| ch.qos.logback:logback-classic |
CVE-2023-6378 |
HIGH |
1.2.3 |
1.3.12, 1.4.12, 1.2.13 |
https://access.redhat.com/security/cve/CVE-2023-6378
https://advisory.echohq.com/cve/CVE-2023-6378
https://github.com/advisories/GHSA-vmq6-5m68-f53m
https://github.com/qos-ch/logback
https://github.com/qos-ch/logback/commit/9c782b45be4abdafb7e17481e24e7354c2acd1eb
https://github.com/qos-ch/logback/commit/b8eac23a9de9e05fb6d51160b3f46acd91af9731
https://github.com/qos-ch/logback/commit/bb095154be011267b64e37a1d401546e7cc2b7c3
https://github.com/qos-ch/logback/issues/745#issuecomment-1836227158
https://logback.qos.ch/manual/receivers.html
https://logback.qos.ch/news.html#1.2.13
https://logback.qos.ch/news.html#1.3.12
https://nvd.nist.gov/vuln/detail/CVE-2023-6378
https://security.netapp.com/advisory/ntap-20241129-0012
https://security.netapp.com/advisory/ntap-20241129-0012/
https://ubuntu.com/security/notices/USN-7616-1
https://www.cve.org/CVERecord?id=CVE-2023-6378
|
| ch.qos.logback:logback-core |
CVE-2023-6378 |
HIGH |
1.2.3 |
1.3.12, 1.4.12, 1.2.13 |
https://access.redhat.com/security/cve/CVE-2023-6378
https://advisory.echohq.com/cve/CVE-2023-6378
https://github.com/advisories/GHSA-vmq6-5m68-f53m
https://github.com/qos-ch/logback
https://github.com/qos-ch/logback/commit/9c782b45be4abdafb7e17481e24e7354c2acd1eb
https://github.com/qos-ch/logback/commit/b8eac23a9de9e05fb6d51160b3f46acd91af9731
https://github.com/qos-ch/logback/commit/bb095154be011267b64e37a1d401546e7cc2b7c3
https://github.com/qos-ch/logback/issues/745#issuecomment-1836227158
https://logback.qos.ch/manual/receivers.html
https://logback.qos.ch/news.html#1.2.13
https://logback.qos.ch/news.html#1.3.12
https://nvd.nist.gov/vuln/detail/CVE-2023-6378
https://security.netapp.com/advisory/ntap-20241129-0012
https://security.netapp.com/advisory/ntap-20241129-0012/
https://ubuntu.com/security/notices/USN-7616-1
https://www.cve.org/CVERecord?id=CVE-2023-6378
|
| ch.qos.logback:logback-core |
CVE-2021-42550 |
MEDIUM |
1.2.3 |
1.2.9 |
http://logback.qos.ch/news.html
http://packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html
http://seclists.org/fulldisclosure/2022/Jul/11
https://access.redhat.com/security/cve/CVE-2021-42550
https://cert-portal.siemens.com/productcert/pdf/ssa-371761.pdf
https://cve.report/CVE-2021-42550
https://github.com/cn-panda/logbackRceDemo
https://github.com/qos-ch/logback
https://github.com/qos-ch/logback/blob/1502cba4c1dfd135b2e715bc0cf80c0045d4d128/logback-site/src/site/pages/news.html
https://github.com/qos-ch/logback/commit/21d772f2bc2ed780b01b4fe108df7e29707763f1%20%28v_1.2.8%29
https://github.com/qos-ch/logback/commit/87291079a1de9369ac67e20dc70a8fdc7cc4359c
https://github.com/qos-ch/logback/commit/ef4fc4186b74b45ce80d86833820106ff27edd42
https://jira.qos.ch/browse/LOGBACK-1591
https://nvd.nist.gov/vuln/detail/CVE-2021-42550
https://security.netapp.com/advisory/ntap-20211229-0001
https://security.netapp.com/advisory/ntap-20211229-0001/
https://ubuntu.com/security/notices/USN-7616-1
https://www.cve.org/CVERecord?id=CVE-2021-42550
|
| ch.qos.logback:logback-core |
CVE-2024-12798 |
MEDIUM |
1.2.3 |
1.5.13, 1.3.15 |
https://access.redhat.com/security/cve/CVE-2024-12798
https://advisory.echohq.com/cve/CVE-2024-12798
https://github.com/advisories/GHSA-pr98-23f8-jwxv
https://github.com/qos-ch/logback
https://github.com/qos-ch/logback/commit/2cb6d520df7592ef1c3a198f1b5df3c10c93e183
https://logback.qos.ch/news.html#1.3.15
https://logback.qos.ch/news.html#1.5.13
https://nvd.nist.gov/vuln/detail/CVE-2024-12798
https://www.cve.org/CVERecord?id=CVE-2024-12798
|
| ch.qos.logback:logback-core |
CVE-2025-11226 |
MEDIUM |
1.2.3 |
1.5.19, 1.3.16 |
https://access.redhat.com/security/cve/CVE-2025-11226
https://advisory.echohq.com/cve/CVE-2025-11226
https://github.com/advisories/GHSA-25qh-j22f-pwp8
https://github.com/qos-ch/logback
https://github.com/qos-ch/logback/commit/61f6a2544f36b3016e0efd434ee21f19269f1df7
https://github.com/qos-ch/logback/issues/974
https://github.com/qos-ch/logback/releases/tag/v_1.5.19
https://logback.qos.ch/news.html#1.3.16
https://logback.qos.ch/news.html#1.5.19
https://nvd.nist.gov/vuln/detail/CVE-2025-11226
https://www.cve.org/CVERecord?id=CVE-2025-11226
|
| ch.qos.logback:logback-core |
CVE-2024-12801 |
LOW |
1.2.3 |
1.5.13, 1.3.15 |
https://access.redhat.com/security/cve/CVE-2024-12801
https://advisory.echohq.com/cve/CVE-2024-12801
https://github.com/advisories/GHSA-6v67-2wr5-gvf4
https://github.com/qos-ch/logback
https://github.com/qos-ch/logback/commit/5f05041cba4c4ac0a62748c5c527a2da48999f2d
https://logback.qos.ch/news.html#1.3.15
https://logback.qos.ch/news.html#1.5.13
https://nvd.nist.gov/vuln/detail/CVE-2024-12801
https://www.cve.org/CVERecord?id=CVE-2024-12801
|
| ch.qos.logback:logback-core |
CVE-2026-10532 |
LOW |
1.2.3 |
1.5.34 |
https://advisory.echohq.com/cve/CVE-2026-10532
https://github.com/qos-ch/logback
https://github.com/qos-ch/logback/releases/tag/v_1.5.34
https://logback.qos.ch/news.html#1.5.34
https://nvd.nist.gov/vuln/detail/CVE-2026-10532
|
| ch.qos.logback:logback-core |
CVE-2026-1225 |
LOW |
1.2.3 |
1.5.25 |
https://access.redhat.com/security/cve/CVE-2026-1225
https://advisory.echohq.com/cve/CVE-2026-1225
https://github.com/advisories/GHSA-qqpg-mvqg-649v
https://github.com/qos-ch/logback
https://github.com/qos-ch/logback/commit/1f97ae1844b1be8486e4e9cade98d7123d3eded5
https://github.com/qos-ch/logback/issues/997
https://logback.qos.ch/news.html#1.5.25
https://nvd.nist.gov/vuln/detail/CVE-2026-1225
https://www.cve.org/CVERecord?id=CVE-2026-1225
|
| ch.qos.logback:logback-core |
CVE-2026-9828 |
LOW |
1.2.3 |
1.5.33 |
https://advisory.echohq.com/cve/CVE-2026-9828
https://github.com/qos-ch/logback
https://logback.qos.ch/news.html#1.5.33
https://nvd.nist.gov/vuln/detail/CVE-2026-9828
|
| com.esotericsoftware.yamlbeans:yamlbeans |
CVE-2023-24621 |
HIGH |
1.11 |
|
https://contrastsecurity.com
https://github.com/Contrast-Security-OSS/yamlbeans/blob/main/SECURITY.md
https://github.com/EsotericSoftware
https://github.com/EsotericSoftware/yamlbeans
https://nvd.nist.gov/vuln/detail/CVE-2023-24621
|
| com.esotericsoftware.yamlbeans:yamlbeans |
CVE-2023-24620 |
MEDIUM |
1.11 |
|
https://contrastsecurity.com
https://github.com/Contrast-Security-OSS/yamlbeans/blob/main/SECURITY.md
https://github.com/EsotericSoftware
https://github.com/EsotericSoftware/yamlbeans
https://nvd.nist.gov/vuln/detail/CVE-2023-24620
|
| com.fasterxml.jackson.core:jackson-core |
CVE-2025-52999 |
HIGH |
2.10.2 |
2.15.0 |
https://access.redhat.com/errata/RHSA-2025:12280
https://access.redhat.com/security/cve/CVE-2025-52999
https://advisory.echohq.com/cve/CVE-2025-52999
https://bugzilla.redhat.com/2374804
https://bugzilla.redhat.com/show_bug.cgi?id=2374804
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52999
https://errata.almalinux.org/9/ALSA-2025-12280.html
https://errata.rockylinux.org/RLSA-2025:12280
https://github.com/FasterXML/jackson-core
https://github.com/FasterXML/jackson-core/pull/943
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-h46c-h94j-95f3
https://github.com/advisories/GHSA-h46c-h94j-95f3
https://linux.oracle.com/cve/CVE-2025-52999.html
https://linux.oracle.com/errata/ELSA-2025-14126.html
https://nvd.nist.gov/vuln/detail/CVE-2025-52999
https://www.cve.org/CVERecord?id=CVE-2025-52999
|
| com.fasterxml.jackson.core:jackson-core |
CVE-2026-68494 |
HIGH |
2.10.2 |
2.18.8, 2.21.4 |
https://access.redhat.com/security/cve/CVE-2026-68494
https://advisory.echohq.com/cve/CVE-2026-68494
https://github.com/FasterXML/jackson-core
https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd
https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641
https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8
https://github.com/FasterXML/jackson-core/pull/1611
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9
https://github.com/advisories/GHSA-72hv-8253-57qq
https://nvd.nist.gov/vuln/detail/CVE-2026-68494
https://www.cve.org/CVERecord?id=CVE-2026-18401
https://www.cve.org/CVERecord?id=CVE-2026-68494
|
| com.fasterxml.jackson.core:jackson-core |
CVE-2026-89425 |
HIGH |
2.10.2 |
2.21.7, 2.22.3, 2.18.11 |
https://access.redhat.com/errata/RHSA-2026:86706
https://access.redhat.com/security/cve/CVE-2026-89425
https://advisory.echohq.com/cve/CVE-2026-89425
https://bugzilla.redhat.com/2538720
https://bugzilla.redhat.com/2539084
https://bugzilla.redhat.com/show_bug.cgi?id=2538720
https://bugzilla.redhat.com/show_bug.cgi?id=2539084
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89407
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89425
https://errata.almalinux.org/9/ALSA-2026-86706.html
https://errata.rockylinux.org/RLSA-2026:86706
https://github.com/FasterXML/jackson-core
https://github.com/FasterXML/jackson-core/commit/211cf2c5d91abbec38067f37efc1363cd4e88ee3
https://github.com/FasterXML/jackson-core/pull/1698
https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-2.18.11
https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-3.2.3
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf
https://linux.oracle.com/cve/CVE-2026-89425.html
https://linux.oracle.com/errata/ELSA-2026-86706.html
https://nvd.nist.gov/vuln/detail/CVE-2026-89425
https://www.cve.org/CVERecord?id=CVE-2026-89425
|
| com.fasterxml.jackson.core:jackson-core |
CVE-2025-49128 |
MEDIUM |
2.10.2 |
2.13.0 |
https://access.redhat.com/security/cve/CVE-2025-49128
https://advisory.echohq.com/cve/CVE-2025-49128
https://github.com/FasterXML/jackson-core
https://github.com/FasterXML/jackson-core/commit/a6c297682737dde13337cb7c3020f299518609a8
https://github.com/FasterXML/jackson-core/pull/652
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-wf8f-6423-gfxg
https://github.com/advisories/GHSA-wf8f-6423-gfxg
https://nvd.nist.gov/vuln/detail/CVE-2021-22145
https://nvd.nist.gov/vuln/detail/CVE-2025-49128
https://www.cve.org/CVERecord?id=CVE-2025-49128
|
| com.fasterxml.jackson.core:jackson-core |
CVE-2025-52999 |
HIGH |
2.12.3 |
2.15.0 |
https://access.redhat.com/errata/RHSA-2025:12280
https://access.redhat.com/security/cve/CVE-2025-52999
https://advisory.echohq.com/cve/CVE-2025-52999
https://bugzilla.redhat.com/2374804
https://bugzilla.redhat.com/show_bug.cgi?id=2374804
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52999
https://errata.almalinux.org/9/ALSA-2025-12280.html
https://errata.rockylinux.org/RLSA-2025:12280
https://github.com/FasterXML/jackson-core
https://github.com/FasterXML/jackson-core/pull/943
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-h46c-h94j-95f3
https://github.com/advisories/GHSA-h46c-h94j-95f3
https://linux.oracle.com/cve/CVE-2025-52999.html
https://linux.oracle.com/errata/ELSA-2025-14126.html
https://nvd.nist.gov/vuln/detail/CVE-2025-52999
https://www.cve.org/CVERecord?id=CVE-2025-52999
|
| com.fasterxml.jackson.core:jackson-core |
CVE-2026-68494 |
HIGH |
2.12.3 |
2.18.8, 2.21.4 |
https://access.redhat.com/security/cve/CVE-2026-68494
https://advisory.echohq.com/cve/CVE-2026-68494
https://github.com/FasterXML/jackson-core
https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd
https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641
https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8
https://github.com/FasterXML/jackson-core/pull/1611
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9
https://github.com/advisories/GHSA-72hv-8253-57qq
https://nvd.nist.gov/vuln/detail/CVE-2026-68494
https://www.cve.org/CVERecord?id=CVE-2026-18401
https://www.cve.org/CVERecord?id=CVE-2026-68494
|
| com.fasterxml.jackson.core:jackson-core |
CVE-2026-89425 |
HIGH |
2.12.3 |
2.21.7, 2.22.3, 2.18.11 |
https://access.redhat.com/errata/RHSA-2026:86706
https://access.redhat.com/security/cve/CVE-2026-89425
https://advisory.echohq.com/cve/CVE-2026-89425
https://bugzilla.redhat.com/2538720
https://bugzilla.redhat.com/2539084
https://bugzilla.redhat.com/show_bug.cgi?id=2538720
https://bugzilla.redhat.com/show_bug.cgi?id=2539084
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89407
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89425
https://errata.almalinux.org/9/ALSA-2026-86706.html
https://errata.rockylinux.org/RLSA-2026:86706
https://github.com/FasterXML/jackson-core
https://github.com/FasterXML/jackson-core/commit/211cf2c5d91abbec38067f37efc1363cd4e88ee3
https://github.com/FasterXML/jackson-core/pull/1698
https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-2.18.11
https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-3.2.3
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf
https://linux.oracle.com/cve/CVE-2026-89425.html
https://linux.oracle.com/errata/ELSA-2026-86706.html
https://nvd.nist.gov/vuln/detail/CVE-2026-89425
https://www.cve.org/CVERecord?id=CVE-2026-89425
|
| com.fasterxml.jackson.core:jackson-core |
CVE-2025-49128 |
MEDIUM |
2.12.3 |
2.13.0 |
https://access.redhat.com/security/cve/CVE-2025-49128
https://advisory.echohq.com/cve/CVE-2025-49128
https://github.com/FasterXML/jackson-core
https://github.com/FasterXML/jackson-core/commit/a6c297682737dde13337cb7c3020f299518609a8
https://github.com/FasterXML/jackson-core/pull/652
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-wf8f-6423-gfxg
https://github.com/advisories/GHSA-wf8f-6423-gfxg
https://nvd.nist.gov/vuln/detail/CVE-2021-22145
https://nvd.nist.gov/vuln/detail/CVE-2025-49128
https://www.cve.org/CVERecord?id=CVE-2025-49128
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-25649 |
HIGH |
2.10.2 |
2.6.7.4, 2.9.10.7, 2.10.5.1 |
https://access.redhat.com/security/cve/CVE-2020-25649
https://bugzilla.redhat.com/show_bug.cgi?id=1887664
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/3d932709abd0b5390efe67451653fc9efa9db677
https://github.com/FasterXML/jackson-databind/commit/612f971b78c60202e9cd75a299050c8f2d724a59
https://github.com/FasterXML/jackson-databind/commit/612f971b78c60202e9cd75a299050c8f2d724a59%20%28jackson-databind-2.11.0.rc1%29
https://github.com/FasterXML/jackson-databind/issues/2589
https://lists.apache.org/thread.html/r011d1430e8f40dff9550c3bc5d0f48b14c01ba8aecabd91d5e495386@%3Ccommits.turbine.apache.org%3E
https://lists.apache.org/thread.html/r024b7bda9c43c5560d81238748775c5ecfe01b57280f90df1f773949@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r04529cedaca40c2ff90af4880493f9c88a8ebf4d1d6c861d23108a5a@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r0881e23bd9034c8f51fdccdc8f4d085ba985dcd738f8520569ca5c3d@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r0b8dc3acd4503e4ecb6fbd6ea7d95f59941168d8452ac0ab1d1d96bb@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r1b7ed0c4b6c4301d4dfd6fdbc5581b0a789d3240cab55d766f33c6c6@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r2882fc1f3032cd7be66e28787f04ec6f1874ac68d47e310e30ff7eb1@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r2b6ddb3a4f4cd11d8f6305011e1b7438ba813511f2e3ab3180c7ffda@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r2eb66c182853c69ecfb52f63d3dec09495e9b65be829fd889a081ae1@%3Cdev.hive.apache.org%3E
https://lists.apache.org/thread.html/r2f5c5479f99398ef344b7ebd4d90bc3316236c45d0f3bc42090efcd7@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r31f4ee7d561d56a0c2c2c6eb1d6ce3e05917ff9654fdbfec05dc2b83@%3Ccommits.servicecomb.apache.org%3E
https://lists.apache.org/thread.html/r3e6ae311842de4e64c5d560a475b7f9cc7e0a9a8649363c6cf7537eb@%3Ccommits.karaf.apache.org%3E
https://lists.apache.org/thread.html/r407538adec3185dd35a05c9a26ae2f74425b15132470cf540f41d85b@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r45e7350dfc92bb192f3f88e9971c11ab2be0953cc375be3dda5170bd@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r5b130fe668503c4b7e2caf1b16f86b7f2070fd1b7ef8f26195a2ffbd@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r5f8a1608d758936bd6bbc5eed980777437b611537bf6fff40663fc71@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r605764e05e201db33b3e9c2e66ff620658f07ad74f296abe483f7042@%3Creviews.iotdb.apache.org%3E
https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc@%3Cdev.kafka.apache.org%3E
https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc@%3Cusers.kafka.apache.org%3E
https://lists.apache.org/thread.html/r63c87aab97155f3f3cbe11d030c4a184ea0de440ee714977db02e956@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r68d029ee74ab0f3b0569d0c05f5688cb45dd3abe96a6534735252805@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r6a4f3ef6edfed2e0884269d84798f766779bbbc1005f7884e0800d61@%3Cdev.knox.apache.org%3E
https://lists.apache.org/thread.html/r6a6df5647583541e3cb71c75141008802f7025cee1c430d4ed78f4cc@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r6b11eca1d646f45eb0d35d174e6b1e47cfae5295b92000856bfb6304@%3Cdev.kafka.apache.org%3E
https://lists.apache.org/thread.html/r6b11eca1d646f45eb0d35d174e6b1e47cfae5295b92000856bfb6304@%3Cusers.kafka.apache.org%3E
https://lists.apache.org/thread.html/r6cbd599b80e787f02ff7a1391d9278a03f37d6a6f4f943f0f01a62fb@%3Creviews.iotdb.apache.org%3E
https://lists.apache.org/thread.html/r6e3d4f7991542119a4ca6330271d7fbf7b9fb3abab24ada82ddf1ee4@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r73bef1bb601a9f093f915f8075eb49fcca51efade57b817afd5def07@%3Ccommits.iotdb.apache.org%3E
https://lists.apache.org/thread.html/r765283e145049df9b8998f14dcd444345555aae02b1610cfb3188bf8@%3Cnotifications.iotdb.apache.org%3E
https://lists.apache.org/thread.html/r78d53a0a269c18394daf5940105dc8c7f9a2399503c2e78be20abe7e@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/r7cb5b4b3e4bd41a8042e5725b7285877a17bcbf07f4eb3f7b316af60@%3Creviews.iotdb.apache.org%3E
https://lists.apache.org/thread.html/r86c78bf7656fdb2dab69cbf17f3d7492300f771025f1a3a65d5e5ce5@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r8764bb835bcb8e311c882ff91dd3949c9824e905e880930be56f6ba3@%3Cuser.spark.apache.org%3E
https://lists.apache.org/thread.html/r8937a7160717fe8b2221767163c4de4f65bc5466405cb1c5310f9080@%3Cdev.kafka.apache.org%3E
https://lists.apache.org/thread.html/r8937a7160717fe8b2221767163c4de4f65bc5466405cb1c5310f9080@%3Cusers.kafka.apache.org%3E
https://lists.apache.org/thread.html/r8ae961c80930e2717c75025414ce48a432cea1137c02f648b1fb9524@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r900d4408c4189b376d1ec580ea7740ea6f8710dc2f0b7e9c9eeb5ae0@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r90d1e97b0a743cf697d89a792a9b669909cc5a1692d1e0083a22e66c@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r91722ecfba688b0c565675f8bf380269fde8ec62b54d6161db544c22@%3Ccommits.karaf.apache.org%3E
https://lists.apache.org/thread.html/r94c7e86e546120f157264ba5ba61fd29b3a8d530ed325a9b4fa334d7@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r95a297eb5fd1f2d3a2281f15340e2413f952e9d5503296c3adc7201a@%3Ccommits.tomee.apache.org%3E
https://lists.apache.org/thread.html/r98bfe3b90ea9408f12c4b447edcb5638703d80bc782430aa0c210a54@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/ra1157e57a01d25e36b0dc17959ace758fc21ba36746de29ba1d8b130@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/ra409f798a1e5a6652b7097429b388650ccd65fd958cee0b6f69bba00@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/ra95faf968f3463acb3f31a6fbec31453fc5045325f99f396961886d3@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/raf13235de6df1d47a717199e1ecd700dff3236632f5c9a1488d9845b@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/rb674520b9f6c808c1bf263b1369e14048ec3243615f35cfd24e33604@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7@%3Cdev.kafka.apache.org%3E
https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7@%3Cusers.kafka.apache.org%3E
https://lists.apache.org/thread.html/rc15e90bbef196a5c6c01659e015249d6c9a73581ca9afb8aeecf00d2@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/rc82ff47853289e9cd17f5cfbb053c04cafc75ee32e3d7223963f83bb@%3Cdev.knox.apache.org%3E
https://lists.apache.org/thread.html/rc88f2fa2b7bd6443921727aeee7704a1fb02433e722e2abf677e0d3d@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rc959cdb57c4fe198316130ff4a5ecbf9d680e356032ff2e9f4f05d54@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/rd317f15a675d114dbf5b488d27eeb2467b4424356b16116eb18a652d@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/rd57c7582adc90e233f23f3727db3df9115b27a823b92374f11453f34@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/rd6f6bf848c2d47fa4a85c27d011d948778b8f7e58ba495968435a0b3@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rdca8711bb7aa5d47a44682606cd0ea3497e2e922f22b7ee83e81e6c1@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/rdf9a34726482222c90d50ae1b9847881de67dde8cfde4999633d2cdc@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/re16f81d3ad49a93dd2f0cba9f8fc88e5fb89f30bf9a2ad7b6f3e69c1@%3Ccommits.karaf.apache.org%3E
https://lists.apache.org/thread.html/re96dc7a13e13e56190a5d80f9e5440a0d0c83aeec6467b562fbf2dca@%3Cjira.kafka.apache.org%3E
https://lists.apache.org/thread.html/rf1809a1374041a969d77afab21fc38925de066bc97e86157d3ac3402@%3Ccommits.karaf.apache.org%3E
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6X2UT4X6M7DLQYBOOHMXBWGYJ65RL2CT
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6X2UT4X6M7DLQYBOOHMXBWGYJ65RL2CT/
https://nvd.nist.gov/vuln/detail/CVE-2020-25649
https://security.netapp.com/advisory/ntap-20210108-0007
https://security.netapp.com/advisory/ntap-20210108-0007/
https://www.cve.org/CVERecord?id=CVE-2020-25649
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-36518 |
HIGH |
2.10.2 |
2.13.2.1, 2.12.6.1 |
https://access.redhat.com/errata/RHSA-2023:2312
https://access.redhat.com/errata/RHSA-2024:3061
https://access.redhat.com/security/cve/CVE-2020-36518
https://bugzilla.redhat.com/2064698
https://bugzilla.redhat.com/show_bug.cgi?id=2064698
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36518
https://errata.almalinux.org/9/ALSA-2023-2312.html
https://errata.rockylinux.org/RLSA-2024:3061
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/0a8157c6ca478b1bc7be4ba7dccdb3863275f0de
https://github.com/FasterXML/jackson-databind/commit/3cc52f82ecf943e06c1d7c3b078e405fb3923d2b
https://github.com/FasterXML/jackson-databind/commit/8238ab41d0350fb915797c89d46777b4496b74fd
https://github.com/FasterXML/jackson-databind/commit/b3587924ee5d8695942f364d0d404d48d0ea6126
https://github.com/FasterXML/jackson-databind/commit/fcfc4998ec23f0b1f7f8a9521c2b317b6c25892b
https://github.com/FasterXML/jackson-databind/issues/2816
https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12
https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.13
https://github.com/advisories/GHSA-57j2-w4cx-62h2
https://linux.oracle.com/cve/CVE-2020-36518.html
https://linux.oracle.com/errata/ELSA-2024-3061.html
https://lists.debian.org/debian-lts-announce/2022/05/msg00001.html
https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html
https://nvd.nist.gov/vuln/detail/CVE-2020-36518
https://security.netapp.com/advisory/ntap-20220506-0004
https://security.netapp.com/advisory/ntap-20220506-0004/
https://www.cve.org/CVERecord?id=CVE-2020-36518
https://www.debian.org/security/2022/dsa-5283
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2021-46877 |
HIGH |
2.10.2 |
2.12.6, 2.13.1 |
https://access.redhat.com/security/cve/CVE-2021-46877
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/3ccde7d938fea547e598fdefe9a82cff37fed5cb
https://github.com/FasterXML/jackson-databind/commit/3ccde7d938fea547e598fdefe9a82cff37fed5cb%20%28jackson-databind-2.12.6%29
https://github.com/FasterXML/jackson-databind/commit/3ccde7d938fea547e598fdefe9a82cff37fed5cb%20%28jackson-databind-3.13.1%29
https://github.com/FasterXML/jackson-databind/issues/3328
https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12.6
https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.13.1
https://groups.google.com/g/jackson-user/c/OsBsirPM_Vw
https://nvd.nist.gov/vuln/detail/CVE-2021-46877
https://www.cve.org/CVERecord?id=CVE-2021-46877
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2022-42003 |
HIGH |
2.10.2 |
2.12.7.1, 2.13.4.2 |
https://access.redhat.com/security/cve/CVE-2022-42003
https://advisory.echohq.com/cve/CVE-2022-42003
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51020
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/blob/2.13/release-notes/VERSION-2.x
https://github.com/FasterXML/jackson-databind/commit/0e37a39502439ecbaa1a5b5188387c01bf7f7fa1
https://github.com/FasterXML/jackson-databind/commit/2c4a601c626f7790cad9d3c322d244e182838288
https://github.com/FasterXML/jackson-databind/commit/7ba9ac5b87a9d6ac0d2815158ecbeb315ad4dcdc
https://github.com/FasterXML/jackson-databind/commit/cd090979b7ea78c75e4de8a4aed04f7e9fa8deea
https://github.com/FasterXML/jackson-databind/commit/d499f2e7bbc5ebd63af11e1f5cf1989fa323aa45
https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33
https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33%20%28jackson-databind-2.14.0-rc1%29
https://github.com/FasterXML/jackson-databind/commits/jackson-databind-2.4.0-rc1?after=75b97b8519f0d50c62523ad85170d80a197a2c86+174&branch=jackson-databind-2.4.0-rc1&qualified_name=refs%2Ftags%2Fjackson-databind-2.4.0-rc1
https://github.com/FasterXML/jackson-databind/compare/jackson-databind-2.13.4.1...jackson-databind-2.13.4.2
https://github.com/FasterXML/jackson-databind/issues/3590
https://github.com/FasterXML/jackson-databind/issues/3627
https://github.com/advisories/GHSA-jjjh-jjxp-wpff
https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html
https://nvd.nist.gov/vuln/detail/CVE-2022-42003
https://security.gentoo.org/glsa/202210-21
https://security.netapp.com/advisory/ntap-20221124-0004
https://security.netapp.com/advisory/ntap-20221124-0004/
https://www.cve.org/CVERecord?id=CVE-2022-42003
https://www.debian.org/security/2022/dsa-5283
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2022-42004 |
HIGH |
2.10.2 |
2.12.7.1, 2.13.4 |
https://access.redhat.com/security/cve/CVE-2022-42004
https://advisory.echohq.com/cve/CVE-2022-42004
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50490
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/063183589218fec19a9293ed2f17ec53ea80ba88
https://github.com/FasterXML/jackson-databind/commit/063183589218fec19a9293ed2f17ec53ea80ba88%20%28jackson-databind-2.13.4%29
https://github.com/FasterXML/jackson-databind/commit/0e37a39502439ecbaa1a5b5188387c01bf7f7fa1
https://github.com/FasterXML/jackson-databind/commit/35de19e7144c4df8ab178b800ba86e80c3d84252
https://github.com/FasterXML/jackson-databind/commit/cd090979b7ea78c75e4de8a4aed04f7e9fa8deea
https://github.com/FasterXML/jackson-databind/issues/3582
https://github.com/advisories/GHSA-rgv9-q543-rqg4
https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html
https://nvd.nist.gov/vuln/detail/CVE-2022-42004
https://security.gentoo.org/glsa/202210-21
https://security.netapp.com/advisory/ntap-20221118-0008
https://security.netapp.com/advisory/ntap-20221118-0008/
https://www.cve.org/CVERecord?id=CVE-2022-42004
https://www.debian.org/security/2022/dsa-5283
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54512 |
HIGH |
2.10.2 |
2.18.8, 3.1.4, 2.21.4 |
https://access.redhat.com/errata/RHSA-2026:40895
https://access.redhat.com/security/cve/CVE-2026-54512
https://advisory.echohq.com/cve/CVE-2026-54512
https://bugzilla.redhat.com/2492010
https://bugzilla.redhat.com/2492015
https://bugzilla.redhat.com/show_bug.cgi?id=2492010
https://bugzilla.redhat.com/show_bug.cgi?id=2492015
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54512
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54513
https://errata.almalinux.org/9/ALSA-2026-40895.html
https://errata.rockylinux.org/RLSA-2026:40895
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5
https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5%20%28jackson-databind-2.18.8%29
https://github.com/FasterXML/jackson-databind/issues/5988
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm
https://linux.oracle.com/cve/CVE-2026-54512.html
https://linux.oracle.com/errata/ELSA-2026-43400.html
https://nvd.nist.gov/vuln/detail/CVE-2026-54512
https://www.cve.org/CVERecord?id=CVE-2026-54512
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54513 |
HIGH |
2.10.2 |
2.18.8, 2.21.4, 3.1.4 |
https://access.redhat.com/errata/RHSA-2026:36839
https://access.redhat.com/errata/RHSA-2026:40895
https://access.redhat.com/errata/RHSA-2026:41951
https://access.redhat.com/errata/RHSA-2026:43218
https://access.redhat.com/errata/RHSA-2026:43400
https://access.redhat.com/errata/RHSA-2026:44061
https://access.redhat.com/errata/RHSA-2026:44062
https://access.redhat.com/errata/RHSA-2026:44063
https://access.redhat.com/errata/RHSA-2026:44064
https://access.redhat.com/errata/RHSA-2026:44065
https://access.redhat.com/errata/RHSA-2026:44066
https://access.redhat.com/errata/RHSA-2026:44271
https://access.redhat.com/errata/RHSA-2026:48095
https://access.redhat.com/errata/RHSA-2026:48151
https://access.redhat.com/errata/RHSA-2026:50846
https://access.redhat.com/errata/RHSA-2026:50847
https://access.redhat.com/errata/RHSA-2026:50848
https://access.redhat.com/errata/RHSA-2026:50849
https://access.redhat.com/errata/RHSA-2026:54435
https://access.redhat.com/errata/RHSA-2026:54622
https://access.redhat.com/errata/RHSA-2026:62260
https://access.redhat.com/errata/RHSA-2026:66488
https://access.redhat.com/errata/RHSA-2026:66545
https://access.redhat.com/security/cve/CVE-2026-54513
https://advisory.echohq.com/cve/CVE-2026-54513
https://bugzilla.redhat.com/2492010
https://bugzilla.redhat.com/2492015
https://bugzilla.redhat.com/show_bug.cgi?id=2492010
https://bugzilla.redhat.com/show_bug.cgi?id=2492015
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54512
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54513
https://errata.almalinux.org/9/ALSA-2026-40895.html
https://errata.rockylinux.org/RLSA-2026:40895
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5
https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e
https://github.com/FasterXML/jackson-databind/issues/5981
https://github.com/FasterXML/jackson-databind/issues/5983
https://github.com/FasterXML/jackson-databind/pull/5984
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f
https://linux.oracle.com/cve/CVE-2026-54513.html
https://linux.oracle.com/errata/ELSA-2026-43400.html
https://nvd.nist.gov/vuln/detail/CVE-2026-54513
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54513.json
https://www.cve.org/CVERecord?id=CVE-2026-54513
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-91776 |
HIGH |
2.10.2 |
2.18.11, 2.21.7, 2.22.3 |
https://access.redhat.com/security/cve/CVE-2026-91776
https://advisory.echohq.com/cve/CVE-2026-91776
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/2870d1d6dc1b7e1c07ee11dd5b04ab71cddbb577
https://github.com/FasterXML/jackson-databind/issues/6203
https://github.com/FasterXML/jackson-databind/pull/6203
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54
https://nvd.nist.gov/vuln/detail/CVE-2026-91776
https://www.cve.org/CVERecord?id=CVE-2026-91776
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-91777 |
HIGH |
2.10.2 |
2.21.7, 2.18.11, 2.22.3 |
https://access.redhat.com/errata/RHSA-2026:85231
https://access.redhat.com/security/cve/CVE-2026-91777
https://advisory.echohq.com/cve/CVE-2026-91777
https://bugzilla.redhat.com/2539085
https://bugzilla.redhat.com/show_bug.cgi?id=2539085
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91777
https://errata.almalinux.org/9/ALSA-2026-85231.html
https://errata.rockylinux.org/RLSA-2026:85231
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/37ad9b81712cbb9fb62c2d2c1813593252a24b67
https://github.com/FasterXML/jackson-databind/issues/6204
https://github.com/FasterXML/jackson-databind/pull/6204
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24
https://linux.oracle.com/cve/CVE-2026-91777.html
https://linux.oracle.com/errata/ELSA-2026-85231.html
https://nvd.nist.gov/vuln/detail/CVE-2026-91777
https://www.cve.org/CVERecord?id=CVE-2026-91777
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-19032 |
MEDIUM |
2.10.2 |
2.18.10, 2.21.6, 2.22.2 |
https://access.redhat.com/security/cve/CVE-2026-19032
https://advisory.echohq.com/cve/CVE-2026-19032
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551
https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166
https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d
https://github.com/FasterXML/jackson-databind/pull/6129
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf
https://nvd.nist.gov/vuln/detail/CVE-2026-19032
https://www.cve.org/CVERecord?id=CVE-2026-19032
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-50193 |
MEDIUM |
2.10.2 |
2.14.0 |
https://access.redhat.com/security/cve/CVE-2026-50193
https://advisory.echohq.com/cve/CVE-2026-50193
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/a1fa4ae4ecf5cee16da465985f135f3e81816f8c
https://github.com/FasterXML/jackson-databind/issues/3447
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3wrr-7qpf-2prh
https://nvd.nist.gov/vuln/detail/CVE-2026-50193
https://www.cve.org/CVERecord?id=CVE-2026-50193
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54514 |
MEDIUM |
2.10.2 |
2.18.8, 2.21.4, 3.1.4 |
https://access.redhat.com/security/cve/CVE-2026-54514
https://advisory.echohq.com/cve/CVE-2026-54514
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/1f5a1037b1e9e05920e755cb35f198bcd46667e4
https://github.com/FasterXML/jackson-databind/pull/5951
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-hgj6-7826-r7m5
https://nvd.nist.gov/vuln/detail/CVE-2026-54514
https://www.cve.org/CVERecord?id=CVE-2026-54514
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54515 |
MEDIUM |
2.10.2 |
3.1.4, 2.18.9, 2.21.5, 2.22.1 |
https://access.redhat.com/security/cve/CVE-2026-54515
https://advisory.echohq.com/cve/CVE-2026-54515
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/0e1b0b211f7a53baa62ba2f4c9bd006c7bf4d5fa
https://github.com/FasterXML/jackson-databind/issues/5962
https://github.com/FasterXML/jackson-databind/issues/5964
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5jmj-h7xm-6q6v
https://nvd.nist.gov/vuln/detail/CVE-2026-54515
https://www.cve.org/CVERecord?id=CVE-2026-54515
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-59889 |
MEDIUM |
2.10.2 |
2.21.5, 2.18.9, 2.22.1 |
https://access.redhat.com/security/cve/CVE-2026-59889
https://advisory.echohq.com/cve/CVE-2026-59889
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/d627a8a86fcb062429282f79f3f256f181ed2c7b
https://github.com/FasterXML/jackson-databind/issues/6060
https://github.com/FasterXML/jackson-databind/pull/6056
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5gvw-p9qm-jgwh
https://nvd.nist.gov/vuln/detail/CVE-2026-59889
https://www.cve.org/CVERecord?id=CVE-2026-59889
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-77310 |
MEDIUM |
2.10.2 |
2.18.9, 2.21.5, 2.22.1 |
https://access.redhat.com/security/cve/CVE-2026-77310
https://advisory.echohq.com/cve/CVE-2026-77310
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/2fc7bd9057dd051d7dea0e5fcad89822d0fa5ebd
https://github.com/FasterXML/jackson-databind/pull/6058
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.9
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.5
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.1
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.5
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.1
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-vvgp-rfg2-7rr6
https://nvd.nist.gov/vuln/detail/CVE-2026-77310
https://www.cve.org/CVERecord?id=CVE-2026-77310
|
| com.fasterxml.jackson.dataformat:jackson-dataformat-cbor |
CVE-2020-28491 |
HIGH |
2.10.2 |
2.11.4, 2.12.1 |
https://access.redhat.com/security/cve/CVE-2020-28491
https://github.com/FasterXML/jackson-dataformats-binary
https://github.com/FasterXML/jackson-dataformats-binary/commit/3d7de83423f8f68f8e9a0c8250084e11818544c7
https://github.com/FasterXML/jackson-dataformats-binary/commit/de072d314af8f5f269c8abec6930652af67bc8e6
https://github.com/FasterXML/jackson-dataformats-binary/issues/186
https://nvd.nist.gov/vuln/detail/CVE-2020-28491
https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONDATAFORMAT-1047329
https://www.cve.org/CVERecord?id=CVE-2020-28491
https://www.oracle.com/security-alerts/cpujul2022.html
|
| com.google.code.gson:gson |
CVE-2022-25647 |
HIGH |
2.8.0 |
2.8.9 |
https://access.redhat.com/security/cve/CVE-2022-25647
https://github.com/google/gson
https://github.com/google/gson/pull/1991
https://github.com/google/gson/pull/1991/commits
https://linux.oracle.com/cve/CVE-2022-25647.html
https://linux.oracle.com/errata/ELSA-2022-9656.html
https://lists.debian.org/debian-lts-announce/2022/05/msg00015.html
https://lists.debian.org/debian-lts-announce/2022/09/msg00009.html
https://nvd.nist.gov/vuln/detail/CVE-2022-25647
https://security.netapp.com/advisory/ntap-20220901-0009
https://security.netapp.com/advisory/ntap-20220901-0009/
https://snyk.io/vuln/SNYK-JAVA-COMGOOGLECODEGSON-1730327
https://ubuntu.com/security/notices/USN-6692-1
https://www.cve.org/CVERecord?id=CVE-2022-25647
https://www.debian.org/security/2022/dsa-5227
https://www.oracle.com/security-alerts/cpujul2022.html
|
| com.google.guava:guava |
CVE-2026-102554 |
HIGH |
23.0 |
33.7.2 |
https://access.redhat.com/security/cve/CVE-2026-102554
https://advisory.echohq.com/cve/CVE-2026-102554
https://github.com/advisories/GHSA-xxph-c9ww-hj94
https://github.com/google/guava
https://github.com/google/guava/commit/b931fe9d6d5cf00bc55714ad3308d086f71850fe
https://github.com/google/guava/releases/tag/v33.7.2
https://github.com/google/guava/security/advisories/GHSA-xxph-c9ww-hj94
https://nvd.nist.gov/vuln/detail/CVE-2026-102554
https://www.cve.org/CVERecord?id=CVE-2026-102554
|
| com.google.guava:guava |
CVE-2018-10237 |
MEDIUM |
23.0 |
24.1.1-android |
http://www.securitytracker.com/id/1041707
https://access.redhat.com/errata/RHSA-2018:2423
https://access.redhat.com/errata/RHSA-2018:2424
https://access.redhat.com/errata/RHSA-2018:2425
https://access.redhat.com/errata/RHSA-2018:2428
https://access.redhat.com/errata/RHSA-2018:2598
https://access.redhat.com/errata/RHSA-2018:2643
https://access.redhat.com/errata/RHSA-2018:2740
https://access.redhat.com/errata/RHSA-2018:2741
https://access.redhat.com/errata/RHSA-2018:2742
https://access.redhat.com/errata/RHSA-2018:2743
https://access.redhat.com/errata/RHSA-2018:2927
https://access.redhat.com/errata/RHSA-2019:2858
https://access.redhat.com/errata/RHSA-2019:3149
https://access.redhat.com/security/cve/CVE-2018-10237
https://advisory.echohq.com/cve/CVE-2018-10237
https://github.com/advisories/GHSA-mvr2-9pj6-7w5j
https://github.com/google/guava
https://github.com/google/guava/wiki/CVE-2018-10237
https://groups.google.com/d/topic/guava-announce/xqWALw4W1vs/discussion
https://groups.google.com/forum/#!topic/guava-announce/xqWALw4W1vs/discussion
https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272@%3Cissues.activemq.apache.org%3E
https://lists.apache.org/thread.html/19fa48533bc7ea1accf6b12746a74ed888ae6e49a5cf81ae4f807495@%3Ccommon-dev.hadoop.apache.org%3E
https://lists.apache.org/thread.html/33c6bccfeb7adf644d4d79894ca8f09370be6ed4b20632c2e228d085@%3Ccommits.cassandra.apache.org%3E
https://lists.apache.org/thread.html/3d5dbdd92ac9ceaef90e40f78599f9109f2f345252e0ac9d98e7e084@%3Cgitbox.activemq.apache.org%3E
https://lists.apache.org/thread.html/3ddd79c801edd99c0978e83dbe2168ebd36fd42acfa5dac38fb03dd6@%3Cissues.activemq.apache.org%3E
https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/cc48fe770c45a74dc3b37ed0817393e0c96701fc49bc431ed922f3cc@%3Chdfs-dev.hadoop.apache.org%3E
https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r02e39d7beb32eebcdbb4b516e95f67d71c90d5d462b26f4078d21eeb@%3Cdev.flink.apache.org%3E
https://lists.apache.org/thread.html/r02e39d7beb32eebcdbb4b516e95f67d71c90d5d462b26f4078d21eeb@%3Cuser.flink.apache.org%3E
https://lists.apache.org/thread.html/r223bc776a077d0795786c38cbc6e7dd808fce1a9161b00ba9c0a5d55@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/r22c8173b804cd4a420c43064ba4e363d0022aa421008b1989f7354d4@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r27eb79a87a760335226dbfa6a7b7bffea539a535f8e80c41e482106d@%3Cdev.cxf.apache.org%3E
https://lists.apache.org/thread.html/r2ea4e5e5aa8ad73b001a466c582899620961f47d77a40af712c1fdf9@%3Cdev.cxf.apache.org%3E
https://lists.apache.org/thread.html/r30e7d7b6bfa630dacc41649a0e96dad75165d50474c1241068aa0f94@%3Cissues.storm.apache.org%3E
https://lists.apache.org/thread.html/r352e40ca9874d1beb4ad95403792adca7eb295e6bc3bd7b65fabcc21@%3Ccommits.samza.apache.org%3E
https://lists.apache.org/thread.html/r38e2ab87528d3c904e7fac496e8fd766b9277656ff95b97d6b6b6dcd@%3Cdev.cxf.apache.org%3E
https://lists.apache.org/thread.html/r3c3b33ee5bef0c67391d27a97cbfd89d44f328cf072b601b58d4e748@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r43491b25b2e5c368c34b106a82eff910a5cea3e90de82ad75cc16540@%3Cdev.syncope.apache.org%3E
https://lists.apache.org/thread.html/r50fc0bcc734dd82e691d36d209258683141bfc0083739a77e56ad92d@%3Cdev.flink.apache.org%3E
https://lists.apache.org/thread.html/r841c5e14e1b55281523ebcde661ece00b38a0569e00ef5e12bd5f6ba@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/r95799427b335807a4c54776908125c3e66597b65845ae50096d9278a@%3Cdev.cxf.apache.org%3E
https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b@%3Cusers.kafka.apache.org%3E
https://lists.apache.org/thread.html/ra4f44016926dcb034b3b230280a18102062f94ae55b8a31bb92fed84@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/ra8906723927aef2a599398c238eacfc845b74d812e0093ec2fc70a7d@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/rb3da574c34bc6bd37972d2266af3093b90d7e437460423c24f477919@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/rc78f6e84f82cc662860e96526d8ab969f34dbe12dc560e22d9d147a3@%3Cdev.cxf.apache.org%3E
https://lists.apache.org/thread.html/rc8467f357b943ceaa86f289f8bc1a5d1c7955b75d3bac1426f2d4ac1@%3Ccommon-dev.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rd01f5ff0164c468ec7abc96ff7646cea3cce6378da2e4aa29c6bcb95@%3Cgithub.arrow.apache.org%3E
https://lists.apache.org/thread.html/rd0c8ec6e044aa2958dd0549ebf8ecead7f5968c9474ba73a504161b2@%3Cdev.cxf.apache.org%3E
https://lists.apache.org/thread.html/rdc56c15693c236e31e1e95f847b8e5e74fc0a05741d47488e7fc8c45@%3Cissues.flink.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2018-10237
https://security.netapp.com/advisory/ntap-20220629-0008
https://security.netapp.com/advisory/ntap-20220629-0008/
https://www.cve.org/CVERecord?id=CVE-2018-10237
https://www.oracle.com/security-alerts/cpuapr2020.html
https://www.oracle.com/security-alerts/cpujan2021.html
https://www.oracle.com/security-alerts/cpujul2020.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| com.google.guava:guava |
CVE-2023-2976 |
MEDIUM |
23.0 |
32.0.0-android |
https://access.redhat.com/security/cve/CVE-2023-2976
https://advisory.echohq.com/cve/CVE-2023-2976
https://github.com/advisories/GHSA-7g45-4rm6-3mm3
https://github.com/google/guava
https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284
https://github.com/google/guava/issues/2575
https://github.com/google/guava/issues/6532
https://github.com/google/guava/releases/tag/v32.0.0
https://nvd.nist.gov/vuln/detail/CVE-2023-2976
https://security.netapp.com/advisory/ntap-20230818-0008
https://security.netapp.com/advisory/ntap-20230818-0008/
https://security.netapp.com/advisory/ntap-20241108-0002
https://security.netapp.com/advisory/ntap-20241108-0002/
https://www.cve.org/CVERecord?id=CVE-2023-2976
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01006.html
|
| com.google.guava:guava |
CVE-2020-8908 |
LOW |
23.0 |
32.0.0-android |
https://access.redhat.com/security/cve/CVE-2020-8908
https://advisory.echohq.com/cve/CVE-2020-8908
https://github.com/advisories/GHSA-5mg8-w23w-74h3
https://github.com/google/guava
https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284
https://github.com/google/guava/commit/fec0dbc4634006a6162cfd4d0d09c962073ddf40
https://github.com/google/guava/issues/2575
https://github.com/google/guava/issues/4011
https://github.com/google/guava/issues/4011#issuecomment-1573923586
https://github.com/google/guava/issues/4011#issuecomment-1578991974
https://github.com/google/guava/releases/tag/v32.0.0
https://lists.apache.org/thread.html/r007add131977f4f576c232b25e024249a3d16f66aad14a4b52819d21@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r037fed1d0ebde50c9caf8d99815db3093c344c3f651c5a49a09824ce@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r07ed3e4417ad043a27bee7bb33322e9bfc7d7e6d1719b8e3dfd95c14@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r161b87f8037bbaff400194a63cd2016c9a69f5949f06dcc79beeab54@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r215b3d50f56faeb2f9383505f3e62faa9f549bb23e8a9848b78a968e@%3Ccommits.ws.apache.org%3E
https://lists.apache.org/thread.html/r294be9d31c0312d2c0837087204b5d4bf49d0552890e6eec716fa6a6@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r2fe45d96eea8434b91592ca08109118f6308d60f6d0e21d52438cfb4@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r3c3b33ee5bef0c67391d27a97cbfd89d44f328cf072b601b58d4e748@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r3dd8881de891598d622227e9840dd7c2ef1d08abbb49e9690c7ae1bc@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/r4776f62dfae4a0006658542f43034a7fc199350e35a66d4e18164ee6@%3Ccommits.cxf.apache.org%3E
https://lists.apache.org/thread.html/r49549a8322f62cd3acfa4490d25bfba0be04f3f9ff4d14fe36199d27@%3Cyarn-dev.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r58a8775205ab1839dba43054b09a9ab3b25b423a4170b2413c4067ac@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r5b3d93dfdfb7708e796e8762ab40edbde8ff8add48aba53e5ea26f44@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/r5d61b98ceb7bba939a651de5900dbd67be3817db6bfcc41c6e04e199@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r6874dfe26eefc41b7c9a5e4a0487846fc4accf8c78ff948b24a1104a@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r68d86f4b06c808204f62bcb254fcb5b0432528ee8d37a07ef4bc8222@%3Ccommits.ws.apache.org%3E
https://lists.apache.org/thread.html/r79e47ed555bdb1180e528420a7a2bb898541367a29a3bc6bbf0baf2c@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r7b0e81d8367264d6cad98766a469d64d11248eb654417809bfdacf09@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r841c5e14e1b55281523ebcde661ece00b38a0569e00ef5e12bd5f6ba@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/ra7ab308481ee729f998691e8e3e02e93b1dedfc98f6b1cd3d86923b3@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rb2364f4cf4d274eab5a7ecfaf64bf575cedf8b0173551997c749d322@%3Cgitbox.hive.apache.org%3E
https://lists.apache.org/thread.html/rb8c0f1b7589864396690fe42a91a71dea9412e86eec66dc85bbacaaf@%3Ccommits.cxf.apache.org%3E
https://lists.apache.org/thread.html/rbc7642b9800249553f13457e46b813bea1aec99d2bc9106510e00ff3@%3Ctorque-dev.db.apache.org%3E
https://lists.apache.org/thread.html/rc2dbc4633a6eea1fcbce6831876cfa17b73759a98c65326d1896cb1a@%3Ctorque-dev.db.apache.org%3E
https://lists.apache.org/thread.html/rc607bc52f3507b8b9c28c6a747c3122f51ac24afe80af2a670785b97@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/rcafc3a637d82bdc9a24036b2ddcad1e519dd0e6f848fcc3d606fd78f@%3Cdev.hive.apache.org%3E
https://lists.apache.org/thread.html/rd01f5ff0164c468ec7abc96ff7646cea3cce6378da2e4aa29c6bcb95@%3Cgithub.arrow.apache.org%3E
https://lists.apache.org/thread.html/rd2704306ec729ccac726e50339b8a8f079515cc29ccb77713b16e7c5@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/rd5d58088812cf8e677d99b07f73c654014c524c94e7fedbdee047604@%3Ctorque-dev.db.apache.org%3E
https://lists.apache.org/thread.html/rd7e12d56d49d73e2b8549694974b07561b79b05455f7f781954231bf@%3Cdev.pig.apache.org%3E
https://lists.apache.org/thread.html/re120f6b3d2f8222121080342c5801fdafca2f5188ceeb3b49c8a1d27@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/reebbd63c25bc1a946caa419cec2be78079f8449d1af48e52d47c9e85@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/rf00b688ffa620c990597f829ff85fdbba8bf73ee7bfb34783e1f0d4e@%3Cyarn-dev.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rf9f0fa84b8ae1a285f0210bafec6de2a9eba083007d04640b82aa625@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/rfc27e2727a20a574f39273e0432aa97486a332f9b3068f6ac1346594@%3Cdev.myfaces.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2020-8908
https://security.netapp.com/advisory/ntap-20220210-0003
https://security.netapp.com/advisory/ntap-20220210-0003/
https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEGUAVA-1015415
https://www.cve.org/CVERecord?id=CVE-2020-8908
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| com.sun.mail:jakarta.mail |
CVE-2025-7962 |
MEDIUM |
1.6.4 |
1.6.8, 2.0.2 |
http://www.openwall.com/lists/oss-security/2025/09/03/4
https://access.redhat.com/security/cve/CVE-2025-7962
https://advisory.echohq.com/cve/CVE-2025-7962
https://github.com/advisories/GHSA-9342-92gg-6v29
https://github.com/eclipse-ee4j/angus-mail
https://github.com/eclipse-ee4j/angus-mail/commit/269099b652a0a5c2fa140f1296a18f0fbbea0d44
https://github.com/jakartaee/mail-api/issues/765
https://github.com/jakartaee/mail-api/pull/760
https://gitlab.eclipse.org/security/cve-assignement/-/issues/67
https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/290
https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/290#note_5320539
https://nvd.nist.gov/vuln/detail/CVE-2025-7962
https://www.cve.org/CVERecord?id=CVE-2025-7962
|
| com.thoughtworks.xstream:xstream |
CVE-2021-29505 |
HIGH |
1.4.16 |
1.4.17 |
https://access.redhat.com/security/cve/CVE-2021-29505
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/commit/24fac82191292c6ae25f94508d28b9823f83624f
https://github.com/x-stream/xstream/commit/f0c4a8d861b68ffc3119cfbbbd632deee624e227
https://github.com/x-stream/xstream/security/advisories/GHSA-7chv-rrw6-w6fc
https://linux.oracle.com/cve/CVE-2021-29505.html
https://linux.oracle.com/errata/ELSA-2021-2683.html
https://lists.apache.org/thread.html/r8ee51debf7fd184b6a6b020dc31df25118b0aa612885f12fbe77f04f@%3Cdev.jmeter.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/07/msg00004.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-29505
https://security.netapp.com/advisory/ntap-20210708-0007
https://security.netapp.com/advisory/ntap-20210708-0007/
https://www.cve.org/CVERecord?id=CVE-2021-29505
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
https://x-stream.github.io/CVE-2021-29505.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39139 |
HIGH |
1.4.16 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39139
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-64xx-cq4q-mf44
https://linux.oracle.com/cve/CVE-2021-39139.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39139
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39139
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39139.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39141 |
HIGH |
1.4.16 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39141
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-g5w6-mrj7-75h2
https://linux.oracle.com/cve/CVE-2021-39141.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39141
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39141
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39141.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39144 |
HIGH |
1.4.16 |
1.4.18 |
http://packetstormsecurity.com/files/169859/VMware-NSX-Manager-XStream-Unauthenticated-Remote-Code-Execution.html
https://access.redhat.com/security/cve/CVE-2021-39144
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-j9h8-phrw-h4fh
https://linux.oracle.com/cve/CVE-2021-39144.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39144
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-39144
https://www.cve.org/CVERecord?id=CVE-2021-39144
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39144.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39145 |
HIGH |
1.4.16 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39145
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-8jrj-525p-826v
https://linux.oracle.com/cve/CVE-2021-39145.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39145
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39145
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39145.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39146 |
HIGH |
1.4.16 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39146
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-p8pq-r894-fm8f
https://linux.oracle.com/cve/CVE-2021-39146.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39146
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39146
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39146.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39147 |
HIGH |
1.4.16 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39147
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-h7v4-7xg3-hxcc
https://linux.oracle.com/cve/CVE-2021-39147.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39147
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39147
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39147.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39148 |
HIGH |
1.4.16 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39148
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-qrx8-8545-4wg2
https://linux.oracle.com/cve/CVE-2021-39148.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39148
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39148
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39148.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39149 |
HIGH |
1.4.16 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39149
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-3ccq-5vw3-2p6x
https://linux.oracle.com/cve/CVE-2021-39149.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39149
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39149
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39149.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39150 |
HIGH |
1.4.16 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39150
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-cxfm-5m4g-x7xp
https://linux.oracle.com/cve/CVE-2021-39150.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39150
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39150
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39150.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39151 |
HIGH |
1.4.16 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39151
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-hph2-m3g5-xxv4
https://linux.oracle.com/cve/CVE-2021-39151.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39151
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39151
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39151.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39152 |
HIGH |
1.4.16 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39152
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-xw4p-crpj-vjx2
https://linux.oracle.com/cve/CVE-2021-39152.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39152
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39152
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39152.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39153 |
HIGH |
1.4.16 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39153
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-2q8x-2p7f-574v
https://linux.oracle.com/cve/CVE-2021-39153.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39153
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39153
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39153.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39154 |
HIGH |
1.4.16 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39154
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-6w62-hx7r-mw68
https://linux.oracle.com/cve/CVE-2021-39154.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39154
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39154
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39154.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-43859 |
HIGH |
1.4.16 |
1.4.19 |
http://www.openwall.com/lists/oss-security/2022/02/09/1
https://access.redhat.com/security/cve/CVE-2021-43859
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/commit/e8e88621ba1c85ac3b8620337dd672e0c0c3a846
https://github.com/x-stream/xstream/security/advisories/GHSA-rmr5-cpv2-vgjf
https://lists.debian.org/debian-lts-announce/2022/02/msg00018.html
https://lists.debian.org/debian-lts-announce/2024/12/msg00023.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VACQYG356OHUTD5WQGAQ4L2TTFTAV3SJ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VACQYG356OHUTD5WQGAQ4L2TTFTAV3SJ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XODFRE2ZL64FICBJDOPWOLPTSSAI4U7X
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XODFRE2ZL64FICBJDOPWOLPTSSAI4U7X/
https://nvd.nist.gov/vuln/detail/CVE-2021-43859
https://www.cve.org/CVERecord?id=CVE-2021-43859
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-43859.html
|
| com.thoughtworks.xstream:xstream |
CVE-2022-40151 |
HIGH |
1.4.16 |
1.4.20 |
https://access.redhat.com/security/cve/CVE-2022-40151
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47367
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/issues/304
https://github.com/x-stream/xstream/issues/314
https://github.com/x-stream/xstream/security/advisories/GHSA-f8cc-g7j8-xxpm
https://nvd.nist.gov/vuln/detail/CVE-2022-40151
https://www.cve.org/CVERecord?id=CVE-2022-40151
https://x-stream.github.io/CVE-2022-40151.html
|
| com.thoughtworks.xstream:xstream |
CVE-2022-41966 |
HIGH |
1.4.16 |
1.4.20 |
https://access.redhat.com/security/cve/CVE-2022-41966
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-j563-grx4-pjpv
https://nvd.nist.gov/vuln/detail/CVE-2022-41966
https://security.netapp.com/advisory/ntap-20230216-0005/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2022-41966
https://x-stream.github.io/CVE-2022-41966.html
|
| com.thoughtworks.xstream:xstream |
CVE-2024-47072 |
HIGH |
1.4.16 |
1.4.21 |
https://access.redhat.com/security/cve/CVE-2024-47072
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/commit/bb838ce2269cac47433e31c77b2b236466e9f266
https://github.com/x-stream/xstream/commit/fdd9f7d3de0d7ccf2f9979bcd09fbf3e6a0c881a
https://github.com/x-stream/xstream/security/advisories/GHSA-hfq9-hggm-c56q
https://lists.debian.org/debian-lts-announce/2024/12/msg00023.html
https://nvd.nist.gov/vuln/detail/CVE-2024-47072
https://www.cve.org/CVERecord?id=CVE-2024-47072
https://x-stream.github.io/CVE-2024-47072.html
|
| com.thoughtworks.xstream:xstream |
CVE-2021-39140 |
MEDIUM |
1.4.16 |
1.4.18 |
https://access.redhat.com/security/cve/CVE-2021-39140
https://github.com/x-stream/xstream
https://github.com/x-stream/xstream/security/advisories/GHSA-6wf9-jmg9-vxcc
https://linux.oracle.com/cve/CVE-2021-39140.html
https://linux.oracle.com/errata/ELSA-2021-3956.html
https://lists.debian.org/debian-lts-announce/2021/09/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/
https://nvd.nist.gov/vuln/detail/CVE-2021-39140
https://security.netapp.com/advisory/ntap-20210923-0003
https://security.netapp.com/advisory/ntap-20210923-0003/
https://ubuntu.com/security/notices/USN-5946-1
https://www.cve.org/CVERecord?id=CVE-2021-39140
https://www.debian.org/security/2021/dsa-5004
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://x-stream.github.io/CVE-2021-39140.html
|
| commons-beanutils:commons-beanutils |
CVE-2025-48734 |
HIGH |
1.9.4 |
1.11.0 |
http://www.openwall.com/lists/oss-security/2025/05/28/6
https://access.redhat.com/errata/RHSA-2025:9114
https://access.redhat.com/errata/RHSA-2025:9318
https://access.redhat.com/security/cve/CVE-2025-48734
https://advisory.echohq.com/cve/CVE-2025-48734
https://bugzilla.redhat.com/2368956
https://bugzilla.redhat.com/show_bug.cgi?id=1767483
https://bugzilla.redhat.com/show_bug.cgi?id=2368956
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10086
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48734
https://dlcdn.apache.org/commons/beanutils/RELEASE-NOTES.txt
https://errata.almalinux.org/9/ALSA-2025-9114.html
https://errata.rockylinux.org/RLSA-2025:9318
https://github.com/advisories/GHSA-wxr5-93ph-8wr9
https://github.com/apache/commons-beanutils
https://github.com/apache/commons-beanutils/commit/28ad955a1613ed5885870cc7da52093c1ce739dc
https://github.com/apache/commons-beanutils/commit/bd20740da25b69552ddef8523beec0837297eaf9
https://linux.oracle.com/cve/CVE-2025-48734.html
https://linux.oracle.com/errata/ELSA-2025-9318.html
https://lists.apache.org/thread/s0hb3jkfj5f3ryx6c57zqtfohb0of1g9
https://lists.debian.org/debian-lts-announce/2025/06/msg00027.html
https://nvd.nist.gov/vuln/detail/CVE-2025-48734
https://ubuntu.com/security/notices/USN-8322-1
https://www.cve.org/CVERecord?id=CVE-2025-48734
https://www.openwall.com/lists/oss-security/2025/05/28/6
|
| commons-fileupload:commons-fileupload |
CVE-2023-24998 |
HIGH |
1.4 |
1.5 |
http://www.openwall.com/lists/oss-security/2023/05/22/1
https://access.redhat.com/errata/RHSA-2023:6570
https://access.redhat.com/security/cve/CVE-2023-24998
https://bugzilla.redhat.com/2172298
https://bugzilla.redhat.com/2180856
https://bugzilla.redhat.com/2210321
https://commons.apache.org/proper/commons-fileupload/security-reports.html
https://commons.apache.org/proper/commons-fileupload/security-reports.html#Fixed_in_Apache_Commons_FileUpload_1.5
https://errata.almalinux.org/9/ALSA-2023-6570.html
https://github.com/apache/commons-fileupload
https://github.com/apache/commons-fileupload/commit/e20c04990f7420ca917e96a84cec58b13a1b3d17
https://github.com/apache/tomcat/commit/8a2285f13affa961cc65595aad999db5efae45ce
https://github.com/apache/tomcat/commit/9ca96c8c1eba86c0aaa2e6be581ba2a7d4d4ae6e
https://github.com/apache/tomcat/commit/cf77cc545de0488fb89e24294151504a7432df74
https://github.com/apache/tomcat/commit/d53d8e7f77042cc32a3b98f589496a1ef5088e38
https://github.com/search?q=repo%3Aapache%2Ftomcat+util.http+path%3A%2F%5Eres%5C%2Fbnd%5C%2F%2F&type=code
https://linux.oracle.com/cve/CVE-2023-24998.html
https://linux.oracle.com/errata/ELSA-2023-7065.html
https://lists.apache.org/thread/4xl4l09mhwg4vgsk7dxqogcjrobrrdoy
https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html
https://lists.debian.org/debian-lts-announce/2025/07/msg00008.html
https://nvd.nist.gov/vuln/detail/CVE-2023-24998
https://security.gentoo.org/glsa/202305-37
https://security.netapp.com/advisory/ntap-20230302-0013
https://security.netapp.com/advisory/ntap-20230302-0013/
https://security.netapp.com/advisory/ntap-20241108-0002
https://security.netapp.com/advisory/ntap-20241108-0002/
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-8.html
https://tomcat.apache.org/security-9.html
https://www.cve.org/CVERecord?id=CVE-2023-24998
https://www.debian.org/security/2023/dsa-5522
|
| commons-fileupload:commons-fileupload |
CVE-2025-48976 |
HIGH |
1.4 |
1.6.0 |
http://www.openwall.com/lists/oss-security/2025/06/16/4
https://access.redhat.com/errata/RHSA-2025:14181
https://access.redhat.com/security/cve/CVE-2025-48976
https://advisory.echohq.com/cve/CVE-2025-48976
https://bugzilla.redhat.com/2373015
https://bugzilla.redhat.com/2373018
https://bugzilla.redhat.com/2373020
https://bugzilla.redhat.com/2373309
https://bugzilla.redhat.com/2379374
https://bugzilla.redhat.com/2379382
https://bugzilla.redhat.com/2379386
https://bugzilla.redhat.com/show_bug.cgi?id=2373015
https://bugzilla.redhat.com/show_bug.cgi?id=2373018
https://bugzilla.redhat.com/show_bug.cgi?id=2373020
https://bugzilla.redhat.com/show_bug.cgi?id=2373309
https://bugzilla.redhat.com/show_bug.cgi?id=2379374
https://bugzilla.redhat.com/show_bug.cgi?id=2379382
https://bugzilla.redhat.com/show_bug.cgi?id=2379386
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48976
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48988
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48989
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49125
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52434
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52520
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53506
https://errata.almalinux.org/9/ALSA-2025-14181.html
https://errata.rockylinux.org/RLSA-2025:14181
https://github.com/advisories/GHSA-vv7r-c36w-3prj
https://github.com/apache/commons-fileupload
https://github.com/apache/commons-fileupload/commit/2108495a4775910b8559f18ed5a779d60542ee96%20%28commons-fileupload-1.6.0-RC1%29
https://github.com/apache/commons-fileupload/commit/b247774a72a044f5d5380ae947140ee80af4e78b
https://github.com/apache/commons-fileupload/commit/bf68f63cfb312ef4710fb3dfb4d8e4e1665f4497
https://github.com/apache/tomcat/commit/667ddd76e2a0e762f3a784d86f0d25e7fd7cdb86%20%2810.1.42%29
https://github.com/apache/tomcat/commit/74f69ffaf61e54c727603e7e831fe20f0ac5d2a7%20%2811.0.8%29
https://github.com/apache/tomcat/commit/97790a35a27d236fa053e660676c3f8196284d93
https://github.com/apache/tomcat/commit/97790a35a27d236fa053e660676c3f8196284d93%20%289.0.106%29
https://linux.oracle.com/cve/CVE-2025-48976.html
https://linux.oracle.com/errata/ELSA-2025-14181.html
https://lists.apache.org/thread/fbs3wrr3p67vkjcxogqqqqz45pqtso12
https://lists.apache.org/thread/w7dbnfyqn1yc05kbqqbbyct7wbomv7lf
https://lists.debian.org/debian-lts-announce/2025/07/msg00008.html
https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html
https://nvd.nist.gov/vuln/detail/CVE-2025-48976
https://www.cve.org/CVERecord?id=CVE-2025-48976
|
| commons-io:commons-io |
CVE-2024-47554 |
HIGH |
2.4 |
2.14.0 |
http://www.openwall.com/lists/oss-security/2024/10/03/2
https://access.redhat.com/security/cve/CVE-2024-47554
https://advisory.echohq.com/cve/CVE-2024-47554
https://github.com/advisories/GHSA-78wr-2p64-hpwj
https://github.com/apache/commons-io
https://lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1
https://nvd.nist.gov/vuln/detail/CVE-2024-47554
https://security.netapp.com/advisory/ntap-20250131-0010
https://security.netapp.com/advisory/ntap-20250131-0010/
https://ubuntu.com/security/notices/USN-8191-1
https://www.cve.org/CVERecord?id=CVE-2024-47554
|
| commons-io:commons-io |
CVE-2021-29425 |
MEDIUM |
2.4 |
2.7 |
https://access.redhat.com/security/cve/CVE-2021-29425
https://advisory.echohq.com/cve/CVE-2021-29425
https://arxiv.org/pdf/2306.05534.pdf
https://github.com/advisories/GHSA-gwrp-pvrq-jmwv
https://github.com/jensdietrich/xshady-release/tree/main/CVE-2021-29425
https://issues.apache.org/jira/browse/IO-556
https://lists.apache.org/thread.html/r01b4a1fcdf3311c936ce33d75a9398b6c255f00c1a2f312ac21effe1@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r0bfa8f7921abdfae788b1f076a12f73a92c93cc0a6e1083bce0027c5@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r0d73e2071d1f1afe1a15da14c5b6feb2cf17e3871168d5a3c8451436@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r1c2f4683c35696cf6f863e3c107e37ec41305b1930dd40c17260de71@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r20416f39ca7f7344e7d76fe4d7063bb1d91ad106926626e7e83fb346@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r2345b49dbffa8a5c3c589c082fe39228a2c1d14f11b96c523da701db@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe@%3Cusers.kafka.apache.org%3E
https://lists.apache.org/thread.html/r27b1eedda37468256c4bb768fde1e8b79b37ec975cbbfd0d65a7ac34@%3Cdev.myfaces.apache.org%3E
https://lists.apache.org/thread.html/r2bc986a070457daca457a54fe71ee09d2584c24dc262336ca32b6a19@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r2df50af2641d38f432ef025cd2ba5858215cc0cf3fc10396a674ad2e@%3Cpluto-scm.portals.apache.org%3E
https://lists.apache.org/thread.html/r345330b7858304938b7b8029d02537a116d75265a598c98fa333504a@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r4050f9f6b42ebfa47a98cbdee4aabed4bb5fb8093db7dbb88faceba2@%3Ccommits.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r462db908acc1e37c455e11b1a25992b81efd18e641e7e0ceb1b6e046@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r477c285126ada5c3b47946bb702cb222ac4e7fd3100c8549bdd6d3b2@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r47ab6f68cbba8e730f42c4ea752f3a44eb95fb09064070f2476bb401@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r5149f78be265be69d34eacb4e4b0fc7c9c697bcdfa91a1c1658d717b@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r523a6ffad58f71c4f3761e3cee72df878e48cdc89ebdce933be1475c@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r808be7d93b17a7055c1981a8453ae5f0d0fce5855407793c5d0ffffa@%3Cuser.commons.apache.org%3E
https://lists.apache.org/thread.html/r8569a41d565ca880a4dee0e645dad1cd17ab4a92e68055ad9ebb7375@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r86528f4b7d222aed7891e7ac03d69a0db2a2dfa17b86ac3470d7f374@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r873d5ddafc0a68fd999725e559776dc4971d1ab39c0f5cc81bd9bc04@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r8bfc7235e6b39d90e6f446325a5a44c3e9e50da18860fdabcee23e29@%3Cissues.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/r8efcbabde973ea72f5e0933adc48ef1425db5cde850bf641b3993f31@%3Cdev.commons.apache.org%3E
https://lists.apache.org/thread.html/r92ea904f4bae190b03bd42a4355ce3c2fbe8f36ab673e03f6ca3f9fa@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/ra8ef65aedc086d2d3d21492b4c08ae0eb8a3a42cc52e29ba1bc009d8@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/raa053846cae9d497606027816ae87b4e002b2e0eb66cb0dee710e1f5@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/rad4ae544747df32ccd58fff5a86cd556640396aeb161aa71dd3d192a@%3Cuser.commons.apache.org%3E
https://lists.apache.org/thread.html/rbebd3e19651baa7a4a5503a9901c95989df9d40602c8e35cb05d3eb5@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/rc10fa20ef4d13cbf6ebe0b06b5edb95466a1424a9b7673074ed03260@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rc2dd3204260e9227a67253ef68b6f1599446005bfa0e1ddce4573a80@%3Cpluto-dev.portals.apache.org%3E
https://lists.apache.org/thread.html/rc359823b5500e9a9a2572678ddb8e01d3505a7ffcadfa8d13b8780ab@%3Cuser.commons.apache.org%3E
https://lists.apache.org/thread.html/rc5f3df5316c5237b78a3dff5ab95b311ad08e61d418cd992ca7e34ae@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rc65f9bc679feffe4589ea0981ee98bc0af9139470f077a91580eeee0@%3Cpluto-dev.portals.apache.org%3E
https://lists.apache.org/thread.html/rca71a10ca533eb9bfac2d590533f02e6fb9064d3b6aa3ec90fdc4f51@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rd09d4ab3e32e4b3a480e2ff6ff118712981ca82e817f28f2a85652a6@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/re41e9967bee064e7369411c28f0f5b2ad28b8334907c9c6208017279@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/red3aea910403d8620c73e1c7b9c9b145798d0469eb3298a7be7891af@%3Cnotifications.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rfa2f08b7c0caf80ca9f4a18bd875918fdd4e894e2ea47942a4589b9c@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/rfcd2c649c205f12b72dde044f905903460669a220a2eb7e12652d19d@%3Cdev.zookeeper.apache.org%3E
https://lists.apache.org/thread.html/rfd01af05babc95b8949e6d8ea78d9834699e1b06981040dde419a330@%3Cdev.commons.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/08/msg00016.html
https://nvd.nist.gov/vuln/detail/CVE-2021-29425
https://security.netapp.com/advisory/ntap-20220210-0004
https://security.netapp.com/advisory/ntap-20220210-0004/
https://ubuntu.com/security/notices/USN-5095-1
https://www.cve.org/CVERecord?id=CVE-2021-29425
https://www.openwall.com/lists/oss-security/2021/04/12/1
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| commons-lang:commons-lang |
CVE-2025-48924 |
MEDIUM |
2.6 |
|
http://www.openwall.com/lists/oss-security/2025/07/11/1
https://access.redhat.com/security/cve/CVE-2025-48924
https://advisory.echohq.com/cve/CVE-2025-48924
https://github.com/apache/commons-lang
https://github.com/apache/commons-lang/commit/b424803abdb2bec818e4fbcb251ce031c22aca53
https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1
https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html
https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html
https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html
https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html
https://nvd.nist.gov/vuln/detail/CVE-2025-48924
https://ubuntu.com/security/notices/USN-8364-1
https://www.cve.org/CVERecord?id=CVE-2025-48924
https://www.openwall.com/lists/oss-security/2025/07/11/1
|
| commons-net:commons-net |
CVE-2021-37533 |
MEDIUM |
3.5 |
3.9.0 |
http://www.openwall.com/lists/oss-security/2022/12/03/1
https://access.redhat.com/security/cve/CVE-2021-37533
https://advisory.echohq.com/cve/CVE-2021-37533
https://github.com/advisories/GHSA-cgp8-4m63-fhh5
https://github.com/apache/commons-net
https://github.com/apache/commons-net/commit/4fe1bae56e53f32756b1ca3296f3dd2c45e3e060
https://github.com/apache/commons-net/commit/b0bff89f70cfea70009e22f87639816cc3993974%20%28commons-net-3.9.0-RC1%29
https://issues.apache.org/jira/browse/NET-711
https://lists.apache.org/thread/o6yn9r9x6s94v97264hmgol1sf48mvx7
https://lists.debian.org/debian-lts-announce/2022/12/msg00038.html
https://nvd.nist.gov/vuln/detail/CVE-2021-37533
https://ubuntu.com/security/notices/USN-6037-1
https://www.cve.org/CVERecord?id=CVE-2021-37533
https://www.debian.org/security/2022/dsa-5307
|
| io.github.classgraph:classgraph |
CVE-2021-47621 |
MEDIUM |
4.6.32 |
4.8.112 |
https://advisory.echohq.com/cve/CVE-2021-47621
https://docs.r3.com/en/platform/corda/4.8/enterprise/release-notes-enterprise.html
https://github.com/advisories/GHSA-v2xm-76pq-phcf
https://github.com/classgraph/classgraph
https://github.com/classgraph/classgraph/commit/681362ad6b0b9d9abaffb2e07099ce54d7a41fa3
https://github.com/classgraph/classgraph/pull/539
https://github.com/classgraph/classgraph/releases/tag/classgraph-4.8.112
https://nvd.nist.gov/vuln/detail/CVE-2021-47621
|
| io.netty:netty-codec |
CVE-2021-37136 |
HIGH |
4.1.66.Final |
4.1.68.Final |
https://access.redhat.com/security/cve/CVE-2021-37136
https://github.com/netty/netty
https://github.com/netty/netty/blob/4.1/codec/src/main/java/io/netty/handler/codec/compression/Bzip2Decoder.java#L294
https://github.com/netty/netty/blob/4.1/codec/src/main/java/io/netty/handler/codec/compression/Bzip2Decoder.java#L305
https://github.com/netty/netty/blob/4.1/codec/src/main/java/io/netty/handler/codec/compression/Bzip2Decoder.java#L80
https://github.com/netty/netty/commit/41d3d61a61608f2223bb364955ab2045dd5e4020
https://github.com/netty/netty/security/advisories/GHSA-grg4-wf29-r9vv
https://lists.apache.org/thread.html/r06a145c9bd41a7344da242cef07977b24abe3349161ede948e30913d@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r5406eaf3b07577d233b9f07cfc8f26e28369e6bab5edfcab41f28abb@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r5e05eba32476c580412f9fbdfc9b8782d5b40558018ac4ac07192a04@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r75490c61c2cb7b6ae2c81238fd52ae13636c60435abcd732d41531a0@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/rd262f59b1586a108e320e5c966feeafbb1b8cdc96965debc7cc10b16@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/rfb2bf8597e53364ccab212fbcbb2a4e9f0a9e1429b1dc08023c6868e@%3Cdev.tinkerpop.apache.org%3E
https://lists.debian.org/debian-lts-announce/2023/01/msg00008.html
https://nvd.nist.gov/vuln/detail/CVE-2021-37136
https://security.netapp.com/advisory/ntap-20220210-0012
https://security.netapp.com/advisory/ntap-20220210-0012/
https://ubuntu.com/security/notices/USN-6049-1
https://www.cve.org/CVERecord?id=CVE-2021-37136
https://www.debian.org/security/2023/dsa-5316
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
|
| io.netty:netty-codec |
CVE-2021-37137 |
HIGH |
4.1.66.Final |
4.1.68.Final |
https://access.redhat.com/security/cve/CVE-2021-37137
https://github.com/netty/netty
https://github.com/netty/netty/blob/4.1/codec/src/main/java/io/netty/handler/codec/compression/SnappyFrameDecoder.java#L171
https://github.com/netty/netty/blob/4.1/codec/src/main/java/io/netty/handler/codec/compression/SnappyFrameDecoder.java#L185
https://github.com/netty/netty/blob/4.1/codec/src/main/java/io/netty/handler/codec/compression/SnappyFrameDecoder.java#L79
https://github.com/netty/netty/commit/6da4956b31023ae967451e1d94ff51a746a9194f
https://github.com/netty/netty/security/advisories/GHSA-9vjp-v76f-g363
https://github.com/netty/netty/security/advisories/GHSA-grg4-wf29-r9vv
https://lists.apache.org/thread.html/r06a145c9bd41a7344da242cef07977b24abe3349161ede948e30913d@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r5406eaf3b07577d233b9f07cfc8f26e28369e6bab5edfcab41f28abb@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r5e05eba32476c580412f9fbdfc9b8782d5b40558018ac4ac07192a04@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/r75490c61c2cb7b6ae2c81238fd52ae13636c60435abcd732d41531a0@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/rd262f59b1586a108e320e5c966feeafbb1b8cdc96965debc7cc10b16@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/rfb2bf8597e53364ccab212fbcbb2a4e9f0a9e1429b1dc08023c6868e@%3Cdev.tinkerpop.apache.org%3E
https://lists.debian.org/debian-lts-announce/2023/01/msg00008.html
https://nvd.nist.gov/vuln/detail/CVE-2021-37137
https://security.netapp.com/advisory/ntap-20220210-0012
https://security.netapp.com/advisory/ntap-20220210-0012/
https://ubuntu.com/security/notices/USN-6049-1
https://www.cve.org/CVERecord?id=CVE-2021-37137
https://www.debian.org/security/2023/dsa-5316
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
|
| io.netty:netty-codec |
CVE-2026-42583 |
HIGH |
4.1.66.Final |
4.1.133.Final |
https://access.redhat.com/security/cve/CVE-2026-42583
https://advisory.echohq.com/cve/CVE-2026-42583
https://github.com/netty/netty
https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6
https://nvd.nist.gov/vuln/detail/CVE-2026-42583
https://www.cve.org/CVERecord?id=CVE-2026-42583
|
| io.netty:netty-codec |
CVE-2026-59901 |
HIGH |
4.1.66.Final |
4.1.136.Final |
https://access.redhat.com/security/cve/CVE-2026-59901
https://advisory.echohq.com/cve/CVE-2026-59901
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.136.Final
https://github.com/netty/netty/releases/tag/netty-4.2.16.Final
https://github.com/netty/netty/security/advisories/GHSA-558v-64gr-wgg4
https://nvd.nist.gov/vuln/detail/CVE-2026-59901
https://www.cve.org/CVERecord?id=CVE-2026-59901
|
| io.netty:netty-codec |
CVE-2025-58057 |
MEDIUM |
4.1.66.Final |
4.1.125.Final |
https://access.redhat.com/security/cve/CVE-2025-58057
https://advisory.echohq.com/cve/CVE-2025-58057
https://github.com/netty/netty
https://github.com/netty/netty/commit/9d804c54ce962408ae6418255a83a13924f7145d
https://github.com/netty/netty/commit/9d804c54ce962408ae6418255a83a13924f7145d%20%28netty-4.2.5.Final%29
https://github.com/netty/netty/security/advisories/GHSA-3p8m-j85q-pgmj
https://nvd.nist.gov/vuln/detail/CVE-2025-58057
https://ubuntu.com/security/notices/USN-7918-1
https://www.cve.org/CVERecord?id=CVE-2025-58057
|
| io.netty:netty-codec-http |
CVE-2026-33870 |
HIGH |
4.1.66.Final |
4.1.132.Final, 4.2.10.Final |
https://access.redhat.com/errata/RHSA-2026:10175
https://access.redhat.com/errata/RHSA-2026:10184
https://access.redhat.com/errata/RHSA-2026:13571
https://access.redhat.com/errata/RHSA-2026:14272
https://access.redhat.com/errata/RHSA-2026:14276
https://access.redhat.com/errata/RHSA-2026:17668
https://access.redhat.com/errata/RHSA-2026:17789
https://access.redhat.com/errata/RHSA-2026:18054
https://access.redhat.com/errata/RHSA-2026:18055
https://access.redhat.com/errata/RHSA-2026:18059
https://access.redhat.com/errata/RHSA-2026:22619
https://access.redhat.com/errata/RHSA-2026:34608
https://access.redhat.com/errata/RHSA-2026:65126
https://access.redhat.com/errata/RHSA-2026:7109
https://access.redhat.com/errata/RHSA-2026:7380
https://access.redhat.com/errata/RHSA-2026:8159
https://access.redhat.com/errata/RHSA-2026:8509
https://access.redhat.com/security/cve/CVE-2026-33870
https://advisory.echohq.com/cve/CVE-2026-33870
https://bugzilla.redhat.com/show_bug.cgi?id=2452453
https://github.com/advisories/GHSA-pwqr-wmgm-9rr8
https://github.com/netty/netty
https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8
https://nvd.nist.gov/vuln/detail/CVE-2026-33870
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33870.json
https://w4ke.info/2025/06/18/funky-chunks.html
https://w4ke.info/2025/10/29/funky-chunks-2.html
https://www.cve.org/CVERecord?id=CVE-2026-33870
https://www.rfc-editor.org/rfc/rfc9110
|
| io.netty:netty-codec-http |
CVE-2026-42584 |
HIGH |
4.1.66.Final |
4.2.13.Final, 4.1.133.Final |
https://access.redhat.com/errata/RHSA-2026:23808
https://access.redhat.com/errata/RHSA-2026:24502
https://access.redhat.com/errata/RHSA-2026:25123
https://access.redhat.com/errata/RHSA-2026:28010
https://access.redhat.com/errata/RHSA-2026:36820
https://access.redhat.com/errata/RHSA-2026:37390
https://access.redhat.com/errata/RHSA-2026:42644
https://access.redhat.com/errata/RHSA-2026:49700
https://access.redhat.com/errata/RHSA-2026:49701
https://access.redhat.com/errata/RHSA-2026:53644
https://access.redhat.com/errata/RHSA-2026:53645
https://access.redhat.com/errata/RHSA-2026:53646
https://access.redhat.com/errata/RHSA-2026:54435
https://access.redhat.com/errata/RHSA-2026:65126
https://access.redhat.com/errata/RHSA-2026:66488
https://access.redhat.com/errata/RHSA-2026:66545
https://access.redhat.com/security/cve/CVE-2026-42584
https://advisory.echohq.com/cve/CVE-2026-42584
https://bugzilla.redhat.com/show_bug.cgi?id=2477224
https://github.com/netty/netty
https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3
https://nvd.nist.gov/vuln/detail/CVE-2026-42584
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42584.json
https://ubuntu.com/security/notices/USN-8401-1
https://www.cve.org/CVERecord?id=CVE-2026-42584
|
| io.netty:netty-codec-http |
CVE-2026-42587 |
HIGH |
4.1.66.Final |
4.2.13.Final, 4.1.133.Final |
https://access.redhat.com/errata/RHSA-2026:23808
https://access.redhat.com/errata/RHSA-2026:24502
https://access.redhat.com/errata/RHSA-2026:25123
https://access.redhat.com/errata/RHSA-2026:28010
https://access.redhat.com/errata/RHSA-2026:34608
https://access.redhat.com/errata/RHSA-2026:36820
https://access.redhat.com/errata/RHSA-2026:37390
https://access.redhat.com/errata/RHSA-2026:41951
https://access.redhat.com/errata/RHSA-2026:42644
https://access.redhat.com/errata/RHSA-2026:49700
https://access.redhat.com/errata/RHSA-2026:49701
https://access.redhat.com/errata/RHSA-2026:50085
https://access.redhat.com/errata/RHSA-2026:53644
https://access.redhat.com/errata/RHSA-2026:53645
https://access.redhat.com/errata/RHSA-2026:53646
https://access.redhat.com/errata/RHSA-2026:54435
https://access.redhat.com/errata/RHSA-2026:65126
https://access.redhat.com/errata/RHSA-2026:66488
https://access.redhat.com/errata/RHSA-2026:66545
https://access.redhat.com/security/cve/CVE-2026-42587
https://advisory.echohq.com/cve/CVE-2026-42587
https://bugzilla.redhat.com/show_bug.cgi?id=2477220
https://github.com/netty/netty
https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv
https://nvd.nist.gov/vuln/detail/CVE-2026-42587
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42587.json
https://www.cve.org/CVERecord?id=CVE-2026-42587
|
| io.netty:netty-codec-http |
CVE-2026-55831 |
HIGH |
4.1.66.Final |
4.2.16.Final, 4.1.136.Final |
https://access.redhat.com/security/cve/CVE-2026-55831
https://advisory.echohq.com/cve/CVE-2026-55831
https://github.com/netty/netty
https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b
https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6
https://github.com/netty/netty/releases/tag/netty-4.1.136.Final
https://github.com/netty/netty/releases/tag/netty-4.2.16.Final
https://github.com/netty/netty/security/advisories/GHSA-6jqx-86gh-f27w
https://nvd.nist.gov/vuln/detail/CVE-2026-55831
https://www.cve.org/CVERecord?id=CVE-2026-55831
|
| io.netty:netty-codec-http |
CVE-2026-55833 |
HIGH |
4.1.66.Final |
4.2.16.Final, 4.1.136.Final |
https://access.redhat.com/security/cve/CVE-2026-55833
https://advisory.echohq.com/cve/CVE-2026-55833
https://github.com/netty/netty
https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b
https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6
https://github.com/netty/netty/releases/tag/netty-4.1.136.Final
https://github.com/netty/netty/releases/tag/netty-4.2.16.Final
https://github.com/netty/netty/security/advisories/GHSA-mvh2-crg5-v77c
https://nvd.nist.gov/vuln/detail/CVE-2026-55833
https://www.cve.org/CVERecord?id=CVE-2026-55833
|
| io.netty:netty-codec-http |
CVE-2026-56745 |
HIGH |
4.1.66.Final |
4.2.16.Final, 4.1.136.Final |
https://access.redhat.com/security/cve/CVE-2026-56745
https://advisory.echohq.com/cve/CVE-2026-56745
https://github.com/netty/netty
https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b
https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6
https://github.com/netty/netty/releases/tag/netty-4.1.136.Final
https://github.com/netty/netty/releases/tag/netty-4.2.16.Final
https://github.com/netty/netty/security/advisories/GHSA-jppx-w49h-x2qq
https://nvd.nist.gov/vuln/detail/CVE-2026-56745
https://www.cve.org/CVERecord?id=CVE-2026-56745
|
| io.netty:netty-codec-http |
CVE-2021-43797 |
MEDIUM |
4.1.66.Final |
4.1.71.Final |
https://access.redhat.com/security/cve/CVE-2021-43797
https://github.com/netty/netty
https://github.com/netty/netty/commit/07aa6b5938a8b6ed7a6586e066400e2643897323
https://github.com/netty/netty/commit/07aa6b5938a8b6ed7a6586e066400e2643897323%20%28netty-4.1.71.Final%29
https://github.com/netty/netty/pull/11891
https://github.com/netty/netty/security/advisories/GHSA-wx5j-54mm-rqqq
https://lists.debian.org/debian-lts-announce/2023/01/msg00008.html
https://nvd.nist.gov/vuln/detail/CVE-2021-43797
https://security.netapp.com/advisory/ntap-20220107-0003
https://security.netapp.com/advisory/ntap-20220107-0003/
https://ubuntu.com/security/notices/USN-6049-1
https://www.cve.org/CVERecord?id=CVE-2021-43797
https://www.debian.org/security/2023/dsa-5316
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
|
| io.netty:netty-codec-http |
CVE-2022-24823 |
MEDIUM |
4.1.66.Final |
4.1.77.Final |
https://access.redhat.com/security/cve/CVE-2022-24823
https://github.com/netty/netty
https://github.com/netty/netty/commit/185f8b2756a36aaa4f973f1a2a025e7d981823f1
https://github.com/netty/netty/security/advisories/GHSA-269q-hmxg-m83q
https://github.com/netty/netty/security/advisories/GHSA-5mcr-gq6c-3hq2
https://nvd.nist.gov/vuln/detail/CVE-2022-24823
https://security.netapp.com/advisory/ntap-20220616-0004
https://security.netapp.com/advisory/ntap-20220616-0004/
https://ubuntu.com/security/notices/USN-7284-1
https://www.cve.org/CVERecord?id=CVE-2022-24823
https://www.oracle.com/security-alerts/cpujul2022.html
|
| io.netty:netty-codec-http |
CVE-2024-29025 |
MEDIUM |
4.1.66.Final |
4.1.108.Final |
https://access.redhat.com/security/cve/CVE-2024-29025
https://advisory.echohq.com/cve/CVE-2024-29025
https://gist.github.com/vietj/f558b8ea81ec6505f1e9a6ca283c9ae3
https://github.com/advisories/GHSA-5jpm-x58v-624v
https://github.com/netty/netty
https://github.com/netty/netty/commit/0d0c6ed782d13d423586ad0c71737b2c7d02058c
https://github.com/netty/netty/commit/0d0c6ed782d13d423586ad0c71737b2c7d02058c%20%28netty-4.1.108.Final%29
https://github.com/netty/netty/security/advisories/GHSA-5jpm-x58v-624v
https://github.com/vietj/netty/tree/post-request-decoder
https://lists.debian.org/debian-lts-announce/2024/06/msg00015.html
https://nvd.nist.gov/vuln/detail/CVE-2024-29025
https://security.snyk.io/vuln/SNYK-JAVA-IONETTY-6483812
https://ubuntu.com/security/notices/USN-7284-1
https://www.cve.org/CVERecord?id=CVE-2024-29025
|
| io.netty:netty-codec-http |
CVE-2025-67735 |
MEDIUM |
4.1.66.Final |
4.2.8.Final, 4.1.129.Final |
https://access.redhat.com/security/cve/CVE-2025-67735
https://advisory.echohq.com/cve/CVE-2025-67735
https://github.com/netty/netty
https://github.com/netty/netty/commit/77e81f1e5944d98b3acf887d3aa443b252752e94
https://github.com/netty/netty/security/advisories/GHSA-84h7-rjj3-6jx4
https://nvd.nist.gov/vuln/detail/CVE-2025-67735
https://ubuntu.com/security/notices/USN-8654-1
https://www.cve.org/CVERecord?id=CVE-2025-67735
|
| io.netty:netty-codec-http |
CVE-2026-41417 |
MEDIUM |
4.1.66.Final |
4.1.133.Final, 4.2.13.Final |
https://access.redhat.com/security/cve/CVE-2026-41417
https://advisory.echohq.com/cve/CVE-2026-41417
https://github.com/netty/netty
https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv
https://nvd.nist.gov/vuln/detail/CVE-2026-41417
https://www.cve.org/CVERecord?id=CVE-2026-41417
|
| io.netty:netty-codec-http |
CVE-2026-42580 |
MEDIUM |
4.1.66.Final |
4.2.13.Final, 4.1.133.Final |
https://access.redhat.com/security/cve/CVE-2026-42580
https://advisory.echohq.com/cve/CVE-2026-42580
https://github.com/netty/netty
https://github.com/netty/netty/security/advisories/GHSA-m4cv-j2px-7723
https://nvd.nist.gov/vuln/detail/CVE-2026-42580
https://www.cve.org/CVERecord?id=CVE-2026-42580
|
| io.netty:netty-codec-http |
CVE-2026-42581 |
MEDIUM |
4.1.66.Final |
4.2.13.Final, 4.1.133.Final |
https://access.redhat.com/errata/RHSA-2026:23808
https://access.redhat.com/errata/RHSA-2026:24502
https://access.redhat.com/errata/RHSA-2026:25123
https://access.redhat.com/errata/RHSA-2026:28010
https://access.redhat.com/errata/RHSA-2026:36820
https://access.redhat.com/errata/RHSA-2026:37390
https://access.redhat.com/errata/RHSA-2026:42644
https://access.redhat.com/errata/RHSA-2026:49700
https://access.redhat.com/errata/RHSA-2026:49701
https://access.redhat.com/errata/RHSA-2026:53644
https://access.redhat.com/errata/RHSA-2026:53645
https://access.redhat.com/errata/RHSA-2026:53646
https://access.redhat.com/errata/RHSA-2026:54435
https://access.redhat.com/errata/RHSA-2026:65126
https://access.redhat.com/errata/RHSA-2026:66488
https://access.redhat.com/errata/RHSA-2026:66545
https://access.redhat.com/security/cve/CVE-2026-42581
https://advisory.echohq.com/cve/CVE-2026-42581
https://bugzilla.redhat.com/show_bug.cgi?id=2477232
https://github.com/netty/netty
https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9
https://nvd.nist.gov/vuln/detail/CVE-2026-42581
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42581.json
https://ubuntu.com/security/notices/USN-8401-1
https://www.cve.org/CVERecord?id=CVE-2026-42581
|
| io.netty:netty-codec-http |
CVE-2026-42585 |
MEDIUM |
4.1.66.Final |
4.2.13.Final, 4.1.133.Final |
https://access.redhat.com/security/cve/CVE-2026-42585
https://advisory.echohq.com/cve/CVE-2026-42585
https://datatracker.ietf.org/doc/html/rfc9112#name-message-body-length
https://github.com/netty/netty
https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv
https://nvd.nist.gov/vuln/detail/CVE-2026-42585
https://ubuntu.com/security/notices/USN-8401-1
https://www.cve.org/CVERecord?id=CVE-2026-42585
|
| io.netty:netty-codec-http |
CVE-2026-50020 |
MEDIUM |
4.1.66.Final |
4.2.15.Final, 4.1.135.Final |
https://access.redhat.com/security/cve/CVE-2026-50020
https://advisory.echohq.com/cve/CVE-2026-50020
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.135.Final
https://github.com/netty/netty/releases/tag/netty-4.2.15.Final
https://github.com/netty/netty/security/advisories/GHSA-hvcg-qmg6-jm4c
https://nvd.nist.gov/vuln/detail/CVE-2026-50020
https://www.cve.org/CVERecord?id=CVE-2026-50020
|
| io.netty:netty-codec-http |
CVE-2026-56746 |
MEDIUM |
4.1.66.Final |
4.2.16.Final, 4.1.136.Final |
https://access.redhat.com/security/cve/CVE-2026-56746
https://advisory.echohq.com/cve/CVE-2026-56746
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.136.Final
https://github.com/netty/netty/releases/tag/netty-4.2.16.Final
https://github.com/netty/netty/security/advisories/GHSA-6cqp-g7gg-8hr5
https://nvd.nist.gov/vuln/detail/CVE-2026-56746
https://www.cve.org/CVERecord?id=CVE-2026-56746
|
| io.netty:netty-codec-http |
CVE-2026-59898 |
MEDIUM |
4.1.66.Final |
4.2.16.Final, 4.1.136.Final |
https://access.redhat.com/security/cve/CVE-2026-59898
https://advisory.echohq.com/cve/CVE-2026-59898
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.136.Final
https://github.com/netty/netty/releases/tag/netty-4.2.16.Final
https://github.com/netty/netty/security/advisories/GHSA-4mp9-239f-g9hg
https://nvd.nist.gov/vuln/detail/CVE-2026-59898
https://www.cve.org/CVERecord?id=CVE-2026-59898
|
| io.netty:netty-codec-http |
CVE-2026-59899 |
MEDIUM |
4.1.66.Final |
4.2.16.Final, 4.1.136.Final |
https://access.redhat.com/security/cve/CVE-2026-59899
https://advisory.echohq.com/cve/CVE-2026-59899
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.136.Final
https://github.com/netty/netty/releases/tag/netty-4.2.16.Final
https://github.com/netty/netty/security/advisories/GHSA-q4f6-jm68-57ww
https://netty.io/news/2026/07/09/4-1-136-Final.html
https://nvd.nist.gov/vuln/detail/CVE-2026-59899
https://www.cve.org/CVERecord?id=CVE-2026-59899
|
| io.netty:netty-codec-http |
CVE-2026-59903 |
MEDIUM |
4.1.66.Final |
4.2.17.Final, 4.1.137.Final |
https://access.redhat.com/security/cve/CVE-2026-59903
https://advisory.echohq.com/cve/CVE-2026-59903
https://github.com/netty/netty
https://github.com/netty/netty/pull/17213
https://github.com/netty/netty/pull/17217
https://github.com/netty/netty/releases/tag/netty-4.1.137.Final
https://github.com/netty/netty/releases/tag/netty-4.2.17.Final
https://github.com/netty/netty/security/advisories/GHSA-8c42-7qj2-3j46
https://nvd.nist.gov/vuln/detail/CVE-2026-59903
https://www.cve.org/CVERecord?id=CVE-2026-59903
|
| io.netty:netty-codec-http |
CVE-2026-59921 |
MEDIUM |
4.1.66.Final |
4.2.16.Final, 4.1.136.Final |
https://access.redhat.com/security/cve/CVE-2026-59921
https://advisory.echohq.com/cve/CVE-2026-59921
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.136.Final
https://github.com/netty/netty/releases/tag/netty-4.2.16.Final
https://github.com/netty/netty/security/advisories/GHSA-gcjf-9mgh-3p7g
https://nvd.nist.gov/vuln/detail/CVE-2026-59921
https://www.cve.org/CVERecord?id=CVE-2026-59921
|
| io.netty:netty-codec-http |
CVE-2025-58056 |
LOW |
4.1.66.Final |
4.1.125.Final, 4.2.5.Final |
https://access.redhat.com/security/cve/CVE-2025-58056
https://advisory.echohq.com/cve/CVE-2025-58056
https://datatracker.ietf.org/doc/html/rfc9112#name-chunked-transfer-coding
https://github.com/JLLeitschuh/unCVEed/issues/1
https://github.com/github/advisory-database/pull/6092
https://github.com/netty/netty
https://github.com/netty/netty/commit/edb55fd8e0a3bcbd85881e423464f585183d1284
https://github.com/netty/netty/issues/15522
https://github.com/netty/netty/pull/15611
https://github.com/netty/netty/security/advisories/GHSA-fghv-69vj-qj49
https://nvd.nist.gov/vuln/detail/CVE-2025-58056
https://ubuntu.com/security/notices/USN-7918-1
https://w4ke.info/2025/06/18/funky-chunks.html
https://www.cve.org/CVERecord?id=CVE-2025-58056
|
| io.netty:netty-codec-http2 |
CVE-2025-55163 |
HIGH |
4.1.66.Final |
4.2.4.Final, 4.1.124.Final |
http://www.openwall.com/lists/oss-security/2025/08/16/1
https://access.redhat.com/security/cve/CVE-2025-55163
https://advisory.echohq.com/cve/CVE-2025-55163
https://github.com/advisories/GHSA-prj3-ccx8-p6x4
https://github.com/grpc/grpc-java/commit/6462ef9a11980e168c21d90bbc7245c728fd1a7a
https://github.com/netty/netty
https://github.com/netty/netty/commit/be53dc3c9acd9af2e20d0c3c07cd77115a594cf1
https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4
https://kb.cert.org/vuls/id/767506
https://nvd.nist.gov/vuln/detail/CVE-2025-55163
https://ubuntu.com/security/notices/USN-8654-1
https://www.cve.org/CVERecord?id=CVE-2025-55163
https://www.kb.cert.org/vuls/id/767506
|
| io.netty:netty-codec-http2 |
CVE-2026-33871 |
HIGH |
4.1.66.Final |
4.1.132.Final, 4.2.11.Final |
https://access.redhat.com/errata/RHSA-2026:10175
https://access.redhat.com/errata/RHSA-2026:10184
https://access.redhat.com/errata/RHSA-2026:13571
https://access.redhat.com/errata/RHSA-2026:14272
https://access.redhat.com/errata/RHSA-2026:14276
https://access.redhat.com/errata/RHSA-2026:17668
https://access.redhat.com/errata/RHSA-2026:17789
https://access.redhat.com/errata/RHSA-2026:18054
https://access.redhat.com/errata/RHSA-2026:18055
https://access.redhat.com/errata/RHSA-2026:18059
https://access.redhat.com/errata/RHSA-2026:22619
https://access.redhat.com/errata/RHSA-2026:34608
https://access.redhat.com/errata/RHSA-2026:65126
https://access.redhat.com/errata/RHSA-2026:7109
https://access.redhat.com/errata/RHSA-2026:7380
https://access.redhat.com/errata/RHSA-2026:8159
https://access.redhat.com/errata/RHSA-2026:8509
https://access.redhat.com/security/cve/CVE-2026-33871
https://advisory.echohq.com/cve/CVE-2026-33871
https://bugzilla.redhat.com/show_bug.cgi?id=2452456
https://github.com/advisories/GHSA-w9fj-cfpg-grvv
https://github.com/netty/netty
https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv
https://nvd.nist.gov/vuln/detail/CVE-2026-33871
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33871.json
https://www.cve.org/CVERecord?id=CVE-2026-33871
|
| io.netty:netty-codec-http2 |
CVE-2026-42587 |
HIGH |
4.1.66.Final |
4.2.13.Final, 4.1.133.Final |
https://access.redhat.com/errata/RHSA-2026:23808
https://access.redhat.com/errata/RHSA-2026:24502
https://access.redhat.com/errata/RHSA-2026:25123
https://access.redhat.com/errata/RHSA-2026:28010
https://access.redhat.com/errata/RHSA-2026:34608
https://access.redhat.com/errata/RHSA-2026:36820
https://access.redhat.com/errata/RHSA-2026:37390
https://access.redhat.com/errata/RHSA-2026:41951
https://access.redhat.com/errata/RHSA-2026:42644
https://access.redhat.com/errata/RHSA-2026:49700
https://access.redhat.com/errata/RHSA-2026:49701
https://access.redhat.com/errata/RHSA-2026:50085
https://access.redhat.com/errata/RHSA-2026:53644
https://access.redhat.com/errata/RHSA-2026:53645
https://access.redhat.com/errata/RHSA-2026:53646
https://access.redhat.com/errata/RHSA-2026:54435
https://access.redhat.com/errata/RHSA-2026:65126
https://access.redhat.com/errata/RHSA-2026:66488
https://access.redhat.com/errata/RHSA-2026:66545
https://access.redhat.com/security/cve/CVE-2026-42587
https://advisory.echohq.com/cve/CVE-2026-42587
https://bugzilla.redhat.com/show_bug.cgi?id=2477220
https://github.com/netty/netty
https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv
https://nvd.nist.gov/vuln/detail/CVE-2026-42587
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42587.json
https://www.cve.org/CVERecord?id=CVE-2026-42587
|
| io.netty:netty-codec-http2 |
CVE-2026-56819 |
HIGH |
4.1.66.Final |
4.2.16.Final, 4.1.136.Final |
https://access.redhat.com/security/cve/CVE-2026-56819
https://advisory.echohq.com/cve/CVE-2026-56819
https://github.com/netty/netty
https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b
https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003bhttps://github.com/netty/netty/releases/tag/netty-4.2.16.Final
https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6
https://github.com/netty/netty/releases/tag/netty-4.1.136.Final
https://github.com/netty/netty/releases/tag/netty-4.2.16.Final
https://github.com/netty/netty/security/advisories/GHSA-93wv-jw9v-4972
https://nvd.nist.gov/vuln/detail/CVE-2026-56819
https://www.cve.org/CVERecord?id=CVE-2026-56819
|
| io.netty:netty-codec-http2 |
GHSA-xpw8-rcwv-8f8p |
HIGH |
4.1.66.Final |
4.1.100.Final |
https://advisory.echohq.com/cve/GHSA-xpw8-rcwv-8f8p
https://github.com/advisories/GHSA-xpw8-rcwv-8f8p
https://github.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3
https://github.com/netty/netty
https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61
https://github.com/netty/netty/security/advisories/GHSA-xpw8-rcwv-8f8p
https://nvd.nist.gov/vuln/detail/CVE-2023-44487
https://www.cve.org/CVERecord?id=CVE-2023-44487
|
| io.netty:netty-codec-http2 |
CVE-2026-47244 |
MEDIUM |
4.1.66.Final |
4.2.15.Final, 4.1.135.Final |
https://access.redhat.com/security/cve/CVE-2026-47244
https://advisory.echohq.com/cve/CVE-2026-47244
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.135.Final
https://github.com/netty/netty/releases/tag/netty-4.2.15.Final
https://github.com/netty/netty/security/advisories/GHSA-5x3r-wrvg-rp6q
https://nvd.nist.gov/vuln/detail/CVE-2026-47244
https://www.cve.org/CVERecord?id=CVE-2026-47244
|
| io.netty:netty-codec-http2 |
CVE-2026-48043 |
MEDIUM |
4.1.66.Final |
4.1.135.Final, 4.2.15.Final |
https://access.redhat.com/errata/RHSA-2026:26017
https://access.redhat.com/errata/RHSA-2026:26018
https://access.redhat.com/errata/RHSA-2026:26586
https://access.redhat.com/errata/RHSA-2026:34608
https://access.redhat.com/errata/RHSA-2026:36820
https://access.redhat.com/errata/RHSA-2026:37390
https://access.redhat.com/errata/RHSA-2026:41951
https://access.redhat.com/errata/RHSA-2026:48124
https://access.redhat.com/errata/RHSA-2026:48151
https://access.redhat.com/errata/RHSA-2026:50085
https://access.redhat.com/errata/RHSA-2026:53644
https://access.redhat.com/errata/RHSA-2026:53645
https://access.redhat.com/errata/RHSA-2026:53646
https://access.redhat.com/errata/RHSA-2026:53806
https://access.redhat.com/errata/RHSA-2026:54435
https://access.redhat.com/errata/RHSA-2026:65126
https://access.redhat.com/errata/RHSA-2026:66488
https://access.redhat.com/security/cve/CVE-2026-48043
https://advisory.echohq.com/cve/CVE-2026-48043
https://bugzilla.redhat.com/show_bug.cgi?id=2488442
https://github.com/netty/netty
https://github.com/netty/netty/commit/3d45a1e4e8eb99144f716e54be5ac57e525fa7ca
https://github.com/netty/netty/commit/db6138b168699736a6463c367e12ad0a4c36a25e
https://github.com/netty/netty/releases/tag/netty-4.1.135.Final
https://github.com/netty/netty/releases/tag/netty-4.2.15.Final
https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j
https://nvd.nist.gov/vuln/detail/CVE-2026-48043
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48043.json
https://www.cve.org/CVERecord?id=CVE-2026-48043
|
| io.netty:netty-codec-http2 |
CVE-2026-50560 |
MEDIUM |
4.1.66.Final |
4.2.15.Final, 4.1.135.Final |
https://access.redhat.com/security/cve/CVE-2026-50560
https://advisory.echohq.com/cve/CVE-2026-50560
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.135.Final
https://github.com/netty/netty/releases/tag/netty-4.2.15.Final
https://github.com/netty/netty/security/advisories/GHSA-563q-j3cm-6jxm
https://nvd.nist.gov/vuln/detail/CVE-2026-50560
https://www.cve.org/CVERecord?id=CVE-2026-50560
https://www.rfc-editor.org/rfc/rfc9113.html#name-defined-settings
|
| io.netty:netty-codec-http2 |
CVE-2026-59900 |
MEDIUM |
4.1.66.Final |
4.2.16.Final, 4.1.136.Final |
https://access.redhat.com/security/cve/CVE-2026-59900
https://advisory.echohq.com/cve/CVE-2026-59900
https://github.com/advisories/GHSA-c69g-56f8-xwqj
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.136.Final
https://github.com/netty/netty/releases/tag/netty-4.2.16.Final
https://github.com/netty/netty/security/advisories/GHSA-c69g-56f8-xwqj
https://nvd.nist.gov/vuln/detail/CVE-2026-59900
https://www.cve.org/CVERecord?id=CVE-2026-59900
|
| io.netty:netty-common |
CVE-2024-47535 |
MEDIUM |
4.1.66.Final |
4.1.115.Final |
https://access.redhat.com/security/cve/CVE-2024-47535
https://advisory.echohq.com/cve/CVE-2024-47535
https://github.com/advisories/GHSA-xq3w-v528-46rv
https://github.com/netty/netty
https://github.com/netty/netty/commit/fbf7a704a82e7449b48bd0bbb679f5661c6d61a3
https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv
https://nvd.nist.gov/vuln/detail/CVE-2024-47535
https://www.cve.org/CVERecord?id=CVE-2024-47535
|
| io.netty:netty-common |
CVE-2025-25193 |
MEDIUM |
4.1.66.Final |
4.1.118.Final |
https://access.redhat.com/security/cve/CVE-2025-25193
https://advisory.echohq.com/cve/CVE-2025-25193
https://github.com/advisories/GHSA-389x-839f-4rhx
https://github.com/netty/netty
https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386
https://github.com/netty/netty/security/advisories/GHSA-389x-839f-4rhx
https://nvd.nist.gov/vuln/detail/CVE-2025-25193
https://security.netapp.com/advisory/ntap-20250221-0006
https://security.netapp.com/advisory/ntap-20250221-0006/
https://www.cve.org/CVERecord?id=CVE-2025-25193
|
| io.netty:netty-handler |
CVE-2026-75595 |
CRITICAL |
4.1.66.Final |
4.2.17.Final, 4.1.137.Final |
https://access.redhat.com/security/cve/CVE-2026-75595
https://advisory.echohq.com/cve/CVE-2026-75595
https://github.com/netty/netty
https://github.com/netty/netty/commit/1b5abc6443b63726c72cdd285af2feb7ddbb8ff7
https://github.com/netty/netty/commit/9e0519239108a69b7e9bbc5e9182ee139a0d7961
https://github.com/netty/netty/pull/17213
https://github.com/netty/netty/pull/17217
https://github.com/netty/netty/releases/tag/netty-4.1.137.Final
https://github.com/netty/netty/releases/tag/netty-4.2.17.Final
https://github.com/netty/netty/security/advisories/GHSA-c4c3-7fpv-j4q5
https://nvd.nist.gov/vuln/detail/CVE-2026-75595
https://www.cve.org/CVERecord?id=CVE-2026-75595
|
| io.netty:netty-handler |
CVE-2026-44249 |
HIGH |
4.1.66.Final |
4.2.15.Final, 4.1.135.Final |
https://access.redhat.com/errata/RHSA-2026:26017
https://access.redhat.com/errata/RHSA-2026:26018
https://access.redhat.com/errata/RHSA-2026:26586
https://access.redhat.com/errata/RHSA-2026:28573
https://access.redhat.com/errata/RHSA-2026:34608
https://access.redhat.com/errata/RHSA-2026:36820
https://access.redhat.com/errata/RHSA-2026:37390
https://access.redhat.com/errata/RHSA-2026:41951
https://access.redhat.com/errata/RHSA-2026:48124
https://access.redhat.com/errata/RHSA-2026:48151
https://access.redhat.com/errata/RHSA-2026:49700
https://access.redhat.com/errata/RHSA-2026:49701
https://access.redhat.com/errata/RHSA-2026:50085
https://access.redhat.com/errata/RHSA-2026:53644
https://access.redhat.com/errata/RHSA-2026:53645
https://access.redhat.com/errata/RHSA-2026:53646
https://access.redhat.com/errata/RHSA-2026:54435
https://access.redhat.com/errata/RHSA-2026:65126
https://access.redhat.com/errata/RHSA-2026:66488
https://access.redhat.com/errata/RHSA-2026:66545
https://access.redhat.com/security/cve/CVE-2026-44249
https://advisory.echohq.com/cve/CVE-2026-44249
https://bugzilla.redhat.com/show_bug.cgi?id=2488081
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.135.Final
https://github.com/netty/netty/releases/tag/netty-4.2.15.Final
https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86
https://nvd.nist.gov/vuln/detail/CVE-2026-44249
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44249.json
https://www.cve.org/CVERecord?id=CVE-2026-44249
|
| io.netty:netty-handler |
CVE-2026-45416 |
HIGH |
4.1.66.Final |
4.2.15.Final, 4.1.135.Final |
https://access.redhat.com/errata/RHSA-2026:26017
https://access.redhat.com/errata/RHSA-2026:26018
https://access.redhat.com/errata/RHSA-2026:26586
https://access.redhat.com/errata/RHSA-2026:28573
https://access.redhat.com/errata/RHSA-2026:34608
https://access.redhat.com/errata/RHSA-2026:37390
https://access.redhat.com/errata/RHSA-2026:41951
https://access.redhat.com/errata/RHSA-2026:48151
https://access.redhat.com/errata/RHSA-2026:49700
https://access.redhat.com/errata/RHSA-2026:49701
https://access.redhat.com/errata/RHSA-2026:50085
https://access.redhat.com/errata/RHSA-2026:53644
https://access.redhat.com/errata/RHSA-2026:53645
https://access.redhat.com/errata/RHSA-2026:53646
https://access.redhat.com/errata/RHSA-2026:54435
https://access.redhat.com/errata/RHSA-2026:62260
https://access.redhat.com/errata/RHSA-2026:65126
https://access.redhat.com/errata/RHSA-2026:66488
https://access.redhat.com/errata/RHSA-2026:66545
https://access.redhat.com/security/cve/CVE-2026-45416
https://advisory.echohq.com/cve/CVE-2026-45416
https://bugzilla.redhat.com/show_bug.cgi?id=2488391
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.135.Final
https://github.com/netty/netty/releases/tag/netty-4.2.15.Final
https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh
https://nvd.nist.gov/vuln/detail/CVE-2026-45416
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45416.json
https://www.cve.org/CVERecord?id=CVE-2026-45416
|
| io.netty:netty-handler |
CVE-2026-50010 |
HIGH |
4.1.66.Final |
4.2.15.Final, 4.1.135.Final |
https://access.redhat.com/errata/RHSA-2026:26017
https://access.redhat.com/errata/RHSA-2026:26018
https://access.redhat.com/errata/RHSA-2026:26586
https://access.redhat.com/errata/RHSA-2026:28573
https://access.redhat.com/errata/RHSA-2026:34608
https://access.redhat.com/errata/RHSA-2026:37390
https://access.redhat.com/errata/RHSA-2026:41951
https://access.redhat.com/errata/RHSA-2026:48151
https://access.redhat.com/errata/RHSA-2026:49700
https://access.redhat.com/errata/RHSA-2026:49701
https://access.redhat.com/errata/RHSA-2026:50085
https://access.redhat.com/errata/RHSA-2026:53644
https://access.redhat.com/errata/RHSA-2026:53645
https://access.redhat.com/errata/RHSA-2026:53646
https://access.redhat.com/errata/RHSA-2026:62260
https://access.redhat.com/errata/RHSA-2026:65126
https://access.redhat.com/errata/RHSA-2026:66488
https://access.redhat.com/errata/RHSA-2026:66545
https://access.redhat.com/security/cve/CVE-2026-50010
https://advisory.echohq.com/cve/CVE-2026-50010
https://bugzilla.redhat.com/show_bug.cgi?id=2488429
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.135.Final
https://github.com/netty/netty/releases/tag/netty-4.2.15.Final
https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9
https://nvd.nist.gov/vuln/detail/CVE-2026-50010
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50010.json
https://www.cve.org/CVERecord?id=CVE-2026-50010
|
| io.netty:netty-handler |
CVE-2023-34462 |
MEDIUM |
4.1.66.Final |
4.1.94.Final |
https://access.redhat.com/security/cve/CVE-2023-34462
https://advisory.echohq.com/cve/CVE-2023-34462
https://github.com/advisories/GHSA-6mjq-h674-j845
https://github.com/netty/netty
https://github.com/netty/netty/commit/535da17e45201ae4278c0479e6162bb4127d4c32
https://github.com/netty/netty/security/advisories/GHSA-6mjq-h674-j845
https://nvd.nist.gov/vuln/detail/CVE-2023-34462
https://security.netapp.com/advisory/ntap-20230803-0001
https://security.netapp.com/advisory/ntap-20230803-0001/
https://security.netapp.com/advisory/ntap-20240621-0007
https://security.netapp.com/advisory/ntap-20240621-0007/
https://ubuntu.com/security/notices/USN-6994-1
https://www.cve.org/CVERecord?id=CVE-2023-34462
https://www.debian.org/security/2023/dsa-5558
|
| io.netty:netty-handler |
CVE-2026-75596 |
MEDIUM |
4.1.66.Final |
4.2.17.Final, 4.1.137.Final |
https://advisory.echohq.com/cve/CVE-2026-75596
https://github.com/netty/netty
https://github.com/netty/netty/commit/1b5abc6443b63726c72cdd285af2feb7ddbb8ff7
https://github.com/netty/netty/commit/9e0519239108a69b7e9bbc5e9182ee139a0d7961
https://github.com/netty/netty/pull/17213
https://github.com/netty/netty/pull/17217
https://github.com/netty/netty/releases/tag/netty-4.1.137.Final
https://github.com/netty/netty/releases/tag/netty-4.2.17.Final
https://github.com/netty/netty/security/advisories/GHSA-fccg-mwvh-qqg4
https://nvd.nist.gov/vuln/detail/CVE-2026-75596
|
| io.netty:netty-transport-native-epoll |
CVE-2026-45536 |
MEDIUM |
4.1.66.Final |
4.2.15.Final, 4.1.135.Final |
https://access.redhat.com/security/cve/CVE-2026-45536
https://advisory.echohq.com/cve/CVE-2026-45536
https://github.com/netty/netty
https://github.com/netty/netty/releases/tag/netty-4.1.135.Final
https://github.com/netty/netty/releases/tag/netty-4.2.15.Final
https://github.com/netty/netty/security/advisories/GHSA-w573-9ffj-6ff9
https://nvd.nist.gov/vuln/detail/CVE-2026-45536
https://www.cve.org/CVERecord?id=CVE-2026-45536
|
| io.springfox:springfox-swagger-ui |
CVE-2019-17495 |
CRITICAL |
2.8.0 |
2.10.0 |
https://github.com/springfox/springfox/commit/26f72f0d16b166e12c20255a4ee907dc10685cf8
https://github.com/swagger-api/swagger-ui
https://github.com/swagger-api/swagger-ui/releases/tag/v3.23.11
https://github.com/tarantula-team/CSS-injection-in-Swagger-UI
https://lists.apache.org/thread.html/r103579b01da2d0aa0f672b88f811224bbf8ef493aaad845895955e91@%3Ccommits.airflow.apache.org%3E
https://lists.apache.org/thread.html/r3acb7e494cf1aab99b6784b7c5bbddfd0d4f8a484ab534c3a61ef9cf@%3Ccommits.airflow.apache.org%3E
https://lists.apache.org/thread.html/r84b327f7a8b6b28857b906c07a66dd98e1d341191fa8d7816514ef96@%3Ccommits.airflow.apache.org%3E
https://lists.apache.org/thread.html/r853ffeb915a400f899de78124d4e0d77a19379d2e11bf8f4e98c624f@%3Ccommits.airflow.apache.org%3E
https://lists.apache.org/thread.html/ref70b940c4f69560d29d6ba792d6c82865e74de3dcad4c92d99b1f8f@%3Ccommits.airflow.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2019-17495
https://security.snyk.io/vuln/maven?search=CVE-2019-17495
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.oracle.com/security-alerts/cpuoct2020.html
|
| net.sf.jasperreports:jasperreports |
CVE-2025-10492 |
HIGH |
6.8.0 |
7.0.4 |
https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6
https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6/
https://community.jaspersoft.com/forums/topic/69926-cve-2025-10492-%E2%80%93-no-fix-available-after-jasperreports-upgrade-community-edition
https://github.com/Jaspersoft/jasperreports
https://github.com/Jaspersoft/jasperreports/commit/3541a3e2b1ad8b78388ac505091da75cb652a647
https://github.com/Jaspersoft/jasperreports/commit/827c2f27c4ca8e2c5b3142d76df9c1c8575f3569
https://github.com/Jaspersoft/jasperreports/issues/542
https://nvd.nist.gov/vuln/detail/CVE-2025-10492
|
| net.sf.jasperreports:jasperreports |
CVE-2026-6009 |
HIGH |
6.8.0 |
7.0.7 |
https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11
https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11/
https://github.com/Jaspersoft/jasperreports
https://nvd.nist.gov/vuln/detail/CVE-2026-6009
|
| org.apache.ant:ant |
CVE-2020-11979 |
HIGH |
1.7.1 |
1.10.9 |
https://access.redhat.com/security/cve/CVE-2020-11979
https://github.com/apache/ant
https://github.com/apache/ant/commit/87ac51d3c22bcf7cfd0dc07cb0bd04a496e0d428
https://github.com/gradle/gradle/security/advisories/GHSA-j45w-qrgf-25vm
https://lists.apache.org/thread.html/r107ea1b1a7a214bc72fe1a04207546ccef542146ae22952e1013b5cc@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r1dc8518dc99c42ecca5ff82d0d2de64cd5d3a4fa691eb9ee0304781e@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r2306b67f20c24942b872b0a41fbdc9330e8467388158bcd19c1094e0@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r4ca33fad3fb39d130cda287d5a60727d9e706e6f2cf2339b95729490@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r5e1cdd79f019162f76414708b2092acad0a6703d666d72d717319305@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/raaeddc41da8f3afb1cb224876084a45f68e437a0afd9889a707e4b0c@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/rbfe9ba28b74f39f46ec1bbbac3bef313f35017cf3aac13841a84483a@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/rc3c8ef9724b5b1e171529b47f4b35cb7920edfb6e917fa21eb6c64ea@%3Cdev.ant.apache.org%3E
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AALW42FWNQ35F7KB3JVRC6NBVV7AAYYI
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AALW42FWNQ35F7KB3JVRC6NBVV7AAYYI/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DYBRN5C2RW7JRY75IB7Q7ZVKZCHWAQWS
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DYBRN5C2RW7JRY75IB7Q7ZVKZCHWAQWS/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3NRQQ7ECII4ZNGW7GBC225LVYMPQEKB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3NRQQ7ECII4ZNGW7GBC225LVYMPQEKB/
https://nvd.nist.gov/vuln/detail/CVE-2020-11979
https://security.gentoo.org/glsa/202011-18
https://www.cve.org/CVERecord?id=CVE-2020-11979
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2021.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| org.apache.ant:ant |
CVE-2020-1945 |
MEDIUM |
1.7.1 |
1.9.15, 1.10.8 |
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00053.html
http://www.openwall.com/lists/oss-security/2020/09/30/6
http://www.openwall.com/lists/oss-security/2020/12/06/1
https://access.redhat.com/security/cve/CVE-2020-1945
https://lists.apache.org/thread.html/r0d08a96ba9de8aa435f32944e8b2867c368a518d4ff57782e3637335@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r107ea1b1a7a214bc72fe1a04207546ccef542146ae22952e1013b5cc@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r1863b9ce4c3e4b1e5b0c671ad05545ba3eb8399616aa746af5dfe1b1@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r1a9c992d7c8219dc15b4ad448649f0ffdaa88d76ef6a0035c49455f5@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r1b32c76afffcf676e13ed635a3332f3e46e6aaa7722eb3fc7a28f58e@%3Cdev.hive.apache.org%3E
https://lists.apache.org/thread.html/r1dc8518dc99c42ecca5ff82d0d2de64cd5d3a4fa691eb9ee0304781e@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r2306b67f20c24942b872b0a41fbdc9330e8467388158bcd19c1094e0@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r2704fb14ce068c64759a986f81d5b5e42ab434fa13d0f444ad52816b@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r3cea0f3da4f6d06d7afb6c0804da8e01773a0f50a09b8d9beb2cda65@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r4b2904d64affd4266cd72ccb2fc3927c1c2f22009f183095aa46bf90@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r4ca33fad3fb39d130cda287d5a60727d9e706e6f2cf2339b95729490@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r5dfc77048b1f9db26622dce91a6edf083d499397256594952fad5f35@%3Ccommits.myfaces.apache.org%3E
https://lists.apache.org/thread.html/r5e1cdd79f019162f76414708b2092acad0a6703d666d72d717319305@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r6030d34ceacd0098538425c5dac8251ffc7fd90b886942bc7ef87858@%3Cnotifications.groovy.apache.org%3E
https://lists.apache.org/thread.html/r6970d196cd73863dafdbc3a7052562deedd338e3bd7d73d8171d92d6@%3Ccommits.groovy.apache.org%3E
https://lists.apache.org/thread.html/r6e295d792032ec02b32be3846c21a58857fba4a077d22c5842d69ba2@%3Ctorque-dev.db.apache.org%3E
https://lists.apache.org/thread.html/r6edd3e2cb79ee635630d891b54a4f1a9cd8c7f639d6ee34e75fbe830@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r815f88d1044760176f30a4913b4baacd06f3eae4eb662de7388e46d8@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r8e24abb7dd77cda14c6df90a377c94f0a413bbfcec90a29540ff8adf@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r8e592bbfc016a5dbe2a8c0e81ff99682b9c78c453621b82c14e7b75e@%3Cdev.ant.apache.org%3E
https://lists.apache.org/thread.html/r95dc943e47a211d29df605e14f86c280fc9fa8d828b2b53bd07673c9@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967@%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967@%3Cdev.groovy.apache.org%3E
https://lists.apache.org/thread.html/ra12c3e23b021f259a201648005b9946acd7f618a6f32301c97047967@%3Cusers.groovy.apache.org%3E
https://lists.apache.org/thread.html/ra9dab34bf8625511f23692ad0fcee2725f782e9aad6c5cdff6cf4465@%3Cnotifications.groovy.apache.org%3E
https://lists.apache.org/thread.html/raaeddc41da8f3afb1cb224876084a45f68e437a0afd9889a707e4b0c@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/rb860063819b9c0990e1fbce29d83f4554766fe5a05e3b3939736bf2b@%3Ccommits.myfaces.apache.org%3E
https://lists.apache.org/thread.html/rb8ec556f176c83547b959150e2108e2ddf1d61224295941908b0a81f@%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/rbfe9ba28b74f39f46ec1bbbac3bef313f35017cf3aac13841a84483a@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/rc3c8ef9724b5b1e171529b47f4b35cb7920edfb6e917fa21eb6c64ea@%3Cdev.ant.apache.org%3E
https://lists.apache.org/thread.html/rc89e491b5b270fb40f1210b70554527b737c217ad2e831b643ead6bc@%3Cuser.ant.apache.org%3E
https://lists.apache.org/thread.html/rce099751721c26a8166d8b6578293820832831a0b2cb8d93b8efa081@%3Cnotifications.groovy.apache.org%3E
https://lists.apache.org/thread.html/rd7dda48ff835f4d0293949837d55541bfde3683bd35bd8431e324538@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/rda80ac59119558eaec452e58ddfac2ccc9211da1c65f7927682c78b1@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/rdaa9c51d5dc6560c9d2b3f3d742c768ad0705e154041e574a0fae45c@%3Cnotifications.groovy.apache.org%3E
https://lists.apache.org/thread.html/re1ce84518d773a94a613d988771daf9252c9cf7375a9a477009f9735@%3Ccommits.creadur.apache.org%3E
https://lists.apache.org/thread.html/rf07feaf78afc8f701e21948a06ef92565d3dff1242d710f4fbf900b2@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/rfd346609527a79662c48b1da3ac500ec30f29f7ddaa3575051e81890@%3Ccommits.creadur.apache.org%3E
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EQBR65TINSJRN7PTPIVNYS33P535WM74
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EQBR65TINSJRN7PTPIVNYS33P535WM74/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RRVAWTCVXJMRYKQKEXYSNBF7NLSR6OEI
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RRVAWTCVXJMRYKQKEXYSNBF7NLSR6OEI/
https://nvd.nist.gov/vuln/detail/CVE-2020-1945
https://security.gentoo.org/glsa/202007-34
https://ubuntu.com/security/notices/USN-4380-1
https://ubuntu.com/security/notices/USN-4874-1
https://usn.ubuntu.com/4380-1
https://usn.ubuntu.com/4380-1/
https://www.cve.org/CVERecord?id=CVE-2020-1945
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpujan2021.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2020.html
https://www.oracle.com/security-alerts/cpuoct2020.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| org.apache.ant:ant |
CVE-2021-36373 |
MEDIUM |
1.7.1 |
1.9.16, 1.10.11 |
https://access.redhat.com/security/cve/CVE-2021-36373
https://ant.apache.org/security.html
https://lists.apache.org/thread.html/r27919fd4db07c487239c1d9771f480d89ce5ee2750aa9447309b709a@%3Ccommits.groovy.apache.org%3E
https://lists.apache.org/thread.html/r544c9e8487431768465b8b2d13982c75123109bd816acf839d46010d@%3Ccommits.groovy.apache.org%3E
https://lists.apache.org/thread.html/r54afdab05e01de970649c2d91a993f68a6b00cd73e6e34e16c832d46@%3Cuser.ant.apache.org%3E
https://lists.apache.org/thread.html/rad36f470647c5a7c02dd78c9973356d2840766d132b597b6444e373a@%3Cnotifications.groovy.apache.org%3E
https://lists.apache.org/thread.html/rf4bb79751a02889623195715925e4fd8932dd3c97e0ade91395a96c6@%3Cdev.myfaces.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2021-36373
https://security.netapp.com/advisory/ntap-20210819-0007
https://security.netapp.com/advisory/ntap-20210819-0007/
https://www.cve.org/CVERecord?id=CVE-2021-36373
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| org.apache.commons:commons-compress |
CVE-2021-35515 |
HIGH |
1.19 |
1.21 |
http://www.openwall.com/lists/oss-security/2021/07/13/1
https://access.redhat.com/security/cve/CVE-2021-35515
https://commons.apache.org/proper/commons-compress/security-reports.html
https://lists.apache.org/thread.html/r19ebfd71770ec0617a9ea180e321ef927b3fefb4c81ec5d1902d20ab@%3Cuser.commons.apache.org%3E
https://lists.apache.org/thread.html/r67ef3c07fe3b8c1b02d48012149d280ad6da8e4cec253b527520fb2b@%3Cdev.poi.apache.org%3E
https://lists.apache.org/thread.html/r9f54c0caa462267e0cc68b49f141e91432b36b23348d18c65bd0d040@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/rab292091eadd1ecc63c516e9541a7f241091cf2e652b8185a6059945@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/racd0c0381c8404f298b226cd9db2eaae965b14c9c568224aa3f437ae@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/rb064d705fdfa44b5dae4c366b369ef6597951083196321773b983e71@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/rb6e1fa80d34e5ada45f72655d84bfd90db0ca44ef19236a49198c88c@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/rb7adf3e55359819e77230b4586521e5c6874ce5ed93384bdc14d6aee@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/rba65ed5ddb0586f5b12598f55ec7db3633e7b7fede60466367fbf86a@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/rbaea15ddc5a7c0c6b66660f1d6403b28595e2561bb283eade7d7cd69@%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/rbe91c512c5385181149ab087b6c909825d34299f5c491c6482a2ed57@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/rd4332baaf6debd03d60deb7ec93bee49e5fdbe958cb6800dff7fb00e@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/rf2f4d7940371a7c7c5b679f50e28fc7fcc82cd00670ced87e013ac88@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/rfba19167efc785ad3561e7ef29f340d65ac8f0d897aed00e0731e742@%3Cnotifications.skywalking.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2021-35515
https://security.netapp.com/advisory/ntap-20211022-0001
https://security.netapp.com/advisory/ntap-20211022-0001/
https://www.cve.org/CVERecord?id=CVE-2021-35515
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| org.apache.commons:commons-compress |
CVE-2021-35516 |
HIGH |
1.19 |
1.21 |
http://www.openwall.com/lists/oss-security/2021/07/13/2
https://access.redhat.com/security/cve/CVE-2021-35516
https://commons.apache.org/proper/commons-compress/security-reports.html
https://lists.apache.org/thread.html/r67ef3c07fe3b8c1b02d48012149d280ad6da8e4cec253b527520fb2b@%3Cdev.poi.apache.org%3E
https://lists.apache.org/thread.html/r9f54c0caa462267e0cc68b49f141e91432b36b23348d18c65bd0d040@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/racd0c0381c8404f298b226cd9db2eaae965b14c9c568224aa3f437ae@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/rb064d705fdfa44b5dae4c366b369ef6597951083196321773b983e71@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/rb6e1fa80d34e5ada45f72655d84bfd90db0ca44ef19236a49198c88c@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/rb7adf3e55359819e77230b4586521e5c6874ce5ed93384bdc14d6aee@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/rba65ed5ddb0586f5b12598f55ec7db3633e7b7fede60466367fbf86a@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/rd4332baaf6debd03d60deb7ec93bee49e5fdbe958cb6800dff7fb00e@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/rf5b1016fb15b7118b9a5e16bb0b78cb4f1dfcf7821eb137ab5757c91@%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/rf68442d67eb166f4b6cf0bbbe6c7f99098c12954f37332073c9822ca@%3Cuser.commons.apache.org%3E
https://lists.apache.org/thread.html/rfba19167efc785ad3561e7ef29f340d65ac8f0d897aed00e0731e742@%3Cnotifications.skywalking.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2021-35516
https://security.netapp.com/advisory/ntap-20211022-0001
https://security.netapp.com/advisory/ntap-20211022-0001/
https://www.cve.org/CVERecord?id=CVE-2021-35516
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| org.apache.commons:commons-compress |
CVE-2021-35517 |
HIGH |
1.19 |
1.21 |
http://www.openwall.com/lists/oss-security/2021/07/13/3
http://www.openwall.com/lists/oss-security/2021/07/13/5
https://access.redhat.com/security/cve/CVE-2021-35517
https://commons.apache.org/proper/commons-compress/security-reports.html
https://lists.apache.org/thread.html/r31f75743ac173b0a606f8ea6ea53f351f386c44e7bcf78ae04007c29@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r457b2ed564860996b20d938566fe8bd4bfb7c37be8e205448ccb5975@%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/r54afdab05e01de970649c2d91a993f68a6b00cd73e6e34e16c832d46@%3Cuser.ant.apache.org%3E
https://lists.apache.org/thread.html/r605d906b710b95f1bbe0036a53ac6968f667f2c249b6fbabada9a940@%3Cuser.commons.apache.org%3E
https://lists.apache.org/thread.html/r67ef3c07fe3b8c1b02d48012149d280ad6da8e4cec253b527520fb2b@%3Cdev.poi.apache.org%3E
https://lists.apache.org/thread.html/r9f54c0caa462267e0cc68b49f141e91432b36b23348d18c65bd0d040@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/ra393ffdc7c90a4a37ea023946f390285693795013a642d80fba20203@%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/racd0c0381c8404f298b226cd9db2eaae965b14c9c568224aa3f437ae@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/rb064d705fdfa44b5dae4c366b369ef6597951083196321773b983e71@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/rb6e1fa80d34e5ada45f72655d84bfd90db0ca44ef19236a49198c88c@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/rb7adf3e55359819e77230b4586521e5c6874ce5ed93384bdc14d6aee@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/rba65ed5ddb0586f5b12598f55ec7db3633e7b7fede60466367fbf86a@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/rd4332baaf6debd03d60deb7ec93bee49e5fdbe958cb6800dff7fb00e@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/rfba19167efc785ad3561e7ef29f340d65ac8f0d897aed00e0731e742@%3Cnotifications.skywalking.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2021-35517
https://security.netapp.com/advisory/ntap-20211022-0001
https://security.netapp.com/advisory/ntap-20211022-0001/
https://www.cve.org/CVERecord?id=CVE-2021-35517
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| org.apache.commons:commons-compress |
CVE-2021-36090 |
HIGH |
1.19 |
1.21 |
http://www.openwall.com/lists/oss-security/2021/07/13/4
http://www.openwall.com/lists/oss-security/2021/07/13/6
https://access.redhat.com/security/cve/CVE-2021-36090
https://commons.apache.org/proper/commons-compress/security-reports.html
https://lists.apache.org/thread.html/r0e87177f8e78b4ee453cd4d3d8f4ddec6f10d2c27707dd71e12cafc9@%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/r25f4c44616045085bc3cf901bb7e68e445eee53d1966fc08998fc456@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r3227b1287e5bd8db6523b862c22676b046ad8f4fc96433225f46a2bd@%3Cissues.drill.apache.org%3E
https://lists.apache.org/thread.html/r4f03c5de923e3f2a8c316248681258125140514ef3307bfe1538e1ab@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r54049b66afbca766b6763c7531e9fe7a20293a112bcb65462a134949@%3Ccommits.drill.apache.org%3E
https://lists.apache.org/thread.html/r67ef3c07fe3b8c1b02d48012149d280ad6da8e4cec253b527520fb2b@%3Cdev.poi.apache.org%3E
https://lists.apache.org/thread.html/r75ffc7a461e7e7ae77690fa75bd47bb71365c732e0fbcc44da4f8ff5@%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/r9a23d4dbf4e34d498664080bff59f2893b855eb16dae33e4aa92fa53@%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/r9f54c0caa462267e0cc68b49f141e91432b36b23348d18c65bd0d040@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/rab292091eadd1ecc63c516e9541a7f241091cf2e652b8185a6059945@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/racd0c0381c8404f298b226cd9db2eaae965b14c9c568224aa3f437ae@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/rb064d705fdfa44b5dae4c366b369ef6597951083196321773b983e71@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/rb5fa2ee61828fa2e42361b58468717e84902dd71c4aea8dc0b865df7@%3Cnotifications.james.apache.org%3E
https://lists.apache.org/thread.html/rb6e1fa80d34e5ada45f72655d84bfd90db0ca44ef19236a49198c88c@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/rb7adf3e55359819e77230b4586521e5c6874ce5ed93384bdc14d6aee@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/rba65ed5ddb0586f5b12598f55ec7db3633e7b7fede60466367fbf86a@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/rbbf42642c3e4167788a7c13763d192ee049604d099681f765385d99d@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/rbe91c512c5385181149ab087b6c909825d34299f5c491c6482a2ed57@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/rc4134026d7d7b053d4f9f2205531122732405012c8804fd850a9b26f@%3Cuser.commons.apache.org%3E
https://lists.apache.org/thread.html/rc7df4c2f0bbe2028a1498a46d322c91184f7a369e3e4c57d9518cacf@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/rd4332baaf6debd03d60deb7ec93bee49e5fdbe958cb6800dff7fb00e@%3Cnotifications.skywalking.apache.org%3E
https://lists.apache.org/thread.html/rdd5412a5b9a25aed2a02c3317052d38a97128314d50bc1ed36e81d38@%3Cuser.ant.apache.org%3E
https://lists.apache.org/thread.html/rf2f4d7940371a7c7c5b679f50e28fc7fcc82cd00670ced87e013ac88@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/rf3f0a09fee197168a813966c5816157f6c600a47313a0d6813148ea6@%3Cissues.drill.apache.org%3E
https://lists.apache.org/thread.html/rf93b6bb267580e01deb7f3696f7eaca00a290c66189a658cf7230a1a@%3Cissues.drill.apache.org%3E
https://lists.apache.org/thread.html/rfba19167efc785ad3561e7ef29f340d65ac8f0d897aed00e0731e742@%3Cnotifications.skywalking.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2021-36090
https://security.netapp.com/advisory/ntap-20211022-0001
https://security.netapp.com/advisory/ntap-20211022-0001/
https://www.cve.org/CVERecord?id=CVE-2021-36090
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| org.apache.commons:commons-compress |
CVE-2024-25710 |
MEDIUM |
1.19 |
1.26.0 |
http://seclists.org/fulldisclosure/2024/Aug/37
http://www.openwall.com/lists/oss-security/2024/02/19/1
https://access.redhat.com/security/cve/CVE-2024-25710
https://advisory.echohq.com/cve/CVE-2024-25710
https://github.com/advisories/GHSA-4g9r-vxhx-9pgx
https://github.com/apache/commons-compress
https://lists.apache.org/thread/cz8qkcwphy4cx8gltn932ln51cbtq6kf
https://nvd.nist.gov/vuln/detail/CVE-2024-25710
https://security.netapp.com/advisory/ntap-20240307-0010
https://security.netapp.com/advisory/ntap-20240307-0010/
https://www.cve.org/CVERecord?id=CVE-2024-25710
|
| org.apache.commons:commons-lang3 |
CVE-2025-48924 |
MEDIUM |
3.9 |
3.18.0 |
http://www.openwall.com/lists/oss-security/2025/07/11/1
https://access.redhat.com/security/cve/CVE-2025-48924
https://advisory.echohq.com/cve/CVE-2025-48924
https://github.com/apache/commons-lang
https://github.com/apache/commons-lang/commit/b424803abdb2bec818e4fbcb251ce031c22aca53
https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1
https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html
https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html
https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html
https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html
https://nvd.nist.gov/vuln/detail/CVE-2025-48924
https://ubuntu.com/security/notices/USN-8364-1
https://www.cve.org/CVERecord?id=CVE-2025-48924
https://www.openwall.com/lists/oss-security/2025/07/11/1
|
| org.apache.commons:commons-vfs2 |
CVE-2025-27553 |
HIGH |
2.1 |
2.10.0 |
http://www.openwall.com/lists/oss-security/2025/03/23/1
https://access.redhat.com/security/cve/CVE-2025-27553
https://github.com/apache/commons-vfs
https://linux.oracle.com/cve/CVE-2025-27553.html
https://linux.oracle.com/errata/ELSA-2025-10548.html
https://lists.apache.org/thread/cnzqowyw9r2pl263cylmxhnvh41hyjcb
https://lists.debian.org/debian-lts-announce/2025/04/msg00006.html
https://nvd.nist.gov/vuln/detail/CVE-2025-27553
https://www.cve.org/CVERecord?id=CVE-2025-27553
|
| org.apache.commons:commons-vfs2 |
CVE-2025-30474 |
MEDIUM |
2.1 |
2.10.0 |
http://www.openwall.com/lists/oss-security/2025/03/23/2
https://github.com/apache/commons-vfs
https://issues.apache.org/jira/browse/VFS-169
https://lists.apache.org/thread/w6ztgnbk6ccry3470x191g3xwrpgy6f4
https://nvd.nist.gov/vuln/detail/CVE-2025-30474
|
| org.apache.httpcomponents:httpclient |
CVE-2020-13956 |
MEDIUM |
4.5.11 |
4.5.13, 5.0.3 |
https://access.redhat.com/security/cve/CVE-2020-13956
https://advisory.echohq.com/cve/CVE-2020-13956
https://bugzilla.redhat.com/show_bug.cgi?id=1886587
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13956
https://errata.almalinux.org/8/ALSA-2022-1861.html
https://errata.rockylinux.org/RLSA-2022:1861
https://github.com/advisories/GHSA-7r82-7xv7-xcpj
https://github.com/apache/httpcomponents-client
https://linux.oracle.com/cve/CVE-2020-13956.html
https://linux.oracle.com/errata/ELSA-2022-1861.html
https://lists.apache.org/thread.html/r03bbc318c81be21f5c8a9b85e34f2ecc741aa804a8e43b0ef2c37749@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/r043a75acdeb52b15dd5e9524cdadef4202e6a5228644206acf9363f9@%3Cdev.hive.apache.org%3E
https://lists.apache.org/thread.html/r06cf3ca5c8ceb94b39cd24a73d4e96153b485a7dac88444dd876accb@%3Cissues.drill.apache.org%3E
https://lists.apache.org/thread.html/r0a75b8f0f72f3e18442dc56d33f3827b905f2fe5b7ba48997436f5d1@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r0bebe6f9808ac7bdf572873b4fa96a29c6398c90dab29f131f3ebffe@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r12cb62751b35bdcda0ae2a08b67877d665a1f4d41eee0fa7367169e0@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/r132e4c6a560cfc519caa1aaee63bdd4036327610eadbd89f76dd5457@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r2835543ef0f91adcc47da72389b816e36936f584c7be584d2314fac3@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/r2a03dc210231d7e852ef73015f71792ac0fcaca6cccc024c522ef17d@%3Ccommits.creadur.apache.org%3E
https://lists.apache.org/thread.html/r2dc7930b43eadc78220d269b79e13ecd387e4bee52db67b2f47d4303@%3Cgitbox.hive.apache.org%3E
https://lists.apache.org/thread.html/r34178ab6ef106bc940665fd3f4ba5026fac3603b3fa2aefafa0b619d@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/r34efec51cb817397ccf9f86e25a75676d435ba5f83ee7b2eabdad707@%3Ccommits.creadur.apache.org%3E
https://lists.apache.org/thread.html/r3cecd59fba74404cbf4eb430135e1080897fb376f111406a78bed13a@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/r3f740e4c38bba1face49078aa5cbeeb558c27be601cc9712ad2dcd1e@%3Ccommits.creadur.apache.org%3E
https://lists.apache.org/thread.html/r4850b3fbaea02fde2886e461005e4af8d37c80a48b3ce2a6edca0e30@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r549ac8c159bf0c568c19670bedeb8d7c0074beded951d34b1c1d0d05@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r55b2a1d1e9b1ec9db792b93da8f0f99a4fd5a5310b02673359d9b4d1@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r5b55f65c123a7481104d663a915ec45a0d103e6aaa03f42ed1c07a89@%3Cdev.jackrabbit.apache.org%3E
https://lists.apache.org/thread.html/r5de3d3808e7b5028df966e45115e006456c4e8931dc1e29036f17927@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r5fec9c1d67f928179adf484b01e7becd7c0a6fdfe3a08f92ea743b90@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r63296c45d5d84447babaf39bd1487329d8a80d8d563e67a4b6f3d8a7@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/r69a94e2f302d1b778bdfefe90fcb4b8c50b226438c3c8c1d0de85a19@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/r6a3cda38d050ebe13c1bc9a28d0a8ec38945095d07eca49046bcb89f@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r6d672b46622842e565e00f6ef6bef83eb55d8792aac2bee75bff9a2a@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/r6dab7da30f8bf075f79ee189e33b45a197502e2676481bb8787fc0d7@%3Cdev.hc.apache.org%3E
https://lists.apache.org/thread.html/r6eb2dae157dbc9af1f30d1f64e9c60d4ebef618f3dce4a0e32d6ea4d@%3Ccommits.drill.apache.org%3E
https://lists.apache.org/thread.html/r70c429923100c5a4fae8e5bc71c8a2d39af3de4888f50a0ac3755e6f@%3Ccommits.creadur.apache.org%3E
https://lists.apache.org/thread.html/r87ddc09295c27f25471269ad0a79433a91224045988b88f0413a97ec@%3Cissues.bookkeeper.apache.org%3E
https://lists.apache.org/thread.html/r8aa1e5c343b89aec5b69961471950e862f15246cb6392910161c389b@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/r9e52a6c72c8365000ecd035e48cc9fee5a677a150350d4420c46443d@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/ra539f20ef0fb0c27ee39945b5f56bf162e5c13d1c60f7344dab8de3b@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/ra8bc6b61c5df301a6fe5a716315528ecd17ccb8a7f907e24a47a1a5e@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/rad6222134183046f3928f733bf680919e0c390739bfbfe6c90049673@%3Cissues.drill.apache.org%3E
https://lists.apache.org/thread.html/rae14ae25ff4a60251e3ba2629c082c5ba3851dfd4d21218b99b56652@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/rb33212dab7beccaf1ffef9b88610047c644f644c7a0ebdc44d77e381@%3Ccommits.turbine.apache.org%3E
https://lists.apache.org/thread.html/rb4ba262d6f08ab9cf8b1ebbcd9b00b0368ffe90dad7ad7918b4b56fc@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/rb725052404fabffbe093c83b2c46f3f87e12c3193a82379afbc529f8@%3Csolr-user.lucene.apache.org%3E
https://lists.apache.org/thread.html/rc0863892ccfd9fd0d0ae10091f24ee769fb39b8957fe4ebabfc11f17@%3Cdev.jackrabbit.apache.org%3E
https://lists.apache.org/thread.html/rc3739e0ad4bcf1888c6925233bfc37dd71156bbc8416604833095c42@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/rc505fee574fe8d18f9b0c655a4d120b0ae21bb6a73b96003e1d9be35@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/rc5c6ccb86d2afe46bbd4b71573f0448dc1f87bbcd5a0d8c7f8f904b2@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/rc990e2462ec32b09523deafb2c73606208599e196fa2d7f50bdbc587@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/rcced7ed3237c29cd19c1e9bf465d0038b8b2e967b99fc283db7ca553@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/rcd9ad5dda60c82ab0d0c9bd3e9cb1dc740804451fc20c7f451ef5cc4@%3Cgitbox.hive.apache.org%3E
https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/rd5ab56beb2ac6879f6ab427bc4e5f7691aed8362d17b713f61779858@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/re504acd4d63b8df2a7353658f45c9a3137e5f80e41cf7de50058b2c1@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/rea3dbf633dde5008d38bf6600a3738b9216e733e03f9ff7becf79625@%3Cissues.drill.apache.org%3E
https://lists.apache.org/thread.html/ree942561f4620313c75982a4e5f3b74fe6f7062b073210779648eec2@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/reef569c2419705754a3acf42b5f19b2a158153cef0e448158bc54917@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/rf03228972e56cb4a03e6d9558188c2938078cf3ceb23a3fead87c9ca@%3Cissues.bookkeeper.apache.org%3E
https://lists.apache.org/thread.html/rf43d17ed0d1fb4fb79036b582810ef60b18b1ef3add0d5dea825af1e@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/rf4db88c22e1be9eb60c7dc623d0528642c045fb196a24774ac2fa3a3@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/rf7ca60f78f05b772cc07d27e31bcd112f9910a05caf9095e38ee150f@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/rfb35f6db9ba1f1e061b63769a4eff5abadcc254ebfefc280e5a0dcf1@%3Ccommits.creadur.apache.org%3E
https://lists.apache.org/thread.html/rfbedcb586a1e7dfce87ee03c720e583fc2ceeafa05f35c542cecc624@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/rfc00884c7b7ca878297bffe45fcb742c362b00b26ba37070706d44c3@%3Cissues.hive.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2020-13956
https://priyankn.github.io/2021-02-26-CVE-2020-13956/
https://security.netapp.com/advisory/ntap-20220210-0002
https://security.netapp.com/advisory/ntap-20220210-0002/
https://ubuntu.com/security/notices/USN-5239-1
https://www.cve.org/CVERecord?id=CVE-2020-13956
https://www.openwall.com/lists/oss-security/2020/10/08/4
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| org.apache.logging.log4j:log4j-api |
CVE-2026-49844 |
MEDIUM |
2.17.0 |
2.25.5, 2.26.1 |
https://access.redhat.com/security/cve/CVE-2026-49844
https://advisory.echohq.com/cve/CVE-2026-49844
https://github.com/apache/logging-log4j2
https://github.com/apache/logging-log4j2/commit/19edb23e162d6c728a8c2221a240037d389ed300
https://github.com/apache/logging-log4j2/commit/feadf8eb0b4acb6ddfa4c0ab2bbc6d88b8e12d82
https://github.com/apache/logging-log4j2/pull/4163
https://github.com/apache/logging-log4j2/releases/tag/rel/2.25.5
https://github.com/apache/logging-log4j2/releases/tag/rel/2.26.1
https://logging.apache.org/cyclonedx/vdr.xml
https://logging.apache.org/log4j/2.x/manual/json-template-layout.html#event-template-resolver-message
https://logging.apache.org/security.html#CVE-2026-49844
https://nvd.nist.gov/vuln/detail/CVE-2026-49844
https://www.cve.org/CVERecord?id=CVE-2026-49844
|
| org.apache.logging.log4j:log4j-core |
CVE-2021-44832 |
MEDIUM |
2.17.0 |
2.3.2, 2.12.4, 2.17.1 |
http://www.openwall.com/lists/oss-security/2021/12/28/1
https://access.redhat.com/security/cve/CVE-2021-44832
https://cert-portal.siemens.com/productcert/pdf/ssa-784507.pdf
https://github.com/apache/logging-log4j2
https://github.com/apache/logging-log4j2/commit/05db5f9527254632b59aed2a1d78a32c5ab74f16
https://issues.apache.org/jira/browse/LOG4J2-3293
https://lists.apache.org/thread/s1o5vlo78ypqxnzn6p8zf6t9shtq5143
https://lists.debian.org/debian-lts-announce/2021/12/msg00036.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EVV25FXL4FU5X6X5BSL7RLQ7T6F65MRA
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EVV25FXL4FU5X6X5BSL7RLQ7T6F65MRA/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T57MPJUW3MA6QGWZRTMCHHMMPQNVKGFC
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T57MPJUW3MA6QGWZRTMCHHMMPQNVKGFC/
https://nvd.nist.gov/vuln/detail/CVE-2021-44832
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd
https://security.netapp.com/advisory/ntap-20220104-0001
https://security.netapp.com/advisory/ntap-20220104-0001/
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd
https://ubuntu.com/security/notices/USN-5222-1
https://www.cve.org/CVERecord?id=CVE-2021-44832
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
|
| org.apache.logging.log4j:log4j-core |
CVE-2025-68161 |
MEDIUM |
2.17.0 |
2.25.3 |
http://www.openwall.com/lists/oss-security/2025/12/18/1
https://access.redhat.com/security/cve/CVE-2025-68161
https://advisory.echohq.com/cve/CVE-2025-68161
https://github.com/apache/logging-log4j2
https://github.com/apache/logging-log4j2/commit/3b93748497e1adbbd027fda8a5e7268ec5d0d578
https://github.com/apache/logging-log4j2/pull/4002
https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
https://lists.debian.org/debian-lts-announce/2026/01/msg00015.html
https://logging.apache.org/cyclonedx/vdr.xml
https://logging.apache.org/log4j/2.x/manual/appenders/network.html#SslConfiguration-attr-verifyHostName
https://logging.apache.org/log4j/2.x/manual/systemproperties.html#log4j2.sslVerifyHostName
https://logging.apache.org/security.html#CVE-2025-68161
https://nvd.nist.gov/vuln/detail/CVE-2025-68161
https://www.cve.org/CVERecord?id=CVE-2025-68161
|
| org.apache.logging.log4j:log4j-core |
CVE-2026-34477 |
MEDIUM |
2.17.0 |
2.25.4 |
https://access.redhat.com/security/cve/CVE-2026-34477
https://advisory.echohq.com/cve/CVE-2026-34477
https://github.com/apache/logging-log4j2
https://github.com/apache/logging-log4j2/pull/4075
https://lists.apache.org/thread/lkx8cl46t2bvkcwfcb2pd43ygc097lq4
https://logging.apache.org/cyclonedx/vdr.xml
https://logging.apache.org/log4j/2.x/manual/appenders/network.html#SslConfiguration-attr-verifyHostName
https://logging.apache.org/security.html#CVE-2026-34477
https://nvd.nist.gov/vuln/detail/CVE-2026-34477
https://www.cve.org/CVERecord?id=CVE-2026-34477
|
| org.apache.logging.log4j:log4j-core |
CVE-2026-34479 |
MEDIUM |
2.17.0 |
2.25.4 |
http://www.openwall.com/lists/oss-security/2026/04/10/8
https://access.redhat.com/security/cve/CVE-2026-34479
https://advisory.echohq.com/cve/CVE-2026-34479
https://github.com/apache/logging-log4j2
https://github.com/apache/logging-log4j2/pull/4078
https://lists.apache.org/thread/gd0hp6mj17rn3kj279vgy4p7kd4zz5on
https://logging.apache.org/cyclonedx/vdr.xml
https://logging.apache.org/log4j/2.x/migrate-from-log4j1.html
https://logging.apache.org/security.html#CVE-2026-34479
https://nvd.nist.gov/vuln/detail/CVE-2026-34479
https://www.cve.org/CVERecord?id=CVE-2026-34479
|
| org.apache.logging.log4j:log4j-core |
CVE-2026-34480 |
MEDIUM |
2.17.0 |
2.25.4 |
http://www.openwall.com/lists/oss-security/2026/04/10/9
https://access.redhat.com/security/cve/CVE-2026-34480
https://advisory.echohq.com/cve/CVE-2026-34480
https://github.com/apache/logging-log4j2
https://github.com/apache/logging-log4j2/pull/4077
https://lists.apache.org/thread/5x0hcnng0chhghp6jgjdp3qmbbhfjzhb
https://logging.apache.org/cyclonedx/vdr.xml
https://logging.apache.org/log4j/2.x/manual/layouts.html#XmlLayout
https://logging.apache.org/security.html#CVE-2026-34480
https://nvd.nist.gov/vuln/detail/CVE-2026-34480
https://www.cve.org/CVERecord?id=CVE-2026-34480
|
| org.apache.maven.shared:maven-shared-utils |
CVE-2022-29599 |
CRITICAL |
3.2.1 |
3.3.3 |
http://www.openwall.com/lists/oss-security/2022/05/23/3
https://access.redhat.com/security/cve/CVE-2022-29599
https://bugzilla.redhat.com/show_bug.cgi?id=2066479
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29599
https://errata.almalinux.org/8/ALSA-2022-4798.html
https://errata.rockylinux.org/RLSA-2022:4798
https://github.com/apache/maven-shared-utils
https://github.com/apache/maven-shared-utils/commit/f751e614c09df8de1a080dc1153931f3f68991c9
https://github.com/apache/maven-shared-utils/pull/40
https://issues.apache.org/jira/browse/MSHARED-297
https://linux.oracle.com/cve/CVE-2022-29599.html
https://linux.oracle.com/errata/ELSA-2022-4798.html
https://lists.debian.org/debian-lts-announce/2022/08/msg00018.html
https://nvd.nist.gov/vuln/detail/CVE-2022-29599
https://rhn.redhat.com/errata/RHSA-2022-1662.html
https://ubuntu.com/security/notices/USN-6730-1
https://www.cve.org/CVERecord?id=CVE-2022-29599
https://www.debian.org/security/2022/dsa-5242
|
| org.apache.mina:mina-core |
CVE-2024-52046 |
CRITICAL |
2.0.16 |
2.2.4, 2.1.10, 2.0.27 |
http://www.openwall.com/lists/oss-security/2024/12/25/1
https://access.redhat.com/security/cve/CVE-2024-52046
https://github.com/apache/mina
https://lists.apache.org/thread/4wxktgjpggdbto15d515wdctohb0qmv8
https://nvd.nist.gov/vuln/detail/CVE-2024-52046
https://security.netapp.com/advisory/ntap-20250103-0001
https://security.netapp.com/advisory/ntap-20250103-0001/
https://www.cve.org/CVERecord?id=CVE-2024-52046
|
| org.apache.mina:mina-core |
CVE-2026-41409 |
CRITICAL |
2.0.16 |
2.0.28, 2.1.11, 2.2.6 |
https://access.redhat.com/security/cve/CVE-2026-41409
https://advisory.echohq.com/cve/CVE-2026-41409
https://github.com/advisories/GHSA-76h9-2vwh-w278
https://github.com/advisories/GHSA-f2wh-grmh-r6jm
https://github.com/apache/mina
https://lists.apache.org/thread/9ddvsq6c4l5bhwq8l14sob4f8qjvx5c9
https://nvd.nist.gov/vuln/detail/CVE-2026-41409
https://www.cve.org/CVERecord?id=CVE-2026-41409
|
| org.apache.mina:mina-core |
CVE-2026-41635 |
CRITICAL |
2.0.16 |
2.0.28, 2.1.11, 2.2.6 |
http://www.openwall.com/lists/oss-security/2026/04/27/4
https://access.redhat.com/security/cve/CVE-2026-41635
https://advisory.echohq.com/cve/CVE-2026-41635
https://github.com/advisories/GHSA-8297-v2rf-2p32
https://github.com/apache/mina
https://lists.apache.org/thread/1l91w1mqsb3lwfd504fs045ylxntt2tm
https://nvd.nist.gov/vuln/detail/CVE-2026-41635
https://www.cve.org/CVERecord?id=CVE-2026-41635
|
| org.apache.mina:mina-core |
CVE-2026-47065 |
CRITICAL |
2.0.16 |
2.2.8, 2.1.13, 2.0.29 |
https://access.redhat.com/security/cve/CVE-2026-47065
https://advisory.echohq.com/cve/CVE-2026-47065
https://github.com/advisories/GHSA-v3pr-hxpr-mfm8
https://github.com/apache/mina
https://lists.apache.org/thread/y7xj1bl8qo47p9bktb11hg5v6k1d4dyj
https://nvd.nist.gov/vuln/detail/CVE-2026-47065
https://www.cve.org/CVERecord?id=CVE-2026-47065
|
| org.apache.mina:mina-core |
CVE-2019-0231 |
HIGH |
2.0.16 |
2.0.21, 2.1.1 |
http://mina.apache.org/mina-project/index.html#mina-211-mina-2021-released-posted-on-april-14-2019
https://access.redhat.com/security/cve/CVE-2019-0231
https://nvd.nist.gov/vuln/detail/CVE-2019-0231
https://www.cve.org/CVERecord?id=CVE-2019-0231
https://www.openwall.com/lists/oss-security/2019/04/14/1
|
| org.apache.mina:mina-core |
CVE-2021-41973 |
MEDIUM |
2.0.16 |
2.1.5, 2.0.22 |
http://www.openwall.com/lists/oss-security/2021/11/01/2
http://www.openwall.com/lists/oss-security/2021/11/01/8
https://access.redhat.com/security/cve/CVE-2021-41973
https://lists.apache.org/thread.html/r0b907da9340d5ff4e6c1a4798ef4e79700a668657f27cca8a39e9250@%3Cdev.mina.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2021-41973
https://www.cve.org/CVERecord?id=CVE-2021-41973
https://www.oracle.com/security-alerts/cpuapr2022.html
|
| org.apache.pdfbox:pdfbox |
CVE-2021-27807 |
MEDIUM |
2.0.17 |
2.0.23 |
http://www.openwall.com/lists/oss-security/2021/03/19/9
https://access.redhat.com/security/cve/CVE-2021-27807
https://github.com/apache/pdfbox
https://github.com/apache/pdfbox/commit/5c5a837140fbb4ef78bb5ef9f29ad537c872c83e
https://issues.apache.org/jira/browse/PDFBOX-4892
https://lists.apache.org/thread.html/r043edc5dcf9199f7f882ed7906b41cb816753766e88b8792dbf319a9@%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/r1218e60c32829f76943ecaca79237120c2ec1ab266459d711a578b50@%3Cdev.pdfbox.apache.org%3E
https://lists.apache.org/thread.html/r1d268642f8b52456ee8f876b888b8ed7a9e9568c7770789f3ded7f9e@%3Ccommits.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/r4717f902f8bc36d47b3fa978552a25e4ed3ddc2fffb52b94fbc4ab36@%3Cusers.pdfbox.apache.org%3E
https://lists.apache.org/thread.html/r4cbc3f6981cd0a1a482531df9d44e4c42a7f63342a7ba78b7bff8a1b@%3Cnotifications.james.apache.org%3E
https://lists.apache.org/thread.html/r54594251369e14c185da9662a5340a52afbbdf75d61c9c3a69c8f2e8@%3Cdev.pdfbox.apache.org%3E
https://lists.apache.org/thread.html/r5c8e2125d18af184c80f7a986fbe47eaf0d30457cd450133adc235ac@%3Ccommits.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/r6e067a6d83ccb6892d0ff867bd216704f21fb0b6a854dea34be04f12@%3Cnotifications.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/r7ee634c21816c69ce829d0c41f35afa2a53a99bdd3c7cce8644fdc0e@%3Cnotifications.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/r818058ff1e4b9f6bef4e5a2e74faff38cb3d3885c1e2db398bc55cfb@%3Cusers.pdfbox.apache.org%3E
https://lists.apache.org/thread.html/r9ffe179385637b0b5cbdabd0246118005b4b8232909d2d14cd68ccd3@%3Ccommits.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/raa35746227f3f8d50fff1db9899524423a718f6f35cd39bd4769fa6c@%3Cnotifications.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/rc69140d894c6a9c67a8097a25656cce59b46a5620c354ceba10543c3@%3Cnotifications.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/re1e35881482e07dc2be6058d9b44483457f36133cac67956686ad9b9@%3Cnotifications.ofbiz.apache.org%3E
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2AVLKAHFMPH72TTP25INPZPGX5FODK3H
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2AVLKAHFMPH72TTP25INPZPGX5FODK3H/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6KDA2U4KL2N3XT3PM4ZJEBBA6JJIH2G4
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6KDA2U4KL2N3XT3PM4ZJEBBA6JJIH2G4/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PT72QOFDXLJ7PLTN66EMG5EHPTE7TFZ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PT72QOFDXLJ7PLTN66EMG5EHPTE7TFZ/
https://nvd.nist.gov/vuln/detail/CVE-2021-27807
https://svn.apache.org/viewvc?view=revision&revision=1886911
https://www.cve.org/CVERecord?id=CVE-2021-27807
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| org.apache.pdfbox:pdfbox |
CVE-2021-27906 |
MEDIUM |
2.0.17 |
2.0.23 |
http://www.openwall.com/lists/oss-security/2021/03/19/10
https://access.redhat.com/security/cve/CVE-2021-27906
https://github.com/apache/pdfbox
https://github.com/apache/pdfbox/commit/8c47be1011c11dc47300faecffd8ab32fba3646f
https://issues.apache.org/jira/browse/PDFBOX-5112
https://lists.apache.org/thread.html/r1218e60c32829f76943ecaca79237120c2ec1ab266459d711a578b50@%3Cdev.pdfbox.apache.org%3E
https://lists.apache.org/thread.html/r1d268642f8b52456ee8f876b888b8ed7a9e9568c7770789f3ded7f9e@%3Ccommits.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/r4cbc3f6981cd0a1a482531df9d44e4c42a7f63342a7ba78b7bff8a1b@%3Cnotifications.james.apache.org%3E
https://lists.apache.org/thread.html/r54594251369e14c185da9662a5340a52afbbdf75d61c9c3a69c8f2e8@%3Cdev.pdfbox.apache.org%3E
https://lists.apache.org/thread.html/r5c8e2125d18af184c80f7a986fbe47eaf0d30457cd450133adc235ac@%3Ccommits.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/r64982b768c8a2220b07aaf813bd099a9863de0d13eb212fd4efe208f@%3Cusers.pdfbox.apache.org%3E
https://lists.apache.org/thread.html/r6e067a6d83ccb6892d0ff867bd216704f21fb0b6a854dea34be04f12@%3Cnotifications.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/r7ee634c21816c69ce829d0c41f35afa2a53a99bdd3c7cce8644fdc0e@%3Cnotifications.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/r9ffe179385637b0b5cbdabd0246118005b4b8232909d2d14cd68ccd3@%3Ccommits.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/raa35746227f3f8d50fff1db9899524423a718f6f35cd39bd4769fa6c@%3Cnotifications.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/rc69140d894c6a9c67a8097a25656cce59b46a5620c354ceba10543c3@%3Cnotifications.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/rdf78aef4793362e778e21e34328b0456e302bde4b7e74f229df0ee04@%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/re1e35881482e07dc2be6058d9b44483457f36133cac67956686ad9b9@%3Cnotifications.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/rf35026148ccc0e1af133501c0d003d052883fcc65107b3ff5d3b61cd@%3Cusers.pdfbox.apache.org%3E
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2AVLKAHFMPH72TTP25INPZPGX5FODK3H
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2AVLKAHFMPH72TTP25INPZPGX5FODK3H/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6KDA2U4KL2N3XT3PM4ZJEBBA6JJIH2G4
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6KDA2U4KL2N3XT3PM4ZJEBBA6JJIH2G4/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PT72QOFDXLJ7PLTN66EMG5EHPTE7TFZ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PT72QOFDXLJ7PLTN66EMG5EHPTE7TFZ/
https://nvd.nist.gov/vuln/detail/CVE-2021-27906
https://www.cve.org/CVERecord?id=CVE-2021-27906
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| org.apache.pdfbox:pdfbox |
CVE-2021-31811 |
MEDIUM |
2.0.17 |
2.0.24 |
http://www.openwall.com/lists/oss-security/2021/06/12/2
https://access.redhat.com/security/cve/CVE-2021-31811
https://lists.apache.org/thread.html/r132e9dbbe0ebdc08b39583d8be0a575fdba573d60a42d940228bceff@%3Cnotifications.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/r143fd8445e0e778f4a85187bd79438630b96b8040e9401751fdb8aea@%3Ccommits.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/r179cc3b6822c167702ab35fe36093d5da4c99af44238c8a754c6860f@%3Ccommits.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/r2090789e4dcc2c87aacbd87d5f18e2d64dcb9f6eb7c47f5cf7d293cb@%3Cnotifications.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/rd4b6db6c3b8ab3c70f1c3bbd725a40920896453ffc2744ade6afd9fb@%3Cnotifications.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/re0cacd3fb337cdf8469853913ed2b4ddd8f8bfc52ff0ddbe61c1dfba@%3Ccommits.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/re3bd16f0cc8f1fbda46b06a4b8241cd417f71402809baa81548fc20e@%3Cusers.pdfbox.apache.org%3E
https://lists.apache.org/thread.html/rf937c2236e6c79cdb99f76a70690dd345e53dbe0707cb506a202e43e@%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/rfe26bcaba564deb505c32711ba68df7ec589797dcd96ff3389a8aaba@%3Cnotifications.ofbiz.apache.org%3E
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7HHWJRFXZ3PTKLJCOM7WJEYZFKFWMNSV
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7HHWJRFXZ3PTKLJCOM7WJEYZFKFWMNSV/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MDJKJQOMVFDFIDS27OQJXNOYHV2O273D
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MDJKJQOMVFDFIDS27OQJXNOYHV2O273D/
https://nvd.nist.gov/vuln/detail/CVE-2021-31811
https://www.cve.org/CVERecord?id=CVE-2021-31811
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| org.apache.pdfbox:pdfbox |
CVE-2021-31812 |
MEDIUM |
2.0.17 |
2.0.24 |
http://www.openwall.com/lists/oss-security/2021/06/12/1
https://access.redhat.com/security/cve/CVE-2021-31812
https://lists.apache.org/thread.html/r132e9dbbe0ebdc08b39583d8be0a575fdba573d60a42d940228bceff@%3Cnotifications.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/r143fd8445e0e778f4a85187bd79438630b96b8040e9401751fdb8aea@%3Ccommits.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/r179cc3b6822c167702ab35fe36093d5da4c99af44238c8a754c6860f@%3Ccommits.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/r2090789e4dcc2c87aacbd87d5f18e2d64dcb9f6eb7c47f5cf7d293cb@%3Cnotifications.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/ra2ab0ce69ce8aaff0773b8c1036438387ce004c2afc6f066626e205e@%3Cusers.pdfbox.apache.org%3E
https://lists.apache.org/thread.html/rd4b6db6c3b8ab3c70f1c3bbd725a40920896453ffc2744ade6afd9fb@%3Cnotifications.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/re0cacd3fb337cdf8469853913ed2b4ddd8f8bfc52ff0ddbe61c1dfba@%3Ccommits.ofbiz.apache.org%3E
https://lists.apache.org/thread.html/rf251f6c358087107f8c23473468b279d59d50a75db6b4768165c78d3@%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/rfe26bcaba564deb505c32711ba68df7ec589797dcd96ff3389a8aaba@%3Cnotifications.ofbiz.apache.org%3E
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7HHWJRFXZ3PTKLJCOM7WJEYZFKFWMNSV
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7HHWJRFXZ3PTKLJCOM7WJEYZFKFWMNSV/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MDJKJQOMVFDFIDS27OQJXNOYHV2O273D
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MDJKJQOMVFDFIDS27OQJXNOYHV2O273D/
https://nvd.nist.gov/vuln/detail/CVE-2021-31812
https://www.cve.org/CVERecord?id=CVE-2021-31812
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| org.apache.poi:poi |
CVE-2019-12415 |
MEDIUM |
4.1.0 |
4.1.1 |
https://access.redhat.com/security/cve/CVE-2019-12415
https://github.com/apache/poi
https://lists.apache.org/thread.html/13a54b6a03369cfb418a699180ffb83bd727320b6ddfec198b9b728e@%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/2ac0327748de0c2b3c1c012481b79936797c711724e0b7da83cf564c@%3Cuser.tika.apache.org%3E
https://lists.apache.org/thread.html/895164e03a3c327449069e2fd6ced0367561878b3ae6a8ec740c2007@%3Cuser.tika.apache.org%3E
https://lists.apache.org/thread.html/d88b8823867033514d7ec05d66f88c70dc207604d3dcbd44fd88464c@%3Cuser.tika.apache.org%3E
https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2019-12415
https://www.cve.org/CVERecord?id=CVE-2019-12415
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpuapr2020.html
https://www.oracle.com/security-alerts/cpujan2020.html
https://www.oracle.com/security-alerts/cpujan2021.html
https://www.oracle.com/security-alerts/cpujul2020.html
https://www.oracle.com/security-alerts/cpuoct2020.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| org.apache.poi:poi-ooxml |
CVE-2025-31672 |
MEDIUM |
4.1.0 |
5.4.0 |
http://www.openwall.com/lists/oss-security/2025/04/08/2
https://access.redhat.com/security/cve/CVE-2025-31672
https://advisory.echohq.com/cve/CVE-2025-31672
https://bz.apache.org/bugzilla/show_bug.cgi?id=69620
https://github.com/advisories/GHSA-gmg8-593g-7mv3
https://github.com/apache/poi
https://lists.apache.org/thread/k14w8vcjqy4h34hh5kzldko78kpylkq5
https://nvd.nist.gov/vuln/detail/CVE-2025-31672
https://security.netapp.com/advisory/ntap-20250523-0004
https://security.netapp.com/advisory/ntap-20250523-0004/
https://www.cve.org/CVERecord?id=CVE-2025-31672
|
| org.apache.sshd:sshd-common |
CVE-2022-45047 |
CRITICAL |
2.7.0 |
2.9.2 |
https://access.redhat.com/security/cve/CVE-2022-45047
https://github.com/apache/mina-sshd
https://github.com/apache/mina-sshd/commit/03238d51586f6b3c0bdbb1a23cf16799344d6c32
https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0
https://github.com/apache/mina-sshd/commit/5a8fe830b2a2308a2b24ac8115a391af477f64f5
https://nvd.nist.gov/vuln/detail/CVE-2022-45047
https://security.netapp.com/advisory/ntap-20240216-0008/
https://www.cve.org/CVERecord?id=CVE-2022-45047
https://www.mail-archive.com/dev@mina.apache.org/msg39312.html
|
| org.apache.sshd:sshd-common |
CVE-2024-41909 |
HIGH |
2.7.0 |
2.12.0 |
https://access.redhat.com/security/cve/CVE-2024-41909
https://github.com/apache/mina-sshd
https://github.com/apache/mina-sshd/commit/315739e4e9d1dc7a4ff32ea64936982ed0b73e76
https://github.com/apache/mina-sshd/commit/6b0fd46f64bcb75eeeee31d65f10242660aad7c1
https://github.com/apache/mina-sshd/commit/7b2c781640a7a78a9455b86593a1f63c9e8cab92
https://github.com/apache/mina-sshd/issues/445
https://github.com/apache/mina-sshd/pull/449
https://github.com/apache/mina-sshd/releases/tag/sshd-2.12.0
https://lists.apache.org/thread/vwf1ot8wx1njyy8n19j5j2tcnjnozt3b
https://nvd.nist.gov/vuln/detail/CVE-2024-41909
https://security.netapp.com/advisory/ntap-20241011-0006
https://security.netapp.com/advisory/ntap-20241011-0006/
https://www.cve.org/CVERecord?id=CVE-2024-41909
|
| org.apache.sshd:sshd-common |
CVE-2023-35887 |
MEDIUM |
2.7.0 |
2.9.3 |
https://access.redhat.com/security/cve/CVE-2023-35887
https://github.com/apache/mina-sshd
https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0
https://github.com/apache/mina-sshd/commit/a61e93035f06bff8fc622ad94870fb773d48b9f0
https://github.com/apache/mina-sshd/commit/c20739b43aab0f7bf2ccad982a6cb37b9d5a8a0b
https://github.com/apache/mina-sshd/pull/362
https://issues.apache.org/jira/browse/SSHD-1324
https://lists.apache.org/thread/b9qgtqvhnvgfpn0w1gz918p21p53tqk2
https://nvd.nist.gov/vuln/detail/CVE-2023-35887
https://www.cve.org/CVERecord?id=CVE-2023-35887
|
| org.apache.tika:tika-core |
CVE-2025-66516 |
CRITICAL |
1.22 |
3.2.2 |
https://access.redhat.com/security/cve/CVE-2025-66516
https://cve.org/CVERecord?id=CVE-2025-54988
https://github.com/apache/tika
https://lists.apache.org/thread/s5x3k93nhbkqzztp1olxotoyjpdlps9k
https://nvd.nist.gov/vuln/detail/CVE-2025-66516
https://ubuntu.com/security/notices/USN-8324-1
https://www.cve.org/CVERecord?id=CVE-2025-66516
|
| org.apache.tika:tika-core |
CVE-2022-30126 |
MEDIUM |
1.22 |
1.28.2, 2.4.0 |
http://www.openwall.com/lists/oss-security/2022/05/16/3
http://www.openwall.com/lists/oss-security/2022/05/31/2
http://www.openwall.com/lists/oss-security/2022/06/27/5
https://access.redhat.com/security/cve/CVE-2022-30126
https://github.com/advisories/GHSA-qw3f-w4pf-jh5f
https://github.com/apache/tika
https://github.com/apache/tika/commit/83b0de4d60161ebd4bc224141a959ac8c18d95f4
https://github.com/apache/tika/commit/a36711610fa1f6f5ba0f594803415af795e0b265
https://github.com/apache/tika/commit/e76302196ebcafb7b51fce37fbe8256e6c0fbc51
https://lists.apache.org/thread/dh3syg68nxogbmlg13srd6gjn3h2z6r4
https://nvd.nist.gov/vuln/detail/CVE-2022-30126
https://security.netapp.com/advisory/ntap-20220624-0004
https://security.netapp.com/advisory/ntap-20220624-0004/
https://ubuntu.com/security/notices/USN-7529-1
https://www.cve.org/CVERecord?id=CVE-2022-30126
https://www.openwall.com/lists/oss-security/2022/05/16/3
https://www.oracle.com/security-alerts/cpujul2022.html
|
| org.apache.tika:tika-core |
CVE-2022-30973 |
MEDIUM |
1.22 |
1.28.3 |
http://www.openwall.com/lists/oss-security/2022/05/31/2
http://www.openwall.com/lists/oss-security/2022/06/27/5
https://access.redhat.com/security/cve/CVE-2022-30973
https://github.com/advisories/GHSA-rpjm-422r-95mh
https://github.com/apache/tika
https://github.com/apache/tika/commit/a36711610fa1f6f5ba0f594803415af795e0b265
https://github.com/apache/tika/commit/e76302196ebcafb7b51fce37fbe8256e6c0fbc51
https://lists.apache.org/thread/gqvb5t4p7tmdpl0y5bdbf72pgxj04h7p
https://nvd.nist.gov/vuln/detail/CVE-2022-30973
https://security.netapp.com/advisory/ntap-20220722-0004
https://security.netapp.com/advisory/ntap-20220722-0004/
https://ubuntu.com/security/notices/USN-7529-1
https://www.cve.org/CVERecord?id=CVE-2022-30973
|
| org.apache.velocity:velocity |
CVE-2020-13936 |
HIGH |
1.7 |
|
http://www.openwall.com/lists/oss-security/2021/03/10/1
https://access.redhat.com/security/cve/CVE-2020-13936
https://github.com/apache/velocity-engine
https://lists.apache.org/thread.html/r01043f584cbd47959fabe18fff64de940f81a65024bb8dddbda31d9a@%3Cuser.velocity.apache.org%3E
https://lists.apache.org/thread.html/r0bc98e9cd080b4a13b905c571b9bed87e1a0878d44dbf21487c6cca4@%3Cdev.santuario.apache.org%3E
https://lists.apache.org/thread.html/r17cb932fab14801b14e5b97a7f05192f4f366ef260c10d4a8dba8ac9@%3Cdev.ws.apache.org%3E
https://lists.apache.org/thread.html/r293284c6806c73f51098001ea86a14271c39f72cd76af9e946d9d9ad@%3Cdev.ws.apache.org%3E
https://lists.apache.org/thread.html/r39de20c7e9c808b1f96790875d33e58c9c0aabb44fd9227e7b3dc5da@%3Cdev.ws.apache.org%3E
https://lists.apache.org/thread.html/r3ea4c4c908505b20a4c268330dfe7188b90c84dcf777728d02068ae6@%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/r4cd59453b65d4ac290fcb3b71fdf32b4f1f8989025e89558deb5a245@%3Cdev.ws.apache.org%3E
https://lists.apache.org/thread.html/r52a5129df402352adc34d052bab9234c8ef63596306506a89fdc7328@%3Cusers.activemq.apache.org%3E
https://lists.apache.org/thread.html/r7f209b837217d2a0fe5977fb692e7f15d37fa5de8214bcdc4c21d9a7@%3Ccommits.turbine.apache.org%3E
https://lists.apache.org/thread.html/r9dc2505651788ac668299774d9e7af4dc616be2f56fdc684d1170882@%3Cusers.activemq.apache.org%3E
https://lists.apache.org/thread.html/rb042f3b0090e419cc9f5a3d32cf0baff283ccd6fcb1caea61915d6b6@%3Ccommits.velocity.apache.org%3E
https://lists.apache.org/thread.html/rbee7270556f4172322936b5ecc9fabf0c09f00d4fa56c9de1963c340@%3Cdev.ws.apache.org%3E
https://lists.apache.org/thread.html/rd2a89e17e8a9b451ce655f1a34117752ea1d18a22ce580d8baa824fd@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/rd7e865c87f9043c21d9c1fd9d4df866061d9a08cfc322771160d8058@%3Cdev.ws.apache.org%3E
https://lists.apache.org/thread.html/re641197d204765130618086238c73dd2ce5a3f94b33785b587d72726@%3Cdev.ws.apache.org%3E
https://lists.apache.org/thread.html/re8e7482fe54d289fc0229e61cc64947b63b12c3c312e9f25bf6f3b8c@%3Cdev.ws.apache.org%3E
https://lists.apache.org/thread.html/reab5978b54a9f4c078402161e30a89c42807b198814acadbe6c862c7@%3Cdev.ws.apache.org%3E
https://lists.apache.org/thread.html/rf7d369de88dc88a1347006a3323b3746d849234db40a8edfd5ebc436@%3Cdev.ws.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/03/msg00019.html
https://nvd.nist.gov/vuln/detail/CVE-2020-13936
https://security.gentoo.org/glsa/202107-52
https://ubuntu.com/security/notices/USN-6281-1
https://www.cve.org/CVERecord?id=CVE-2020-13936
https://www.openwall.com/lists/oss-security/2021/03/10/1
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
|
| org.assertj:assertj-core |
CVE-2026-24400 |
HIGH |
3.19.0 |
3.27.7 |
https://access.redhat.com/errata/RHSA-2026:60215
https://access.redhat.com/security/cve/CVE-2026-24400
https://bugzilla.redhat.com/2433116
https://bugzilla.redhat.com/show_bug.cgi?id=2433116
https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24400
https://errata.almalinux.org/9/ALSA-2026-60215.html
https://errata.rockylinux.org/RLSA-2026:60215
https://github.com/assertj/assertj
https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a
https://github.com/assertj/assertj/releases/tag/assertj-build-3.27.7
https://github.com/assertj/assertj/security/advisories/GHSA-rqfh-9r24-8c9r
https://linux.oracle.com/cve/CVE-2026-24400.html
https://linux.oracle.com/errata/ELSA-2026-60215-0.html
https://nvd.nist.gov/vuln/detail/CVE-2026-24400
https://www.cve.org/CVERecord?id=CVE-2026-24400
|
| org.bouncycastle:bcprov-jdk15on |
CVE-2023-33201 |
MEDIUM |
1.70 |
|
https://access.redhat.com/security/cve/CVE-2023-33201
https://bouncycastle.org
https://bouncycastle.org/releasenotes.html#r1rv74
https://github.com/bcgit/bc-java
https://github.com/bcgit/bc-java/commit/ccf93ca736b89250ff4ce079a5aa56f5cbf0ebbd
https://github.com/bcgit/bc-java/commit/e8c409a8389c815ea3fda5e8b94c92fdfe583bcc
https://github.com/bcgit/bc-java/commits/main/prov/src/main/java/org/bouncycastle/jce/provider/X509LDAPCertStoreSpi.java
https://github.com/bcgit/bc-java/wiki/CVE-2023-33201
https://lists.debian.org/debian-lts-announce/2023/08/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2023-33201
https://security.netapp.com/advisory/ntap-20230824-0008
https://security.netapp.com/advisory/ntap-20230824-0008/
https://ubuntu.com/security/notices/USN-8108-1
https://www.cve.org/CVERecord?id=CVE-2023-33201
|
| org.bouncycastle:bcprov-jdk15on |
CVE-2024-29857 |
MEDIUM |
1.70 |
1.78 |
https://access.redhat.com/security/cve/CVE-2024-29857
https://github.com/bcgit/bc-csharp/commit/56daa6eac526f165416d17f661422d60de0dfd63
https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9029857
https://github.com/bcgit/bc-java/commit/efc498ca4caa340ac2fe11f2efee06c1a294501f
https://github.com/bcgit/bc-java/commit/fee80dd230e7fba132d03a34f1dd1d6aae0d0281
https://github.com/bcgit/bc-java/issues/1635
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9029857
https://nvd.nist.gov/vuln/detail/CVE-2024-29857
https://security.netapp.com/advisory/ntap-20241206-0008
https://security.netapp.com/advisory/ntap-20241206-0008/
https://ubuntu.com/security/notices/USN-8108-1
https://www.bouncycastle.org/latest_releases.html
https://www.cve.org/CVERecord?id=CVE-2024-29857
|
| org.bouncycastle:bcprov-jdk15on |
CVE-2024-30171 |
MEDIUM |
1.70 |
1.78 |
https://access.redhat.com/security/cve/CVE-2024-30171
https://github.com/bcgit/bc-csharp/commit/c984b8bfd8544dfc55dba91a02cbbbb9c580c217
https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9030171
https://github.com/bcgit/bc-java/commit/d7d5e735abd64bf0f413f54fd9e495fc02400fb0
https://github.com/bcgit/bc-java/commit/e0569dcb1dea9d421d84fc4c5c5688fe101afa2d
https://github.com/bcgit/bc-java/issues/1528
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9030171
https://nvd.nist.gov/vuln/detail/CVE-2024-30171
https://people.redhat.com/~hkario/marvin/
https://security.netapp.com/advisory/ntap-20240614-0008
https://security.netapp.com/advisory/ntap-20240614-0008/
https://ubuntu.com/security/notices/USN-8108-1
https://www.bouncycastle.org/latest_releases.html
https://www.cve.org/CVERecord?id=CVE-2024-30171
|
| org.bouncycastle:bcprov-jdk15on |
CVE-2024-34447 |
MEDIUM |
1.70 |
1.78 |
http://security.netapp.com/advisory/ntap-20240614-0007
https://access.redhat.com/security/cve/CVE-2024-34447
https://github.com/bcgit/bc-java
https://github.com/bcgit/bc-java/issues/1656
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9034447
https://nvd.nist.gov/vuln/detail/CVE-2024-34447
https://security.netapp.com/advisory/ntap-20240614-0007/
https://ubuntu.com/security/notices/USN-8108-1
https://www.bouncycastle.org/latest_releases.html
https://www.cve.org/CVERecord?id=CVE-2024-34447
|
| org.codehaus.plexus:plexus-utils |
CVE-2025-67030 |
HIGH |
3.2.1 |
4.0.3, 3.6.1 |
https://access.redhat.com/errata/RHSA-2026:17668
https://access.redhat.com/errata/RHSA-2026:18054
https://access.redhat.com/errata/RHSA-2026:18055
https://access.redhat.com/errata/RHSA-2026:18059
https://access.redhat.com/errata/RHSA-2026:35990
https://access.redhat.com/errata/RHSA-2026:35991
https://access.redhat.com/errata/RHSA-2026:35992
https://access.redhat.com/errata/RHSA-2026:35996
https://access.redhat.com/errata/RHSA-2026:35997
https://access.redhat.com/errata/RHSA-2026:36012
https://access.redhat.com/errata/RHSA-2026:38500
https://access.redhat.com/errata/RHSA-2026:38514
https://access.redhat.com/errata/RHSA-2026:38796
https://access.redhat.com/errata/RHSA-2026:40841
https://access.redhat.com/errata/RHSA-2026:41948
https://access.redhat.com/errata/RHSA-2026:60239
https://access.redhat.com/errata/RHSA-2026:60246
https://access.redhat.com/errata/RHSA-2026:60247
https://access.redhat.com/errata/RHSA-2026:60248
https://access.redhat.com/errata/RHSA-2026:60249
https://access.redhat.com/errata/RHSA-2026:60250
https://access.redhat.com/errata/RHSA-2026:60251
https://access.redhat.com/errata/RHSA-2026:60252
https://access.redhat.com/errata/RHSA-2026:60254
https://access.redhat.com/errata/RHSA-2026:60256
https://access.redhat.com/errata/RHSA-2026:60259
https://access.redhat.com/errata/RHSA-2026:65126
https://access.redhat.com/errata/RHSA-2026:7109
https://access.redhat.com/errata/RHSA-2026:7380
https://access.redhat.com/security/cve/CVE-2025-67030
https://advisory.echohq.com/cve/CVE-2025-67030
https://bugzilla.redhat.com/2451409
https://bugzilla.redhat.com/show_bug.cgi?id=2451409
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67030
https://errata.almalinux.org/9/ALSA-2026-38796.html
https://errata.rockylinux.org/RLSA-2026:38796
https://gist.github.com/weaver4VD/3216dac645220f8c9b488362f61241ec
https://github.com/advisories/GHSA-6fmv-xxpf-w3cw
https://github.com/codehaus-plexus/plexus-utils
https://github.com/codehaus-plexus/plexus-utils/commit/6d780b3378829318ba5c2d29547e0012d5b29642
https://github.com/codehaus-plexus/plexus-utils/issues/294
https://github.com/codehaus-plexus/plexus-utils/pull/295
https://github.com/codehaus-plexus/plexus-utils/pull/296
https://github.com/codehaus-plexus/plexus-utils/releases/tag/plexus-utils-4.0.3
https://linux.oracle.com/cve/CVE-2025-67030.html
https://linux.oracle.com/errata/ELSA-2026-41948.html
https://nvd.nist.gov/vuln/detail/CVE-2025-67030
https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-67030.json
https://www.cve.org/CVERecord?id=CVE-2025-67030
|
| org.elasticsearch:elasticsearch |
CVE-2023-31418 |
HIGH |
6.6.1 |
7.17.13, 8.9.0 |
https://access.redhat.com/security/cve/CVE-2023-31418
https://discuss.elastic.co/t/elasticsearch-8-9-0-7-17-13-security-update/343616
https://nvd.nist.gov/vuln/detail/CVE-2023-31418
https://security.netapp.com/advisory/ntap-20231130-0005
https://security.netapp.com/advisory/ntap-20231130-0005/
https://www.cve.org/CVERecord?id=CVE-2023-31418
https://www.elastic.co/community/security
|
| org.elasticsearch:elasticsearch |
CVE-2019-7614 |
MEDIUM |
6.6.1 |
6.8.2, 7.2.1 |
https://access.redhat.com/security/cve/CVE-2019-7614
https://github.com/elastic/elasticsearch
https://nvd.nist.gov/vuln/detail/CVE-2019-7614
https://www.cve.org/CVERecord?id=CVE-2019-7614
https://www.elastic.co/community/security
https://www.elastic.co/community/security/
|
| org.elasticsearch:elasticsearch |
CVE-2020-7019 |
MEDIUM |
6.6.1 |
7.9.0, 6.8.12 |
https://access.redhat.com/security/cve/CVE-2020-7019
https://discuss.elastic.co/t/elastic-stack-7-9-0-and-6-8-12-security-update/245456
https://github.com/elastic/elasticsearch
https://nvd.nist.gov/vuln/detail/CVE-2020-7019
https://security.netapp.com/advisory/ntap-20200827-0001
https://security.netapp.com/advisory/ntap-20200827-0001/
https://www.cve.org/CVERecord?id=CVE-2020-7019
https://www.elastic.co/community/security/
|
| org.elasticsearch:elasticsearch |
CVE-2020-7021 |
MEDIUM |
6.6.1 |
6.8.14, 7.10.0 |
https://access.redhat.com/security/cve/CVE-2020-7021
https://discuss.elastic.co/t/elastic-stack-7-11-0-and-6-8-14-security-update/263915
https://github.com/elastic/elasticsearch
https://nvd.nist.gov/vuln/detail/CVE-2020-7021
https://security.netapp.com/advisory/ntap-20210319-0003
https://security.netapp.com/advisory/ntap-20210319-0003/
https://www.cve.org/CVERecord?id=CVE-2020-7021
|
| org.elasticsearch:elasticsearch |
CVE-2021-22135 |
MEDIUM |
6.6.1 |
7.11.2, 6.8.15 |
https://access.redhat.com/security/cve/CVE-2021-22135
https://discuss.elastic.co/t/elastic-stack-7-12-0-and-6-8-15-security-update/268125
https://nvd.nist.gov/vuln/detail/CVE-2021-22135
https://security.netapp.com/advisory/ntap-20210625-0003
https://security.netapp.com/advisory/ntap-20210625-0003/
https://www.cve.org/CVERecord?id=CVE-2021-22135
|
| org.elasticsearch:elasticsearch |
CVE-2021-22137 |
MEDIUM |
6.6.1 |
7.11.2, 6.8.15 |
https://access.redhat.com/security/cve/CVE-2021-22137
https://discuss.elastic.co/t/elastic-stack-7-12-0-and-6-8-15-security-update/268125
https://github.com/elastic/elasticsearch
https://nvd.nist.gov/vuln/detail/CVE-2021-22137
https://security.netapp.com/advisory/ntap-20210625-0003
https://security.netapp.com/advisory/ntap-20210625-0003/
https://www.cve.org/CVERecord?id=CVE-2021-22137
|
| org.elasticsearch:elasticsearch |
CVE-2021-22144 |
MEDIUM |
6.6.1 |
6.8.17, 7.13.3 |
https://access.redhat.com/security/cve/CVE-2021-22144
https://discuss.elastic.co/t/elasticsearch-7-13-3-and-6-8-17-security-update/278100
https://nvd.nist.gov/vuln/detail/CVE-2021-22144
https://security.netapp.com/advisory/ntap-20210827-0006
https://security.netapp.com/advisory/ntap-20210827-0006/
https://www.cve.org/CVERecord?id=CVE-2021-22144
https://www.oracle.com/security-alerts/cpuapr2022.html
|
| org.elasticsearch:elasticsearch |
CVE-2023-49921 |
MEDIUM |
6.6.1 |
7.17.16, 8.11.2 |
https://access.redhat.com/security/cve/CVE-2023-49921
https://discuss.elastic.co/t/elasticsearch-8-11-2-7-17-16-security-update-esa-2023-29/349179
https://github.com/elastic/elasticsearch
https://nvd.nist.gov/vuln/detail/CVE-2023-49921
https://www.cve.org/CVERecord?id=CVE-2023-49921
|
| org.elasticsearch:elasticsearch |
CVE-2024-23444 |
MEDIUM |
6.6.1 |
8.13.0, 7.17.23 |
https://discuss.elastic.co/t/elasticsearch-8-13-0-7-17-23-security-update-esa-2024-12/364157
https://github.com/elastic/elasticsearch
https://github.com/elastic/elasticsearch/commit/07296d596a1dee24730e33ad40b6726f70c6fc23
https://github.com/elastic/elasticsearch/commit/321c4e1e6b738bf80faa41dbb9881489a4ab44e5
https://github.com/elastic/elasticsearch/commit/bb1eddada3678257838b0590090ff9eb68acaa1b
https://github.com/elastic/elasticsearch/pull/106105
https://github.com/elastic/elasticsearch/pull/109834
https://nvd.nist.gov/vuln/detail/CVE-2024-23444
https://security.netapp.com/advisory/ntap-20250404-0001
https://security.netapp.com/advisory/ntap-20250404-0001/
|
| org.elasticsearch:elasticsearch |
CVE-2024-43709 |
MEDIUM |
6.6.1 |
7.17.21, 8.13.3 |
https://access.redhat.com/security/cve/CVE-2024-43709
https://discuss.elastic.co/t/elasticsearch-7-17-21-and-8-13-3-security-update-esa-2024-25/373442
https://github.com/elastic/elasticsearch
https://nvd.nist.gov/vuln/detail/CVE-2024-43709
https://security.netapp.com/advisory/ntap-20250221-0007
https://security.netapp.com/advisory/ntap-20250221-0007/
https://www.cve.org/CVERecord?id=CVE-2024-43709
|
| org.elasticsearch:elasticsearch |
CVE-2024-52979 |
MEDIUM |
6.6.1 |
7.17.25, 8.16.0 |
https://access.redhat.com/security/cve/CVE-2024-52979
https://discuss.elastic.co/t/elasticsearch-7-17-25-and-8-16-0-security-update-esa-2024-40/377709
https://github.com/elastic/elasticsearch
https://github.com/elastic/elasticsearch/commit/cbde7f456d7ccd98556302fccf3238bb4557fc91
https://github.com/elastic/elasticsearch/commit/f9b6b57d1d0f76e2d14291c04fb50abeb642cfbf
https://github.com/elastic/elasticsearch/pull/114002
https://nvd.nist.gov/vuln/detail/CVE-2024-52979
https://www.cve.org/CVERecord?id=CVE-2024-52979
|
| org.elasticsearch:elasticsearch |
CVE-2020-7020 |
LOW |
6.6.1 |
6.8.13, 7.9.2 |
https://access.redhat.com/security/cve/CVE-2020-7020
https://discuss.elastic.co/t/elastic-stack-7-9-3-and-6-8-13-security-update/253033
https://github.com/elastic/elasticsearch
https://nvd.nist.gov/vuln/detail/CVE-2020-7020
https://security.netapp.com/advisory/ntap-20201123-0001
https://security.netapp.com/advisory/ntap-20201123-0001/
https://staging-website.elastic.co/community/security
https://staging-website.elastic.co/community/security/
https://www.cve.org/CVERecord?id=CVE-2020-7020
https://www.elastic.co/community/security/
|
| org.hibernate.validator:hibernate-validator |
CVE-2019-10219 |
MEDIUM |
6.0.16.Final |
6.1.0.Alpha6, 6.0.18.Final |
https://access.redhat.com/errata/RHSA-2020:0159
https://access.redhat.com/errata/RHSA-2020:0160
https://access.redhat.com/errata/RHSA-2020:0161
https://access.redhat.com/errata/RHSA-2020:0164
https://access.redhat.com/errata/RHSA-2020:0445
https://access.redhat.com/security/cve/CVE-2019-10219
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10219
https://github.com/hibernate/hibernate-validator
https://github.com/hibernate/hibernate-validator/commit/124b7dd6d9a4ad24d4d49f74701f05a13e56cee
https://github.com/hibernate/hibernate-validator/commit/124b7dd6d9a4ad24d4d49f74701f05a13e56ceee
https://github.com/hibernate/hibernate-validator/commit/20d729548511ac5cff6fd459f93de137195420fe
https://github.com/poc-effectiveness/PoCAdaptation/tree/main/Adapted/CVE-2019-10219
https://github.com/poc-effectiveness/PoCAdaptation/tree/main/Origin/CVE-2019-10219/exploit
https://lists.apache.org/thread.html/r4f8b4e2541be4234946e40d55859273a7eec0f4901e8080ce2406fe6@%3Cnotifications.accumulo.apache.org%3E
https://lists.apache.org/thread.html/r4f92d7f7682dcff92722fa947f9e6f8ba2227c5dc3e11ba09114897d@%3Cnotifications.accumulo.apache.org%3E
https://lists.apache.org/thread.html/r87b7e2d22982b4ca9f88f5f4f22a19b394d2662415b233582ed22ebf@%3Cnotifications.accumulo.apache.org%3E
https://lists.apache.org/thread.html/rb8dca19a4e52b60dab0ab21e2ff9968d78f4b84e4033824db1dd24b4@%3Cpluto-scm.portals.apache.org%3E
https://lists.apache.org/thread.html/rd418deda6f0ebe658c2015f43a14d03acb8b8c2c093c5bf6b880cd7c@%3Cpluto-dev.portals.apache.org%3E
https://lists.apache.org/thread.html/rf9c17c3efc4a376a96e9e2777eee6acf0bec28e2200e4b35da62de4a@%3Cpluto-dev.portals.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2019-10219
https://security.netapp.com/advisory/ntap-20220210-0024
https://security.netapp.com/advisory/ntap-20220210-0024/
https://www.cve.org/CVERecord?id=CVE-2019-10219
https://www.oracle.com/security-alerts/cpujan2022.html
|
| org.hibernate.validator:hibernate-validator |
CVE-2020-10693 |
MEDIUM |
6.0.16.Final |
6.1.5.Final, 6.0.20.Final |
https://access.redhat.com/security/cve/CVE-2020-10693
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10693
https://lists.apache.org/thread.html/rb8dca19a4e52b60dab0ab21e2ff9968d78f4b84e4033824db1dd24b4@%3Cpluto-scm.portals.apache.org%3E
https://lists.apache.org/thread.html/rd418deda6f0ebe658c2015f43a14d03acb8b8c2c093c5bf6b880cd7c@%3Cpluto-dev.portals.apache.org%3E
https://lists.apache.org/thread.html/rf9c17c3efc4a376a96e9e2777eee6acf0bec28e2200e4b35da62de4a@%3Cpluto-dev.portals.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2020-10693
https://www.cve.org/CVERecord?id=CVE-2020-10693
https://www.ibm.com/support/pages/node/6348216
https://www.oracle.com/security-alerts/cpuapr2022.html
|
| org.hibernate.validator:hibernate-validator |
CVE-2023-1932 |
MEDIUM |
6.0.16.Final |
6.2.0.Final |
https://access.redhat.com/security/cve/CVE-2023-1932
https://bugzilla.redhat.com/show_bug.cgi?id=1809444
https://github.com/hibernate/hibernate-validator
https://nvd.nist.gov/vuln/detail/CVE-2023-1932
https://www.cve.org/CVERecord?id=CVE-2023-1932
|
| org.hibernate.validator:hibernate-validator |
CVE-2025-35036 |
MEDIUM |
6.0.16.Final |
6.2.0.CR1, 7.0.0.CR1 |
https://access.redhat.com/security/cve/CVE-2025-35036
https://docs.jboss.org/hibernate/stable/validator/reference/en-US/html_single/#section-hibernateconstraintvalidatorcontext
https://github.com/hibernate/hibernate-validator
https://github.com/hibernate/hibernate-validator/commit/05f795bb7cf18856004f40e5042709e550ed0d6e
https://github.com/hibernate/hibernate-validator/commit/254858d9dcc4e7cd775d1b0f47f482218077c5e1
https://github.com/hibernate/hibernate-validator/commit/d2db40b9e7d22c7a0b44d7665242dfc7b4d14d78
https://github.com/hibernate/hibernate-validator/commit/e076293b0ee1bfa97b6e67d05ad9eee1ad77e893
https://github.com/hibernate/hibernate-validator/compare/6.1.7.Final...6.2.0.Final
https://github.com/hibernate/hibernate-validator/pull/1138
https://hibernate.atlassian.net/browse/HV-1816
https://hibernate.org/validator/documentation/migration-guide/#6-2-0-cr1
https://in.relation.to/2021/01/06/hibernate-validator-700-62-final-released/#expression-language
https://labs.watchtowr.com/expression-payloads-meet-mayhem-cve-2025-4427-and-cve-2025-4428
https://labs.watchtowr.com/expression-payloads-meet-mayhem-cve-2025-4427-and-cve-2025-4428/
https://nvd.nist.gov/vuln/detail/CVE-2025-35036
https://www.cve.org/CVERecord?id=CVE-2020-5245
https://www.cve.org/CVERecord?id=CVE-2025-35036
https://www.cve.org/CVERecord?id=CVE-2025-4428
|
| org.hibernate:hibernate-core |
CVE-2026-0603 |
HIGH |
5.3.20.Final |
5.3.38 |
https://access.redhat.com/errata/RHSA-2026:4915
https://access.redhat.com/errata/RHSA-2026:4916
https://access.redhat.com/errata/RHSA-2026:4917
https://access.redhat.com/errata/RHSA-2026:4924
https://access.redhat.com/errata/RHSA-2026:6011
https://access.redhat.com/errata/RHSA-2026:6012
https://access.redhat.com/errata/RHSA-2026:76128
https://access.redhat.com/errata/RHSA-2026:76129
https://access.redhat.com/errata/RHSA-2026:76130
https://access.redhat.com/errata/RHSA-2026:76132
https://access.redhat.com/errata/RHSA-2026:76134
https://access.redhat.com/security/cve/CVE-2026-0603
https://advisory.echohq.com/cve/CVE-2026-0603
https://bugzilla.redhat.com/show_bug.cgi?id=2427147
https://github.com/advisories/GHSA-2p5w-cvg5-gc5c
https://github.com/hibernate/hibernate-orm
https://github.com/hibernate/hibernate-orm/commit/3f820fdf16ee4d1f556bc73b259625416d703048
https://nvd.nist.gov/vuln/detail/CVE-2026-0603
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0603.json
https://www.cve.org/CVERecord?id=CVE-2026-0603
|
| org.jboss.resteasy:resteasy-client |
CVE-2020-1695 |
HIGH |
3.11.2.Final |
4.6.0, 3.12.0 |
https://access.redhat.com/security/cve/CVE-2020-1695
https://bugzilla.redhat.com/show_bug.cgi?id=1584550
https://bugzilla.redhat.com/show_bug.cgi?id=1590942
https://bugzilla.redhat.com/show_bug.cgi?id=1656772
https://bugzilla.redhat.com/show_bug.cgi?id=1664435
https://bugzilla.redhat.com/show_bug.cgi?id=1730462
https://bugzilla.redhat.com/show_bug.cgi?id=1787115
https://bugzilla.redhat.com/show_bug.cgi?id=1843416
https://bugzilla.redhat.com/show_bug.cgi?id=1868233
https://bugzilla.redhat.com/show_bug.cgi?id=1875563
https://bugzilla.redhat.com/show_bug.cgi?id=1883656
https://bugzilla.redhat.com/show_bug.cgi?id=1883996
https://bugzilla.redhat.com/show_bug.cgi?id=1889691
https://bugzilla.redhat.com/show_bug.cgi?id=1890639
https://bugzilla.redhat.com/show_bug.cgi?id=1891577
https://bugzilla.redhat.com/show_bug.cgi?id=1897120
https://bugzilla.redhat.com/show_bug.cgi?id=1908541
https://bugzilla.redhat.com/show_bug.cgi?id=1912418
https://bugzilla.redhat.com/show_bug.cgi?id=1912493
https://bugzilla.redhat.com/show_bug.cgi?id=1916686
https://bugzilla.redhat.com/show_bug.cgi?id=1919282
https://bugzilla.redhat.com/show_bug.cgi?id=1929067
https://bugzilla.redhat.com/show_bug.cgi?id=1932803
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1695
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1695
https://errata.rockylinux.org/RLSA-2021:1775
https://github.com/resteasy/Resteasy/commit/88ba8537f2e8d465c7031d352bf9bb25526ce475
https://linux.oracle.com/cve/CVE-2020-1695.html
https://linux.oracle.com/errata/ELSA-2021-1775.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IJDMT443YZWCBS5NS76XZ7TL3GK7BXHL
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IJDMT443YZWCBS5NS76XZ7TL3GK7BXHL/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RX22C6I56BJUER76IIPYHGZIWBQIU3CQ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RX22C6I56BJUER76IIPYHGZIWBQIU3CQ/
https://nvd.nist.gov/vuln/detail/CVE-2020-1695
https://ubuntu.com/security/notices/USN-7351-1
https://ubuntu.com/security/notices/USN-7630-1
https://www.cve.org/CVERecord?id=CVE-2020-1695
|
| org.jboss.resteasy:resteasy-client |
CVE-2020-25633 |
MEDIUM |
3.11.2.Final |
4.5.7.Final, 3.14.0.Final |
https://access.redhat.com/security/cve/CVE-2020-25633
https://bugzilla.redhat.com/show_bug.cgi?id=1879042
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25633
https://github.com/resteasy/Resteasy/pull/2665/commits/13c808b5967242eec1e877edbc0014a84dcd6eb0
https://issues.redhat.com/browse/RESTEASY-2820
https://nvd.nist.gov/vuln/detail/CVE-2020-25633
https://ubuntu.com/security/notices/USN-7351-1
https://ubuntu.com/security/notices/USN-7630-1
https://www.cve.org/CVERecord?id=CVE-2020-25633
|
| org.jboss.resteasy:resteasy-multipart-provider |
CVE-2023-0482 |
MEDIUM |
3.11.2.Final |
6.2.3.Final, 5.0.6.Final, 4.7.8.Final, 3.15.5.Final |
https://access.redhat.com/security/cve/CVE-2023-0482
https://bugzilla.redhat.com/show_bug.cgi?id=2166004
https://github.com/orgs/resteasy/discussions/3415
https://github.com/orgs/resteasy/discussions/3504
https://github.com/orgs/resteasy/discussions/3506
https://github.com/resteasy/resteasy
https://github.com/resteasy/resteasy/commit/3d8a551d80b98f185edaff6f895188ec8211366b
https://github.com/resteasy/resteasy/pull/3409
https://github.com/resteasy/resteasy/pull/3409/
https://github.com/resteasy/resteasy/pull/3409/commits/807d7456f2137cde8ef7c316707211bf4e542d56
https://github.com/resteasy/resteasy/pull/3410
https://github.com/resteasy/resteasy/pull/3412
https://github.com/resteasy/resteasy/pull/3413
https://github.com/resteasy/resteasy/pull/3423
https://github.com/resteasy/resteasy/security/advisories/GHSA-2c6g-pfx3-w7h8
https://issues.redhat.com/browse/RESTEASY-3286
https://nvd.nist.gov/vuln/detail/CVE-2023-0482
https://security.netapp.com/advisory/ntap-20230427-0001
https://security.netapp.com/advisory/ntap-20230427-0001/
https://ubuntu.com/security/notices/USN-7351-1
https://ubuntu.com/security/notices/USN-7630-1
https://www.cve.org/CVERecord?id=CVE-2023-0482
|
| org.jboss.xnio:xnio-api |
CVE-2023-5685 |
HIGH |
3.7.7.Final |
3.8.14.Final |
https://access.redhat.com/errata/RHSA-2023:7637
https://access.redhat.com/errata/RHSA-2023:7638
https://access.redhat.com/errata/RHSA-2023:7639
https://access.redhat.com/errata/RHSA-2023:7641
https://access.redhat.com/errata/RHSA-2024:10207
https://access.redhat.com/errata/RHSA-2024:10208
https://access.redhat.com/errata/RHSA-2024:2707
https://access.redhat.com/security/cve/CVE-2023-5685
https://bugzilla.redhat.com/show_bug.cgi?id=2241822
https://github.com/xnio/xnio
https://github.com/xnio/xnio/blob/3.8.13.Final/api/src/main/java/org/xnio/AbstractIoFuture.java#L249
https://github.com/xnio/xnio/commit/ffabdcdda508ef87aeadad5ca3f854e274d60ec1
https://issues.redhat.com/browse/XNIO-423
https://nvd.nist.gov/vuln/detail/CVE-2023-5685
https://www.cve.org/CVERecord?id=CVE-2023-5685
|
| org.jboss.xnio:xnio-nio |
CVE-2020-14340 |
MEDIUM |
3.7.7.Final |
3.8.2.Final, 3.7.9.Final |
https://access.redhat.com/security/cve/CVE-2020-14340
https://bugzilla.redhat.com/show_bug.cgi?id=1860218
https://nvd.nist.gov/vuln/detail/CVE-2020-14340
https://www.cve.org/CVERecord?id=CVE-2020-14340
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
|
| org.json:json |
CVE-2022-45688 |
HIGH |
20140107 |
20230227 |
https://github.com/dromara/hutool/commit/6a2b585de0a380e8c12016dbaa1620b69be11b8c
https://github.com/dromara/hutool/issues/2748
https://github.com/dromara/hutool/releases/tag/5.8.25
https://github.com/stleary/JSON-java/commit/a6e412bded7a0ad605adfeca029318f184c32102
https://github.com/stleary/JSON-java/issues/708
https://nvd.nist.gov/vuln/detail/CVE-2022-45688
|
| org.json:json |
CVE-2023-5072 |
HIGH |
20140107 |
20231013 |
http://www.openwall.com/lists/oss-security/2023/12/13/4
https://access.redhat.com/security/cve/CVE-2023-5072
https://advisory.echohq.com/cve/CVE-2023-5072
https://github.com/advisories/GHSA-4jq9-2xhw-jpx7
https://github.com/google/security-research/security/advisories/GHSA-4jq9-2xhw-jpx7
https://github.com/stleary/JSON-java
https://github.com/stleary/JSON-java/commit/60662e2f8384d3449822a3a1179bfe8de67b55bb
https://github.com/stleary/JSON-java/issues/758
https://github.com/stleary/JSON-java/issues/771
https://github.com/stleary/JSON-java/pull/759
https://nvd.nist.gov/vuln/detail/CVE-2023-5072
https://security.netapp.com/advisory/ntap-20240621-0007/
https://www.cve.org/CVERecord?id=CVE-2023-5072
|
| org.liquibase:liquibase-core |
CVE-2022-0839 |
CRITICAL |
3.6.3 |
4.8.0 |
http://seclists.org/fulldisclosure/2025/Apr/14
https://access.redhat.com/security/cve/CVE-2022-0839
https://github.com/liquibase/liquibase
https://github.com/liquibase/liquibase/commit/33d9d925082097fb1a3d2fc8e44423d964cd9381
https://huntr.dev/bounties/f1ae5779-b406-4594-a8a3-d089c68d6e70
https://nvd.nist.gov/vuln/detail/CVE-2022-0839
https://www.cve.org/CVERecord?id=CVE-2022-0839
https://www.oracle.com/security-alerts/cpujul2022.html
|
| org.omnifaces:omnifaces |
CVE-2026-102695 |
HIGH |
2.7.1 |
1.14.3, 2.7.33, 3.14.23, 4.7.12, 5.4.2 |
https://github.com/omnifaces/omnifaces
https://github.com/omnifaces/omnifaces/commit/59d6c5188c39418546fe500d05036645987a77d1
https://github.com/omnifaces/omnifaces/commit/a52b92461cf39d983f51ce8724fe7e6b944073e4
https://github.com/omnifaces/omnifaces/commit/aa42da361821ddfbb85b126564e71587347d2786
https://github.com/omnifaces/omnifaces/commit/c43eef01174a4dc09cec44eff553ff6284150af7
https://github.com/omnifaces/omnifaces/commit/d5cae243c4692555efaa4ba774e0f8f60e3f4db5
https://github.com/omnifaces/omnifaces/releases/tag/1.14.3
https://github.com/omnifaces/omnifaces/releases/tag/2.7.33
https://github.com/omnifaces/omnifaces/releases/tag/3.14.23
https://github.com/omnifaces/omnifaces/releases/tag/4.7.12
https://github.com/omnifaces/omnifaces/releases/tag/5.4.2
https://github.com/omnifaces/omnifaces/security/advisories/GHSA-fp43-vj7g-pg92
|
| org.omnifaces:omnifaces |
CVE-2026-41883 |
HIGH |
2.7.1 |
1.14.2, 2.7.32, 3.14.16, 4.7.5, 5.2.3 |
https://github.com/omnifaces/omnifaces
https://github.com/omnifaces/omnifaces/security/advisories/GHSA-vp6r-9m58-5xv8
https://nvd.nist.gov/vuln/detail/CVE-2026-41883
|
| org.primefaces:primefaces |
CVE-2020-10544 |
MEDIUM |
7.0 |
8.0 |
https://github.com/primefaces/primefaces
https://github.com/primefaces/primefaces/commit/9982c4f7a83f75e3ab06168fa283e3d6128dfd1f
https://github.com/primefaces/primefaces/issues/5642
https://nvd.nist.gov/vuln/detail/CVE-2020-10544
|
| org.springframework:spring-beans |
CVE-2022-22965 |
CRITICAL |
4.0.9.RELEASE |
5.2.20.RELEASE, 5.3.18 |
http://packetstormsecurity.com/files/166713/Spring4Shell-Code-Execution.html
http://packetstormsecurity.com/files/167011/Spring4Shell-Spring-Framework-Class-Property-Remote-Code-Execution.html
https://access.redhat.com/security/cve/CVE-2022-22965
https://bugalert.org/content/notices/2022-03-30-spring.html
https://cert-portal.siemens.com/productcert/pdf/ssa-254054.pdf
https://github.com/spring-projects/spring-boot/releases/tag/v2.5.12
https://github.com/spring-projects/spring-boot/releases/tag/v2.6.6
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/002546b3e4b8d791ea6acccb81eb3168f51abb15
https://github.com/spring-projects/spring-framework/issues/28260
https://github.com/spring-projects/spring-framework/releases/tag/v5.2.20.RELEASE
https://github.com/spring-projects/spring-framework/releases/tag/v5.3.18
https://nvd.nist.gov/vuln/detail/CVE-2022-22965
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0005
https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement
https://tanzu.vmware.com/security/cve-2022-22965
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67
https://ubuntu.com/security/notices/USN-7165-1
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22965
https://www.cve.org/CVERecord?id=CVE-2022-22965
https://www.cyberkendra.com/2022/03/spring4shell-details-and-exploit-code.html
https://www.kb.cert.org/vuls/id/970766
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.praetorian.com/blog/spring-core-jdk9-rce/
|
| org.springframework:spring-beans |
CVE-2022-22970 |
HIGH |
4.0.9.RELEASE |
5.2.22.RELEASE, 5.3.20 |
https://access.redhat.com/security/cve/CVE-2022-22970
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/50177b1ad3485bd44239b1756f6c14607476fcf2
https://github.com/spring-projects/spring-framework/commit/83186b689f11f5e6efe7ccc08fdeb92f66fcd583
https://nvd.nist.gov/vuln/detail/CVE-2022-22970
https://security.netapp.com/advisory/ntap-20220616-0006
https://security.netapp.com/advisory/ntap-20220616-0006/
https://tanzu.vmware.com/security/cve-2022-22970
https://www.cve.org/CVERecord?id=CVE-2022-22970
https://www.oracle.com/security-alerts/cpujul2022.html
|
| org.springframework:spring-context |
CVE-2022-22968 |
HIGH |
4.0.9.RELEASE |
5.3.19, 5.2.21.RELEASE |
https://access.redhat.com/security/cve/CVE-2022-22968
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/833e750175349ab4fd502109a8b41af77e25cdea
https://github.com/spring-projects/spring-framework/commit/a7cf19cec5ebd270f97a194d749e2d5701ad2ab7
https://nvd.nist.gov/vuln/detail/CVE-2022-22968
https://security.netapp.com/advisory/ntap-20220602-0004
https://security.netapp.com/advisory/ntap-20220602-0004/
https://tanzu.vmware.com/security/cve-2022-22968
https://www.cve.org/CVERecord?id=CVE-2022-22968
https://www.oracle.com/security-alerts/cpujul2022.html
|
| org.springframework:spring-context |
CVE-2024-38820 |
MEDIUM |
4.0.9.RELEASE |
6.1.14 |
https://advisory.echohq.com/cve/CVE-2024-38820
https://github.com/advisories/GHSA-4gc7-5j7h-4qph
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/23656aebc6c7d0f9faff1080981eb4d55eff296c
https://github.com/spring-projects/spring-framework/commits/v6.2.0-RC2
https://nvd.nist.gov/vuln/detail/CVE-2024-38820
https://security.netapp.com/advisory/ntap-20241129-0003
https://security.netapp.com/advisory/ntap-20241129-0003/
https://spring.io/security/cve-2024-38820
|
| org.springframework:spring-context |
CVE-2025-22233 |
LOW |
4.0.9.RELEASE |
6.2.7, 6.1.20 |
https://advisory.echohq.com/cve/CVE-2025-22233
https://github.com/advisories/GHSA-4wp7-92pw-q264
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/edfcc6ffb188e4614ec9b212e3208b666981851c
https://github.com/spring-projects/spring-framework/commit/ee62701f5634e904e42e218baad142cea2bcd332
https://github.com/spring-projects/spring-framework/issues/34801
https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N&version=3.1
https://nvd.nist.gov/vuln/detail/CVE-2025-22233
https://spring.io/security/cve-2025-22233
|
| org.springframework:spring-core |
CVE-2025-41249 |
HIGH |
5.3.7 |
6.2.11 |
https://access.redhat.com/security/cve/CVE-2025-41249
https://advisory.echohq.com/cve/CVE-2025-41249
https://github.com/advisories/GHSA-jmp9-x22r-554x
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/6d710d482a6785b069e35022e81758953afc21ff
https://github.com/spring-projects/spring-framework/issues/35342
https://github.com/spring-projects/spring-framework/releases/tag/v6.2.11
https://nvd.nist.gov/vuln/detail/CVE-2025-41249
https://spring.io/security/cve-2025-41249
https://www.cve.org/CVERecord?id=CVE-2025-41249
|
| org.springframework:spring-core |
CVE-2021-22060 |
MEDIUM |
5.3.7 |
5.3.14, 5.2.19 |
https://access.redhat.com/security/cve/CVE-2021-22060
https://nvd.nist.gov/vuln/detail/CVE-2021-22060
https://tanzu.vmware.com/security/cve-2021-22060
https://www.cve.org/CVERecord?id=CVE-2021-22060
https://www.oracle.com/security-alerts/cpuapr2022.html
|
| org.springframework:spring-core |
CVE-2021-22096 |
MEDIUM |
5.3.7 |
5.3.11, 5.2.18 |
https://access.redhat.com/security/cve/CVE-2021-22096
https://github.com/spring-projects/spring-framework
https://nvd.nist.gov/vuln/detail/CVE-2021-22096
https://security.netapp.com/advisory/ntap-20211125-0005
https://security.netapp.com/advisory/ntap-20211125-0005/
https://tanzu.vmware.com/security/cve-2021-22096
https://www.cve.org/CVERecord?id=CVE-2021-22096
https://www.oracle.com/security-alerts/cpuapr2022.html
|
| org.springframework:spring-core |
CVE-2026-41848 |
LOW |
5.3.7 |
7.0.8, 6.2.19 |
https://access.redhat.com/security/cve/CVE-2026-41848
https://advisory.echohq.com/cve/CVE-2026-41848
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/12b44f2545a1bec6150c7a05e66092c732597a94
https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19
https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8
https://nvd.nist.gov/vuln/detail/CVE-2026-41848
https://spring.io/security/cve-2026-41848
https://www.cve.org/CVERecord?id=CVE-2026-41848
|
| org.springframework:spring-expression |
CVE-2023-20863 |
HIGH |
4.0.9.RELEASE |
6.0.8, 5.3.27, 5.2.24.RELEASE |
https://access.redhat.com/security/cve/CVE-2023-20863
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/965a6392757d20f9db19241126fcc719a51eac15
https://github.com/spring-projects/spring-framework/commit/b73f5fcac22555f844cf27a7eeb876cb9d7f7f7e
https://github.com/spring-projects/spring-framework/commit/ebc82654282bda547fbc20a9749ab1bda886a46f
https://nvd.nist.gov/vuln/detail/CVE-2023-20863
https://security.netapp.com/advisory/ntap-20240524-0015
https://security.netapp.com/advisory/ntap-20240524-0015/
https://spring.io/security/cve-2023-20863
https://www.cve.org/CVERecord?id=CVE-2023-20863
|
| org.springframework:spring-expression |
CVE-2026-41849 |
HIGH |
4.0.9.RELEASE |
|
https://access.redhat.com/security/cve/CVE-2026-41849
https://github.com/spring-projects/spring-framework
https://nvd.nist.gov/vuln/detail/CVE-2026-41849
https://spring.io/security/cve-2026-41849
https://www.cve.org/CVERecord?id=CVE-2026-41849
|
| org.springframework:spring-expression |
CVE-2026-41850 |
HIGH |
4.0.9.RELEASE |
7.0.8, 6.2.19 |
https://access.redhat.com/security/cve/CVE-2026-41850
https://advisory.echohq.com/cve/CVE-2026-41850
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19
https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8
https://nvd.nist.gov/vuln/detail/CVE-2026-41850
https://spring.io/security/cve-2026-41850
https://www.cve.org/CVERecord?id=CVE-2026-41850
|
| org.springframework:spring-expression |
CVE-2022-22950 |
MEDIUM |
4.0.9.RELEASE |
5.3.17, 5.2.20.RELEASE |
https://access.redhat.com/security/cve/CVE-2022-22950
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/83ac65915871067c39a4fb255e0d484c785c0c11
https://github.com/spring-projects/spring-framework/issues/28145
https://github.com/spring-projects/spring-framework/issues/28257
https://github.com/spring-projects/spring-framework/releases/tag/v5.2.20.RELEASE
https://github.com/spring-projects/spring-framework/releases/tag/v5.3.17
https://nvd.nist.gov/vuln/detail/CVE-2022-22950
https://tanzu.vmware.com/security/cve-2022-22950
https://www.cve.org/CVERecord?id=CVE-2022-22950
|
| org.springframework:spring-expression |
CVE-2023-20861 |
MEDIUM |
4.0.9.RELEASE |
6.0.7, 5.3.26, 5.2.23.RELEASE |
https://access.redhat.com/security/cve/CVE-2023-20861
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/430fc25acad2e85cbdddcd52b64481691f03ebd1
https://github.com/spring-projects/spring-framework/commit/52c93b1c4b24d70de233a958e60e7c5822bd274f
https://github.com/spring-projects/spring-framework/commit/935c29e3ddba5b19951e54f6685c70ed45d9cbe5
https://nvd.nist.gov/vuln/detail/CVE-2023-20861
https://security.netapp.com/advisory/ntap-20230420-0007
https://security.netapp.com/advisory/ntap-20230420-0007/
https://spring.io/blog/2023/03/20/spring-framework-6-0-7-and-5-3-26-fix-cve-2023-20860-and-cve-2023-20861
https://spring.io/security/cve-2023-20861
https://www.cve.org/CVERecord?id=CVE-2023-20861
|
| org.springframework:spring-expression |
CVE-2024-38808 |
MEDIUM |
4.0.9.RELEASE |
5.3.39 |
https://access.redhat.com/security/cve/CVE-2024-38808
https://advisory.echohq.com/cve/CVE-2024-38808
https://github.com/advisories/GHSA-9cmq-m9j5-mvww
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/26f2dad388499faecf99e75b8856788e95d8d658
https://github.com/spring-projects/spring-framework/commit/f44d13cb7816e586b86c02421af4f5498391111c
https://nvd.nist.gov/vuln/detail/CVE-2024-38808
https://security.netapp.com/advisory/ntap-20240920-0002
https://security.netapp.com/advisory/ntap-20240920-0002/
https://spring.io/security/cve-2024-38808
https://www.cve.org/CVERecord?id=CVE-2024-38808
|
| org.springframework:spring-expression |
CVE-2026-41851 |
MEDIUM |
4.0.9.RELEASE |
7.0.8, 6.2.19 |
https://access.redhat.com/security/cve/CVE-2026-41851
https://advisory.echohq.com/cve/CVE-2026-41851
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/2c18c33ce0f89bf718c184190cfb7ed49b4276fb
https://github.com/spring-projects/spring-framework/commit/76a36dfd707cddbe7118a81c2e055b36501d2cff
https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19
https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8
https://nvd.nist.gov/vuln/detail/CVE-2026-41851
https://spring.io/security/cve-2026-41851
https://www.cve.org/CVERecord?id=CVE-2026-41851
|
| org.springframework:spring-expression |
CVE-2026-41852 |
LOW |
4.0.9.RELEASE |
7.0.8, 6.2.19 |
https://access.redhat.com/security/cve/CVE-2026-41852
https://advisory.echohq.com/cve/CVE-2026-41852
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19
https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8
https://nvd.nist.gov/vuln/detail/CVE-2026-41852
https://spring.io/security/cve-2026-41852
https://www.cve.org/CVERecord?id=CVE-2026-41852
|
| org.yaml:snakeyaml |
CVE-2022-1471 |
HIGH |
1.26 |
2.0 |
http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html
http://www.openwall.com/lists/oss-security/2023/11/19/1
https://access.redhat.com/errata/RHSA-2022:9058
https://access.redhat.com/security/cve/CVE-2022-1471
https://advisory.echohq.com/cve/CVE-2022-1471
https://bitbucket.org/snakeyaml/snakeyaml
https://bitbucket.org/snakeyaml/snakeyaml/commits/5014df1a36f50aca54405bb8433bc99a8847f758
https://bitbucket.org/snakeyaml/snakeyaml/commits/acc44099f5f4af26ff86b4e4e4cc1c874e2dc5c4
https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479
https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64634374
https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64876314
https://bitbucket.org/snakeyaml/snakeyaml/wiki/CVE-2022-1471
https://bugzilla.redhat.com/2150009
https://bugzilla.redhat.com/show_bug.cgi?id=2150009
https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1471
https://errata.almalinux.org/8/ALSA-2022-9058.html
https://errata.rockylinux.org/RLSA-2022:9058
https://github.com/advisories/GHSA-mjmj-j48q-9wg2
https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2
https://github.com/mbechler/marshalsec
https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc
https://infosecwriteups.com/%EF%B8%8F-inside-the-160-comment-fight-to-fix-snakeyamls-rce-default-1a20c5ca4d4c
https://linux.oracle.com/cve/CVE-2022-1471.html
https://linux.oracle.com/errata/ELSA-2022-9058-1.html
https://nvd.nist.gov/vuln/detail/CVE-2022-1471
https://security.netapp.com/advisory/ntap-20230818-0015
https://security.netapp.com/advisory/ntap-20230818-0015/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://snyk.io/blog/unsafe-deserialization-snakeyaml-java-cve-2022-1471
https://www.cve.org/CVERecord?id=CVE-2022-1471
https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true
|
| org.yaml:snakeyaml |
CVE-2022-25857 |
HIGH |
1.26 |
1.31 |
https://access.redhat.com/errata/RHSA-2022:6820
https://access.redhat.com/security/cve/CVE-2022-25857
https://advisory.echohq.com/cve/CVE-2022-25857
https://bitbucket.org/snakeyaml/snakeyaml/commits/fc300780da21f4bb92c148bc90257201220cf174
https://bitbucket.org/snakeyaml/snakeyaml/issues/525
https://bugzilla.redhat.com/2126789
https://bugzilla.redhat.com/show_bug.cgi?id=2126789
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25857
https://errata.almalinux.org/8/ALSA-2022-6820.html
https://errata.rockylinux.org/RLSA-2022:6820
https://github.com/advisories/GHSA-3mc7-4q67-w48m
https://github.com/snakeyaml/snakeyaml
https://github.com/snakeyaml/snakeyaml/commit/fc300780da21f4bb92c148bc90257201220cf174
https://linux.oracle.com/cve/CVE-2022-25857.html
https://linux.oracle.com/errata/ELSA-2022-6820.html
https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html
https://nvd.nist.gov/vuln/detail/CVE-2022-25857
https://security.netapp.com/advisory/ntap-20240315-0010
https://security.netapp.com/advisory/ntap-20240315-0010/
https://security.snyk.io/vuln/SNYK-JAVA-ORGYAML-2806360
https://ubuntu.com/security/notices/USN-5944-1
https://www.cve.org/CVERecord?id=CVE-2022-25857
|
| org.yaml:snakeyaml |
CVE-2022-38749 |
MEDIUM |
1.26 |
1.31 |
https://access.redhat.com/security/cve/CVE-2022-38749
https://advisory.echohq.com/cve/CVE-2022-38749
https://arxiv.org/pdf/2306.05534.pdf
https://bitbucket.org/snakeyaml/snakeyaml
https://bitbucket.org/snakeyaml/snakeyaml/issues/525/got-stackoverflowerror-for-many-open
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47024
https://github.com/advisories/GHSA-c4r9-r8fh-9vj2
https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html
https://nvd.nist.gov/vuln/detail/CVE-2022-38749
https://security.gentoo.org/glsa/202305-28
https://security.netapp.com/advisory/ntap-20240315-0010
https://security.netapp.com/advisory/ntap-20240315-0010/
https://ubuntu.com/security/notices/USN-5944-1
https://www.cve.org/CVERecord?id=CVE-2022-38749
|
| org.yaml:snakeyaml |
CVE-2022-38750 |
MEDIUM |
1.26 |
1.31 |
https://access.redhat.com/security/cve/CVE-2022-38750
https://advisory.echohq.com/cve/CVE-2022-38750
https://bitbucket.org/snakeyaml/snakeyaml
https://bitbucket.org/snakeyaml/snakeyaml/issues/526/stackoverflow-oss-fuzz-47027
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47027
https://github.com/advisories/GHSA-hhhw-99gj-p3c3
https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html
https://nvd.nist.gov/vuln/detail/CVE-2022-38750
https://security.gentoo.org/glsa/202305-28
https://security.netapp.com/advisory/ntap-20240315-0010
https://security.netapp.com/advisory/ntap-20240315-0010/
https://ubuntu.com/security/notices/USN-5944-1
https://www.cve.org/CVERecord?id=CVE-2022-38750
|
| org.yaml:snakeyaml |
CVE-2022-38751 |
MEDIUM |
1.26 |
1.31 |
https://access.redhat.com/security/cve/CVE-2022-38751
https://advisory.echohq.com/cve/CVE-2022-38751
https://bitbucket.org/snakeyaml/snakeyaml
https://bitbucket.org/snakeyaml/snakeyaml/issues/530/stackoverflow-oss-fuzz-47039
https://bitbucket.org/snakeyaml/snakeyaml/src/master/src/test/java/org/yaml/snakeyaml/issues/issue530/Fuzzy47039Test.java
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47039
https://github.com/advisories/GHSA-98wm-3w3q-mw94
https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html
https://nvd.nist.gov/vuln/detail/CVE-2022-38751
https://security.gentoo.org/glsa/202305-28
https://security.netapp.com/advisory/ntap-20240315-0010
https://security.netapp.com/advisory/ntap-20240315-0010/
https://ubuntu.com/security/notices/USN-5944-1
https://www.cve.org/CVERecord?id=CVE-2022-38751
|
| org.yaml:snakeyaml |
CVE-2022-38752 |
MEDIUM |
1.26 |
1.32 |
https://access.redhat.com/security/cve/CVE-2022-38752
https://advisory.echohq.com/cve/CVE-2022-38752
https://bitbucket.org/snakeyaml/snakeyaml
https://bitbucket.org/snakeyaml/snakeyaml/issues/531/stackoverflow-oss-fuzz-47081
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47081
https://github.com/advisories/GHSA-9w3m-gqgf-c4p9
https://nvd.nist.gov/vuln/detail/CVE-2022-38752
https://security.gentoo.org/glsa/202305-28
https://security.netapp.com/advisory/ntap-20240315-0009
https://security.netapp.com/advisory/ntap-20240315-0009/
https://www.cve.org/CVERecord?id=CVE-2022-38752
|
| org.yaml:snakeyaml |
CVE-2022-41854 |
MEDIUM |
1.26 |
1.32 |
https://access.redhat.com/security/cve/CVE-2022-41854
https://advisory.echohq.com/cve/CVE-2022-41854
https://bitbucket.org/snakeyaml/snakeyaml
https://bitbucket.org/snakeyaml/snakeyaml/commits/e230a1758842beec93d28eddfde568c21774780a
https://bitbucket.org/snakeyaml/snakeyaml/issues/531
https://bitbucket.org/snakeyaml/snakeyaml/issues/543/stackoverflow-oss-fuzz-50355
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50355
https://github.com/advisories/GHSA-w37g-rhq8-7m4j
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3DDXEXXWAZGF5AVHIPGFPXIWL6TSMKJE
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3DDXEXXWAZGF5AVHIPGFPXIWL6TSMKJE/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MKE4XWRXTH32757H7QJU4ACS67DYDCR
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MKE4XWRXTH32757H7QJU4ACS67DYDCR/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSPAJ5Y45A4ZDION2KN5RDWLHK4XKY2J
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSPAJ5Y45A4ZDION2KN5RDWLHK4XKY2J/
https://nvd.nist.gov/vuln/detail/CVE-2022-41854
https://security.netapp.com/advisory/ntap-20240315-0009
https://security.netapp.com/advisory/ntap-20240315-0009/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://www.cve.org/CVERecord?id=CVE-2022-41854
|
| No Misconfigurations found |
|---|