| Apache MINA SSHD: integrity check bypassCVE-2024-41909 · GHSA-2326-HX7G-3M9R |
org.apache.sshd:sshd-commonA-MQ Clients 2/sshd-common |
MavenRed Hat |
High
|
Fix reported |
|
| Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object treeCVE-2024-29133 · GHSA-9W38-P64V-XPMV |
org.apache.commons:commons-configuration2A-MQ Clients 2/commons-configuration2 |
MavenRed Hat |
Medium
|
Fix reported |
|
| Snakeyaml vulnerable to Stack overflow leading to denial of serviceCVE-2022-41854 · GHSA-W37G-RHQ8-7M4J |
org.yaml:snakeyamlA-MQ Clients 2/dev-java-snakeyaml |
MavenRed Hat |
Medium
|
Fix reported |
|
| Jettison parser crash by stackoverflowCVE-2022-40149 · GHSA-56H3-78GP-V83R |
org.codehaus.jettison:jettisonLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 |
MavenRed Hat |
Medium
|
Fix reported |
|
| json-path Out-of-bounds Write vulnerabilityCVE-2023-51074 · GHSA-PFH2-HFMQ-PHG5 |
com.jayway.jsonpath:json-pathOpenShift Developer Tools and Services/jenkins-2-plugins |
MavenRed Hat |
Medium
|
Fix reported |
|
| jose4j uses weak cryptographic algorithmCVE-2023-31582 · GHSA-7G24-QG88-P43Q |
org.bitbucket.b_c:jose4jOpenShift Serverless/jose4j |
MavenRed Hat |
High
|
Fix reported |
|
| Jettison vulnerable to infinite recursionCVE-2023-1436 · GHSA-Q6G2-G7F3-RR83 |
org.codehaus.jettison:jettisonLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 |
MavenRed Hat |
High
|
Fix reported |
|
| jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNodeCVE-2021-46877 · GHSA-3X8X-79M2-3W2W |
com.fasterxml.jackson.core:jackson-databindCryostat 2/jackson-databind |
MavenRed Hat |
High
|
Fix reported |
|
| json-smart Uncontrolled Recursion vulnerabilityCVE-2023-1370 · GHSA-493P-PFQ6-5258 |
net.minidev:json-smartA-MQ Clients 2/json-smart |
MavenRed Hat |
High
|
Fix reported |
|
| SnakeYaml Constructor Deserialization Remote Code ExecutionCVE-2022-1471 · GHSA-MJMJ-J48Q-9WG2 |
org.yaml:snakeyamlA-MQ Clients 2/snakeyaml |
MavenRed Hat |
High
|
Fix reported |
|
| Uncontrolled Resource Consumption in Jackson-databindCVE-2022-42003 · GHSA-JJJH-JJXP-WPFF |
com.fasterxml.jackson.core:jackson-databindRed Hat Enterprise Linux 8/jackson-databind |
MavenRed Hat |
High
|
Fix reported |
|
| Jettison Out-of-bounds Write vulnerabilityCVE-2022-45685 · GHSA-7RF3-MQPX-H7XG |
org.codehaus.jettison:jettisonOpenShift Developer Tools and Services/jenkins-2-plugins |
MavenRed Hat |
High
|
Fix reported |
|
| Jettison Out-of-bounds Write vulnerabilityCVE-2022-45693 · GHSA-GRR4-WV38-F68W |
org.codehaus.jettison:jettisonMigration Toolkit for Runtimes/org.keycloak-keycloak-parent |
MavenRed Hat |
High
|
Fix reported |
|
| Jettison memory exhaustionCVE-2022-40150 · GHSA-X27M-9W8J-5VCW |
org.codehaus.jettison:jettisonLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 |
MavenRed Hat |
High
|
Fix reported |
|
| Uncontrolled Resource Consumption in FasterXML jackson-databindCVE-2022-42004 · GHSA-RGV9-Q543-RQG4 |
com.fasterxml.jackson.core:jackson-databindRed Hat Enterprise Linux 8/jackson-databind |
MavenRed Hat |
High
|
Fix reported |
|
| Uncontrolled Resource Consumption in snakeyamlCVE-2022-25857 · GHSA-3MC7-4Q67-W48M |
org.yaml:snakeyamlA-MQ Clients 2/snakeyaml |
MavenRed Hat |
High
|
Fix reported |
|
| Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()CVE-2024-29131 · GHSA-XJP4-HW94-MVP5 |
org.apache.commons:commons-configuration2A-MQ Clients 2/commons-configuration2 |
MavenRed Hat |
Medium
|
Fix reported |
|
| Jenkins Script Security Plugin has sandbox bypass vulnerability involving crafted constructor bodiesCVE-2024-34144 · GHSA-V63G-V339-2673 |
org.jenkins-ci.plugins:script-securityRed Hat OpenShift Container Platform 3.11/jenkins-2-plugins |
MavenRed Hat |
High
|
Fix reported |
|
| Jenkins Script Security Plugin sandbox bypass vulnerabilityCVE-2024-34145 · GHSA-2G4Q-9VM9-9FW4 |
org.jenkins-ci.plugins:script-securityRed Hat OpenShift Container Platform 3.11/jenkins-2-plugins |
MavenRed Hat |
High
|
Fix reported |
|
| Exposure of secrets through system log in Jenkins Structs PluginCVE-2024-39458 · GHSA-XFX3-CR74-X3CV |
org.jenkins-ci.plugins:structsOpenShift Developer Tools and Services/jenkins-2-plugins |
MavenRed Hat |
Low
|
Fix reported |
|
