	20.0.0	https://github.com/keycloak/keycloak https://github.com/keycloak/keycloak/security/advisories/GHSA-755v-r4x4-qf7m
org.keycloak:keycloak-core	CVE-2024-4028	LOW	12.0.4		https://access.redhat.com/security/cve/CVE-2024-4028 https://advisory.echohq.com/cve/CVE-2024-4028 https://bugzilla.redhat.com/show_bug.cgi?id=2276418 https://github.com/keycloak/keycloak https://nvd.nist.gov/vuln/detail/CVE-2024-4028 https://www.cve.org/CVERecord?id=CVE-2024-4028
org.mariadb.jdbc:mariadb-java-client	CVE-2026-55856	MEDIUM	2.3.0	2.7.14, 3.3.5, 3.4.3, 3.5.9	https://access.redhat.com/security/cve/CVE-2026-55856 https://advisory.echohq.com/cve/CVE-2026-55856 https://github.com/mariadb-corporation/mariadb-connector-j https://github.com/mariadb-corporation/mariadb-connector-j/commit/149ec6a626376214966c01f42d48be1b80d06056 https://github.com/mariadb-corporation/mariadb-connector-j/commit/d90b9872322c76b05a48219be66bff1d33102f8a https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.4.3 https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.5.9 https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-g9jj-cgmh-9f38 https://hackerone.com/reports/3777370 https://jira.mariadb.org/browse/CONJ-1325 https://nvd.nist.gov/vuln/detail/CVE-2026-55856 https://www.cve.org/CVERecord?id=CVE-2026-55856
org.mariadb.jdbc:mariadb-java-client	CVE-2026-55857	MEDIUM	2.3.0	2.7.14, 3.3.5, 3.4.3, 3.5.9	https://access.redhat.com/security/cve/CVE-2026-55857 https://advisory.echohq.com/cve/CVE-2026-55857 https://github.com/mariadb-corporation/mariadb-connector-j https://github.com/mariadb-corporation/mariadb-connector-j/commit/a8599ab1cbe4b8818ea945bf56a4e012c302b388 https://github.com/mariadb-corporation/mariadb-connector-j/commit/f4a727c764d1cf48fd0c3d5e301dfa92503e0a58 https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.4.3 https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.5.9 https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-qxvw-fvwx-5cp7 https://jira.mariadb.org/browse/CONJ-1320 https://nvd.nist.gov/vuln/detail/CVE-2026-55857 https://www.cve.org/CVERecord?id=CVE-2026-55857
org.mariadb.jdbc:mariadb-java-client	CVE-2026-55858	MEDIUM	2.3.0	2.7.14, 3.3.5, 3.4.3, 3.5.9	https://access.redhat.com/security/cve/CVE-2026-55858 https://advisory.echohq.com/cve/CVE-2026-55858 https://github.com/mariadb-corporation/mariadb-connector-j https://github.com/mariadb-corporation/mariadb-connector-j/commit/300716bef1e1d0370a41be7863b88aa2d55fbb69 https://github.com/mariadb-corporation/mariadb-connector-j/commit/7b3c69221b5463ee03472654040b3f6b9e5329c7 https://github.com/mariadb-corporation/mariadb-connector-j/commit/8cfd9df697372ad4ed09fe87a34b34babb6d43d6 https://github.com/mariadb-corporation/mariadb-connector-j/commit/c555c9b477521be0c35c3a5461f9f46681553607 https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/2.7.14 https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.3.5 https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.4.3 https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.5.9 https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-xvr9-35cr-46v9 https://jira.mariadb.org/browse/CONJ-1317 https://nvd.nist.gov/vuln/detail/CVE-2026-55858 https://www.cve.org/CVERecord?id=CVE-2026-55858
org.mariadb.jdbc:mariadb-java-client	CVE-2026-61700	LOW	2.3.0	2.7.14, 3.3.5, 3.4.3, 3.5.9	https://access.redhat.com/security/cve/CVE-2026-61700 https://advisory.echohq.com/cve/CVE-2026-61700 https://github.com/mariadb-corporation/mariadb-connector-j https://github.com/mariadb-corporation/mariadb-connector-j/commit/0205d8be947918566cd9ce5a9db149541bbc8dee https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.5.9 https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-wxmm-q36w-r9xj https://nvd.nist.gov/vuln/detail/CVE-2026-61700 https://www.cve.org/CVERecord?id=CVE-2026-61700
org.picketlink:picketlink-common	CVE-2014-3530	HIGH	2.5.5.SP12-redhat-00009	2.7.0.Final	http://rhn.redhat.com/errata/RHSA-2014-0883.html http://rhn.redhat.com/errata/RHSA-2014-0884.html http://rhn.redhat.com/errata/RHSA-2014-0885.html http://rhn.redhat.com/errata/RHSA-2014-0886.html http://rhn.redhat.com/errata/RHSA-2015-0091.html http://rhn.redhat.com/errata/RHSA-2015-0675.html http://rhn.redhat.com/errata/RHSA-2015-0720.html http://rhn.redhat.com/errata/RHSA-2015-0765.html http://rhn.redhat.com/errata/RHSA-2015-1888.html http://secunia.com/advisories/60047 http://secunia.com/advisories/60124 http://www.securitytracker.com/id/1030607 https://access.redhat.com/security/cve/CVE-2014-3530 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1112987 https://exchange.xforce.ibmcloud.com/vulnerabilities/94700 https://github.com/picketlink/picketlink https://github.com/picketlink/picketlink/commit/8c78668e4f08cf3c4ed14d8a36d402dcf02cb057 https://issues.jboss.org/browse/PLINK-509 https://nvd.nist.gov/vuln/detail/CVE-2014-3530 https://www.cve.org/CVERecord?id=CVE-2014-3530
org.postgresql:postgresql	CVE-2024-1597	CRITICAL	42.2.10	42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2	http://www.openwall.com/lists/oss-security/2024/04/02/6 https://access.redhat.com/errata/RHSA-2024:1435 https://access.redhat.com/errata/RHSA-2024:1436 https://access.redhat.com/security/cve/CVE-2024-1597 https://bugzilla.redhat.com/2266523 https://bugzilla.redhat.com/show_bug.cgi?id=2266523 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1597 https://errata.almalinux.org/8/ALSA-2024-1435.html https://errata.rockylinux.org/RLSA-2024:1436 https://github.com/pgjdbc/pgjdbc https://github.com/pgjdbc/pgjdbc/commit/06abfb78a627277a580d4df825f210e96a4e14ee https://github.com/pgjdbc/pgjdbc/commit/06abfb78a627277a580d4df825f210e96a4e14ee%20%28REL42.7.2%29 https://github.com/pgjdbc/pgjdbc/commit/1b1d6b53eca90409af0069d5327d4fdf8d40a255%20%28REL42.5.5%29 https://github.com/pgjdbc/pgjdbc/commit/475e3e2af3033c666fc1c0015159b35455118ae5%20%28REL42.5.5%29 https://github.com/pgjdbc/pgjdbc/commit/93b0fcb2711d9c1e3a2a03134369738a02a58b40 https://github.com/pgjdbc/pgjdbc/commit/93b0fcb2711d9c1e3a2a03134369738a02a58b40%20%28REL42.7.2%29 https://github.com/pgjdbc/pgjdbc/commit/990d63f6be401ab40de5eb303a75924c9e71903c%20%28REL42.2.28%29 https://github.com/pgjdbc/pgjdbc/commit/b9b3777671c8a5cc580e1985f61337d39d47c730%20%28REL42.2.28%29 https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-24rp-q3w6-vc56 https://linux.oracle.com/cve/CVE-2024-1597.html https://linux.oracle.com/errata/ELSA-2024-1436.html https://lists.debian.org/debian-lts-announce/2024/05/msg00007.html https://lists.debian.org/debian-lts-announce/2024/12/msg00017.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TZQTSMESZD2RJ5XBPSXH3TIQVUW5DIUU/ https://nvd.nist.gov/vuln/detail/CVE-2024-1597 https://security.netapp.com/advisory/ntap-20240419-0008/ https://www.cve.org/CVERecord?id=CVE-2024-1597 https://www.enterprisedb.com/docs/jdbc_connector/latest/01_jdbc_rel_notes/ https://www.enterprisedb.com/docs/security/assessments/cve-2024-1597/ https://www.sonarsource.com/blog/double-dash-double-trouble-a-subtle-sql-injection-flaw/
org.postgresql:postgresql	CVE-2020-13692	HIGH	42.2.10	42.2.13	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13692.json https://access.redhat.com/security/cve/CVE-2020-13692 https://errata.almalinux.org/8/ALSA-2020-3176.html https://github.com/pgjdbc/pgjdbc/commit/14b62aca4764d496813f55a43d050b017e01eb65 https://jdbc.postgresql.org/documentation/changelog.html#version_42.2.13 https://linux.oracle.com/cve/CVE-2020-13692.html https://linux.oracle.com/errata/ELSA-2020-3285.html https://lists.apache.org/thread.html/r00bcc6b2da972e0d6332a4ebc7807e17305d8b8e7fb2ae63d2a3cbfb@%3Ccommits.camel.apache.org%3E https://lists.apache.org/thread.html/r01ae1b3d981cf2e563e9b5b0a6ea54fb3cac8e9a0512ee5269e3420e@%3Ccommits.camel.apache.org%3E https://lists.apache.org/thread.html/r0478a1aa9ae0dbd79d8f7b38d0d93fa933ac232e2b430b6f31a103c0@%3Ccommits.camel.apache.org%3E https://lists.apache.org/thread.html/r1aae77706aab7d89b4fe19be468fc3c73e9cc84ff79cc2c3bd07c05a@%3Ccommits.camel.apache.org%3E https://lists.apache.org/thread.html/r4bdea189c9991aae7a929d28f575ec46e49ed3d68fa5235825f38a4f@%3Cnotifications.netbeans.apache.org%3E https://lists.apache.org/thread.html/r631f967db6260d6178740a3314a35d9421facd8212e62320275fa78e@%3Ccommits.camel.apache.org%3E https://lists.apache.org/thread.html/r7f6d019839df17646ffd0046a99146cacf40492a6c92078f65fd32e0@%3Ccommits.camel.apache.org%3E https://lists.apache.org/thread.html/rb89f92aba44f524d5c270e0c44ca7aec4704691c37fe106cf73ec977@%3Cnotifications.netbeans.apache.org%3E https://lists.apache.org/thread.html/rfe363bf3a46d440ad57fd05c0e313025c7218364bbdc5fd8622ea7ae@%3Ccommits.camel.apache.org%3E https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCCAPM6FSNOC272DLSNQ6YHXS3OMHGJC https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCCAPM6FSNOC272DLSNQ6YHXS3OMHGJC/ https://nvd.nist.gov/vuln/detail/CVE-2020-13692 https://security.netapp.com/advisory/ntap-20200619-0005 https://security.netapp.com/advisory/ntap-20200619-0005/ https://ubuntu.com/security/notices/USN-5238-1 https://www.cve.org/CVERecord?id=CVE-2020-13692 https://www.debian.org/security/2022/dsa-5196
org.postgresql:postgresql	CVE-2022-21724	HIGH	42.2.10	42.2.25, 42.3.2	https://access.redhat.com/security/cve/CVE-2022-21724 https://github.com/advisories/GHSA-v7wg-cpwc-24m4 https://github.com/pgjdbc/pgjdbc https://github.com/pgjdbc/pgjdbc/commit/f4d0ed69c0b3aae8531d83d6af4c57f22312c813 https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-v7wg-cpwc-24m4 https://lists.debian.org/debian-lts-announce/2022/05/msg00027.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BVEO7BEFXPBVHSPYL3YKQWZI6DYXQLFS https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BVEO7BEFXPBVHSPYL3YKQWZI6DYXQLFS/ https://nvd.nist.gov/vuln/detail/CVE-2022-21724 https://security.netapp.com/advisory/ntap-20220311-0005 https://security.netapp.com/advisory/ntap-20220311-0005/ https://www.cve.org/CVERecord?id=CVE-2022-21724 https://www.debian.org/security/2022/dsa-5196
org.postgresql:postgresql	CVE-2022-31197	HIGH	42.2.10	42.2.26, 42.4.1, 42.3.7	https://access.redhat.com/errata/RHSA-2023:0318 https://access.redhat.com/security/cve/CVE-2022-31197 https://bugzilla.redhat.com/2129428 https://bugzilla.redhat.com/show_bug.cgi?id=2129428 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31197 https://errata.almalinux.org/9/ALSA-2023-0318.html https://errata.rockylinux.org/RLSA-2023:0318 https://github.com/pgjdbc/pgjdbc https://github.com/pgjdbc/pgjdbc/commit/739e599d52ad80f8dcd6efedc6157859b1a9d637 https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-r38f-c4h4-hqq2 https://linux.oracle.com/cve/CVE-2022-31197.html https://linux.oracle.com/errata/ELSA-2023-0318.html https://lists.debian.org/debian-lts-announce/2022/10/msg00009.html https://lists.debian.org/debian-lts-announce/2024/12/msg00017.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I6WHUADTZBBQLVHO4YG4XCWDGWBT4LRP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I6WHUADTZBBQLVHO4YG4XCWDGWBT4LRP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTFE6SV33P5YYU2GNTQZQKQRVR3GYE4S https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTFE6SV33P5YYU2GNTQZQKQRVR3GYE4S/ https://nvd.nist.gov/vuln/detail/CVE-2022-31197 https://www.cve.org/CVERecord?id=CVE-2022-31197
org.postgresql:postgresql	CVE-2026-42198	HIGH	42.2.10	42.7.11	https://access.redhat.com/errata/RHSA-2026:19098 https://access.redhat.com/errata/RHSA-2026:22304 https://access.redhat.com/errata/RHSA-2026:24348 https://access.redhat.com/errata/RHSA-2026:25030 https://access.redhat.com/errata/RHSA-2026:52928 https://access.redhat.com/errata/RHSA-2026:52929 https://access.redhat.com/errata/RHSA-2026:52930 https://access.redhat.com/errata/RHSA-2026:52978 https://access.redhat.com/errata/RHSA-2026:54532 https://access.redhat.com/errata/RHSA-2026:59277 https://access.redhat.com/errata/RHSA-2026:59278 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-42198 https://advisory.echohq.com/cve/CVE-2026-42198 https://bugzilla.redhat.com/2463857 https://bugzilla.redhat.com/show_bug.cgi?id=2463857 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42198 https://errata.almalinux.org/8/ALSA-2026-25030.html https://errata.rockylinux.org/RLSA-2026:22304 https://github.com/pgjdbc/pgjdbc https://github.com/pgjdbc/pgjdbc/releases/tag/REL42.7.11 https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-98qh-xjc8-98pq https://linux.oracle.com/cve/CVE-2026-42198.html https://linux.oracle.com/errata/ELSA-2026-25030.html https://nvd.nist.gov/vuln/detail/CVE-2026-42198 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42198.json https://www.cve.org/CVERecord?id=CVE-2026-42198
org.postgresql:postgresql	CVE-2022-41946	MEDIUM	42.2.10	42.2.27, 42.3.8, 42.4.3, 42.5.1	https://access.redhat.com/errata/RHSA-2023:2867 https://access.redhat.com/security/cve/CVE-2022-41946 https://bugzilla.redhat.com/2153399 https://errata.almalinux.org/8/ALSA-2023-2867.html https://github.com/pgjdbc/pgjdbc https://github.com/pgjdbc/pgjdbc/commit/9008dc9aade6dbfe4efafcd6872ebc55f4699cf5 https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-562r-vg33-8x8h https://linux.oracle.com/cve/CVE-2022-41946.html https://linux.oracle.com/errata/ELSA-2023-2867.html https://lists.debian.org/debian-lts-announce/2022/12/msg00003.html https://lists.debian.org/debian-lts-announce/2024/12/msg00017.html https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/25TY2L3RMVNOC7VAHJEAO7PTT6M6JJAD https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/25TY2L3RMVNOC7VAHJEAO7PTT6M6JJAD/ https://nvd.nist.gov/vuln/detail/CVE-2022-41946 https://security.netapp.com/advisory/ntap-20240329-0003 https://security.netapp.com/advisory/ntap-20240329-0003/ https://www.cve.org/CVERecord?id=CVE-2022-41946
org.postgresql:postgresql	GHSA-673j-qm5f-xpv8	MEDIUM	42.2.10	42.3.3	https://github.com/pgjdbc/pgjdbc https://github.com/pgjdbc/pgjdbc/commit/f6d47034a4ce292e1a659fa00963f6f713117064 https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-673j-qm5f-xpv8
org.postgresql:postgresql	CVE-2022-26520	LOW	42.2.10	42.3.3	https://access.redhat.com/security/cve/CVE-2022-26520 https://github.com/pgjdbc/pgjdbc https://github.com/pgjdbc/pgjdbc/pull/2454/commits/017b929977b4f85795f9ad2fa5de6e80978b8ccc https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-673j-qm5f-xpv8 https://jdbc.postgresql.org/documentation/changelog.html#version_42.3.3 https://jdbc.postgresql.org/documentation/head/tomcat.html https://nvd.nist.gov/vuln/detail/CVE-2022-26520 https://www.cve.org/CVERecord?id=CVE-2022-26520 https://www.debian.org/security/2022/dsa-5196
org.wildfly.core:wildfly-controller	CVE-2023-4061	MEDIUM	13.0.3.Final	22.0.0.Final	https://access.redhat.com/errata/RHSA-2023:5484 https://access.redhat.com/errata/RHSA-2023:5485 https://access.redhat.com/errata/RHSA-2023:5486 https://access.redhat.com/errata/RHSA-2023:5488 https://access.redhat.com/security/cve/CVE-2023-4061 https://bugzilla.redhat.com/show_bug.cgi?id=2228608 https://github.com/wildfly/wildfly-core https://github.com/wildfly/wildfly-core/commit/25728f370c2e90969854717ba4bb5182727f3f49 https://github.com/wildfly/wildfly-core/pull/5703 https://nvd.nist.gov/vuln/detail/CVE-2023-4061 https://www.cve.org/CVERecord?id=CVE-2023-4061
org.wildfly.core:wildfly-elytron-integration	CVE-2025-23368	HIGH	13.0.3.Final	32.0.0.Beta3, 31.0.3.Final	https://access.redhat.com/errata/RHSA-2026:18054 https://access.redhat.com/errata/RHSA-2026:18055 https://access.redhat.com/errata/RHSA-2026:18059 https://access.redhat.com/errata/RHSA-2026:33371 https://access.redhat.com/security/cve/CVE-2025-23368 https://bugzilla.redhat.com/show_bug.cgi?id=2337621 https://github.com/wildfly/wildfly-core https://github.com/wildfly/wildfly-core/commit/11e873031c522a0b36afb59880ce4dd59efd0bc0 https://github.com/wildfly/wildfly-core/commit/a6f9d7534aa44de741337756f8377ad3a81f7695 https://github.com/wildfly/wildfly-core/pull/6634 https://github.com/wildfly/wildfly-core/pull/6635 https://github.com/wildfly/wildfly-core/security/advisories/GHSA-qhp6-6p8p-2rqh https://nvd.nist.gov/vuln/detail/CVE-2025-23368 https://www.cve.org/CVERecord?id=CVE-2025-23368 https://www.gruppotim.it/it/footer/red-team.html
org.wildfly.core:wildfly-server	CVE-2025-23367	MEDIUM	13.0.3.Final	27.0.1.Final, 28.0.0.Beta2	https://access.redhat.com/errata/RHSA-2025:3465 https://access.redhat.com/errata/RHSA-2025:3467 https://access.redhat.com/errata/RHSA-2025:3989 https://access.redhat.com/errata/RHSA-2025:3990 https://access.redhat.com/errata/RHSA-2025:3992 https://access.redhat.com/errata/RHSA-2025:4548 https://access.redhat.com/errata/RHSA-2025:4549 https://access.redhat.com/errata/RHSA-2025:4550 https://access.redhat.com/errata/RHSA-2025:4552 https://access.redhat.com/security/cve/CVE-2025-23367 https://bugzilla.redhat.com/show_bug.cgi?id=2337620 https://github.com/advisories/GHSA-qr6x-62gq-4ccp https://github.com/wildfly/wildfly-core https://github.com/wildfly/wildfly-core/security/advisories/GHSA-qr6x-62gq-4ccp https://nvd.nist.gov/vuln/detail/CVE-2025-23367 https://www.cve.org/CVERecord?id=CVE-2025-23367
org.wildfly.core:wildfly-server	CVE-2021-3644	LOW	13.0.3.Final	16.0.1.Final, 17.0.0.Beta3	https://access.redhat.com/security/cve/CVE-2021-3644 https://bugzilla.redhat.com/show_bug.cgi?id=1976052 https://github.com/wildfly/wildfly-core https://github.com/wildfly/wildfly-core/commit/06dd9884f6ba50470b1fb5a35198a8784f037714 https://github.com/wildfly/wildfly-core/commit/6d8db43cd43b5994b7a14003db978064e086090b https://github.com/wildfly/wildfly-core/pull/4668 https://issues.redhat.com/browse/WFCORE-5511 https://nvd.nist.gov/vuln/detail/CVE-2021-3644 https://www.cve.org/CVERecord?id=CVE-2021-3644
org.wildfly.security:wildfly-elytron	CVE-2022-3143	HIGH	1.13.1.Final	1.15.15.Final, 1.20.3.Final	https://access.redhat.com/security/cve/CVE-2022-3143 https://bugzilla.redhat.com/show_bug.cgi?id=2124682 https://github.com/wildfly-security/wildfly-elytron https://nvd.nist.gov/vuln/detail/CVE-2022-3143 https://www.cve.org/CVERecord?id=CVE-2022-3143
org.wildfly.security:wildfly-elytron	CVE-2022-3143	HIGH	1.13.1.Final	1.15.15.Final, 1.20.3.Final	https://access.redhat.com/security/cve/CVE-2022-3143 https://bugzilla.redhat.com/show_bug.cgi?id=2124682 https://github.com/wildfly-security/wildfly-elytron https://nvd.nist.gov/vuln/detail/CVE-2022-3143 https://www.cve.org/CVERecord?id=CVE-2022-3143
org.wildfly.security:wildfly-elytron	CVE-2021-3642	MEDIUM	1.13.1.Final	1.10.14, 1.15.5, 1.16.1	https://access.redhat.com/security/cve/CVE-2021-3642 https://bugzilla.redhat.com/show_bug.cgi?id=1981407 https://nvd.nist.gov/vuln/detail/CVE-2021-3642 https://www.cve.org/CVERecord?id=CVE-2021-3642
org.wildfly.security:wildfly-elytron	CVE-2021-3642	MEDIUM	1.13.1.Final	1.10.14, 1.15.5, 1.16.1	https://access.redhat.com/security/cve/CVE-2021-3642 https://bugzilla.redhat.com/show_bug.cgi?id=1981407 https://nvd.nist.gov/vuln/detail/CVE-2021-3642 https://www.cve.org/CVERecord?id=CVE-2021-3642
org.wildfly.security:wildfly-elytron-realm-token	CVE-2024-1233	HIGH	1.13.1.Final		https://access.redhat.com/errata/RHSA-2024:3559 https://access.redhat.com/errata/RHSA-2024:3560 https://access.redhat.com/errata/RHSA-2024:3561 https://access.redhat.com/errata/RHSA-2024:3563 https://access.redhat.com/errata/RHSA-2024:3580 https://access.redhat.com/errata/RHSA-2024:3581 https://access.redhat.com/errata/RHSA-2024:3583 https://access.redhat.com/errata/RHSA-2025:9582 https://access.redhat.com/errata/RHSA-2025:9583 https://access.redhat.com/security/cve/CVE-2024-1233 https://bugzilla.redhat.com/show_bug.cgi?id=2262849 https://github.com/advisories/GHSA-v4mm-q8fv-r2w5 https://github.com/wildfly-security/wildfly-elytron https://github.com/wildfly/wildfly/commit/aa151a00d75d6dbc4a1bf1b68d58b9de3087bb62 https://github.com/wildfly/wildfly/pull/17812/commits/0c02350bc0d84287bed46e7c32f90b36e50d3523 https://issues.redhat.com/browse/WFLY-19226 https://nvd.nist.gov/vuln/detail/CVE-2024-1233 https://www.cve.org/CVERecord?id=CVE-2024-1233
org.wildfly.security:wildfly-elytron-realm-token	CVE-2024-1233	HIGH	1.13.1.Final		https://access.redhat.com/errata/RHSA-2024:3559 https://access.redhat.com/errata/RHSA-2024:3560 https://access.redhat.com/errata/RHSA-2024:3561 https://access.redhat.com/errata/RHSA-2024:3563 https://access.redhat.com/errata/RHSA-2024:3580 https://access.redhat.com/errata/RHSA-2024:3581 https://access.redhat.com/errata/RHSA-2024:3583 https://access.redhat.com/errata/RHSA-2025:9582 https://access.redhat.com/errata/RHSA-2025:9583 https://access.redhat.com/security/cve/CVE-2024-1233 https://bugzilla.redhat.com/show_bug.cgi?id=2262849 https://github.com/advisories/GHSA-v4mm-q8fv-r2w5 https://github.com/wildfly-security/wildfly-elytron https://github.com/wildfly/wildfly/commit/aa151a00d75d6dbc4a1bf1b68d58b9de3087bb62 https://github.com/wildfly/wildfly/pull/17812/commits/0c02350bc0d84287bed46e7c32f90b36e50d3523 https://issues.redhat.com/browse/WFLY-19226 https://nvd.nist.gov/vuln/detail/CVE-2024-1233 https://www.cve.org/CVERecord?id=CVE-2024-1233
org.wildfly.security:wildfly-elytron-realm-token	CVE-2024-1233	HIGH	1.13.1.Final		https://access.redhat.com/errata/RHSA-2024:3559 https://access.redhat.com/errata/RHSA-2024:3560 https://access.redhat.com/errata/RHSA-2024:3561 https://access.redhat.com/errata/RHSA-2024:3563 https://access.redhat.com/errata/RHSA-2024:3580 https://access.redhat.com/errata/RHSA-2024:3581 https://access.redhat.com/errata/RHSA-2024:3583 https://access.redhat.com/errata/RHSA-2025:9582 https://access.redhat.com/errata/RHSA-2025:9583 https://access.redhat.com/security/cve/CVE-2024-1233 https://bugzilla.redhat.com/show_bug.cgi?id=2262849 https://github.com/advisories/GHSA-v4mm-q8fv-r2w5 https://github.com/wildfly-security/wildfly-elytron https://github.com/wildfly/wildfly/commit/aa151a00d75d6dbc4a1bf1b68d58b9de3087bb62 https://github.com/wildfly/wildfly/pull/17812/commits/0c02350bc0d84287bed46e7c32f90b36e50d3523 https://issues.redhat.com/browse/WFLY-19226 https://nvd.nist.gov/vuln/detail/CVE-2024-1233 https://www.cve.org/CVERecord?id=CVE-2024-1233
org.yaml:snakeyaml	CVE-2022-1471	HIGH	1.26	2.0	http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html http://www.openwall.com/lists/oss-security/2023/11/19/1 https://access.redhat.com/errata/RHSA-2022:9058 https://access.redhat.com/security/cve/CVE-2022-1471 https://advisory.echohq.com/cve/CVE-2022-1471 https://bitbucket.org/snakeyaml/snakeyaml https://bitbucket.org/snakeyaml/snakeyaml/commits/5014df1a36f50aca54405bb8433bc99a8847f758 https://bitbucket.org/snakeyaml/snakeyaml/commits/acc44099f5f4af26ff86b4e4e4cc1c874e2dc5c4 https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479 https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64634374 https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64876314 https://bitbucket.org/snakeyaml/snakeyaml/wiki/CVE-2022-1471 https://bugzilla.redhat.com/2150009 https://bugzilla.redhat.com/show_bug.cgi?id=2150009 https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1471 https://errata.almalinux.org/8/ALSA-2022-9058.html https://errata.rockylinux.org/RLSA-2022:9058 https://github.com/advisories/GHSA-mjmj-j48q-9wg2 https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2 https://github.com/mbechler/marshalsec https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc https://infosecwriteups.com/%EF%B8%8F-inside-the-160-comment-fight-to-fix-snakeyamls-rce-default-1a20c5ca4d4c https://linux.oracle.com/cve/CVE-2022-1471.html https://linux.oracle.com/errata/ELSA-2022-9058-1.html https://nvd.nist.gov/vuln/detail/CVE-2022-1471 https://security.netapp.com/advisory/ntap-20230818-0015 https://security.netapp.com/advisory/ntap-20230818-0015/ https://security.netapp.com/advisory/ntap-20240621-0006 https://security.netapp.com/advisory/ntap-20240621-0006/ https://snyk.io/blog/unsafe-deserialization-snakeyaml-java-cve-2022-1471 https://www.cve.org/CVERecord?id=CVE-2022-1471 https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true
org.yaml:snakeyaml	CVE-2022-25857	HIGH	1.26	1.31	https://access.redhat.com/errata/RHSA-2022:6820 https://access.redhat.com/security/cve/CVE-2022-25857 https://advisory.echohq.com/cve/CVE-2022-25857 https://bitbucket.org/snakeyaml/snakeyaml/commits/fc300780da21f4bb92c148bc90257201220cf174 https://bitbucket.org/snakeyaml/snakeyaml/issues/525 https://bugzilla.redhat.com/2126789 https://bugzilla.redhat.com/show_bug.cgi?id=2126789 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25857 https://errata.almalinux.org/8/ALSA-2022-6820.html https://errata.rockylinux.org/RLSA-2022:6820 https://github.com/advisories/GHSA-3mc7-4q67-w48m https://github.com/snakeyaml/snakeyaml https://github.com/snakeyaml/snakeyaml/commit/fc300780da21f4bb92c148bc90257201220cf174 https://linux.oracle.com/cve/CVE-2022-25857.html https://linux.oracle.com/errata/ELSA-2022-6820.html https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html https://nvd.nist.gov/vuln/detail/CVE-2022-25857 https://security.netapp.com/advisory/ntap-20240315-0010 https://security.netapp.com/advisory/ntap-20240315-0010/ https://security.snyk.io/vuln/SNYK-JAVA-ORGYAML-2806360 https://ubuntu.com/security/notices/USN-5944-1 https://www.cve.org/CVERecord?id=CVE-2022-25857
org.yaml:snakeyaml	CVE-2022-38749	MEDIUM	1.26	1.31	https://access.redhat.com/security/cve/CVE-2022-38749 https://advisory.echohq.com/cve/CVE-2022-38749 https://arxiv.org/pdf/2306.05534.pdf https://bitbucket.org/snakeyaml/snakeyaml https://bitbucket.org/snakeyaml/snakeyaml/issues/525/got-stackoverflowerror-for-many-open https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47024 https://github.com/advisories/GHSA-c4r9-r8fh-9vj2 https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html https://nvd.nist.gov/vuln/detail/CVE-2022-38749 https://security.gentoo.org/glsa/202305-28 https://security.netapp.com/advisory/ntap-20240315-0010 https://security.netapp.com/advisory/ntap-20240315-0010/ https://ubuntu.com/security/notices/USN-5944-1 https://www.cve.org/CVERecord?id=CVE-2022-38749
org.yaml:snakeyaml	CVE-2022-38750	MEDIUM	1.26	1.31	https://access.redhat.com/security/cve/CVE-2022-38750 https://advisory.echohq.com/cve/CVE-2022-38750 https://bitbucket.org/snakeyaml/snakeyaml https://bitbucket.org/snakeyaml/snakeyaml/issues/526/stackoverflow-oss-fuzz-47027 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47027 https://github.com/advisories/GHSA-hhhw-99gj-p3c3 https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html https://nvd.nist.gov/vuln/detail/CVE-2022-38750 https://security.gentoo.org/glsa/202305-28 https://security.netapp.com/advisory/ntap-20240315-0010 https://security.netapp.com/advisory/ntap-20240315-0010/ https://ubuntu.com/security/notices/USN-5944-1 https://www.cve.org/CVERecord?id=CVE-2022-38750
org.yaml:snakeyaml	CVE-2022-38751	MEDIUM	1.26	1.31	https://access.redhat.com/security/cve/CVE-2022-38751 https://advisory.echohq.com/cve/CVE-2022-38751 https://bitbucket.org/snakeyaml/snakeyaml https://bitbucket.org/snakeyaml/snakeyaml/issues/530/stackoverflow-oss-fuzz-47039 https://bitbucket.org/snakeyaml/snakeyaml/src/master/src/test/java/org/yaml/snakeyaml/issues/issue530/Fuzzy47039Test.java https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47039 https://github.com/advisories/GHSA-98wm-3w3q-mw94 https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html https://nvd.nist.gov/vuln/detail/CVE-2022-38751 https://security.gentoo.org/glsa/202305-28 https://security.netapp.com/advisory/ntap-20240315-0010 https://security.netapp.com/advisory/ntap-20240315-0010/ https://ubuntu.com/security/notices/USN-5944-1 https://www.cve.org/CVERecord?id=CVE-2022-38751
org.yaml:snakeyaml	CVE-2022-38752	MEDIUM	1.26	1.32	https://access.redhat.com/security/cve/CVE-2022-38752 https://advisory.echohq.com/cve/CVE-2022-38752 https://bitbucket.org/snakeyaml/snakeyaml https://bitbucket.org/snakeyaml/snakeyaml/issues/531/stackoverflow-oss-fuzz-47081 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47081 https://github.com/advisories/GHSA-9w3m-gqgf-c4p9 https://nvd.nist.gov/vuln/detail/CVE-2022-38752 https://security.gentoo.org/glsa/202305-28 https://security.netapp.com/advisory/ntap-20240315-0009 https://security.netapp.com/advisory/ntap-20240315-0009/ https://www.cve.org/CVERecord?id=CVE-2022-38752
org.yaml:snakeyaml	CVE-2022-41854	MEDIUM	1.26	1.32	https://access.redhat.com/security/cve/CVE-2022-41854 https://advisory.echohq.com/cve/CVE-2022-41854 https://bitbucket.org/snakeyaml/snakeyaml https://bitbucket.org/snakeyaml/snakeyaml/commits/e230a1758842beec93d28eddfde568c21774780a https://bitbucket.org/snakeyaml/snakeyaml/issues/531 https://bitbucket.org/snakeyaml/snakeyaml/issues/543/stackoverflow-oss-fuzz-50355 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50355 https://github.com/advisories/GHSA-w37g-rhq8-7m4j https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3DDXEXXWAZGF5AVHIPGFPXIWL6TSMKJE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3DDXEXXWAZGF5AVHIPGFPXIWL6TSMKJE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MKE4XWRXTH32757H7QJU4ACS67DYDCR https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MKE4XWRXTH32757H7QJU4ACS67DYDCR/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSPAJ5Y45A4ZDION2KN5RDWLHK4XKY2J https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSPAJ5Y45A4ZDION2KN5RDWLHK4XKY2J/ https://nvd.nist.gov/vuln/detail/CVE-2022-41854 https://security.netapp.com/advisory/ntap-20240315-0009 https://security.netapp.com/advisory/ntap-20240315-0009/ https://security.netapp.com/advisory/ntap-20240621-0006 https://security.netapp.com/advisory/ntap-20240621-0006/ https://www.cve.org/CVERecord?id=CVE-2022-41854
xerces:xercesImpl	CVE-2022-23437	MEDIUM	2.12.0.SP03	2.12.2	http://www.openwall.com/lists/oss-security/2022/01/24/3 https://access.redhat.com/security/cve/CVE-2022-23437 https://github.com/jboss/xerces https://github.com/sparklemotion/nokogiri/releases/tag/v1.13.4 https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-xxx9-3xcr-gjj3 https://groups.google.com/g/ruby-security-ann/c/vX7qSjsvWis/m/TJWN4oOKBwAJ https://lists.apache.org/thread/6pjwm10bb69kq955fzr1n0nflnjd27dl https://nvd.nist.gov/vuln/detail/CVE-2022-23437 https://security.netapp.com/advisory/ntap-20221028-0005 https://security.netapp.com/advisory/ntap-20221028-0005/ https://www.cve.org/CVERecord?id=CVE-2022-23437 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujul2022.html
No Misconfigurations found