Security
فارسی
All products

Red Hat Software Collections/rh-maven36-byte-buddy

Red Hat · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Snakeyaml vulnerable to Stack overflow leading to denial of serviceCVE-2022-41854 · GHSA-W37G-RHQ8-7M4J org.yaml:snakeyamlA-MQ Clients 2/dev-java-snakeyaml MavenRed Hat Medium Fix reported
snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds WriteCVE-2022-38751 · GHSA-98WM-3W3Q-MW94 org.yaml:snakeyamlOpenShift Developer Tools and Services/jenkins-2-plugins MavenRed Hat Medium Fix reported
snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds WriteCVE-2022-38750 · GHSA-HHHW-99GJ-P3C3 org.yaml:snakeyamlOpenShift Developer Tools and Services/jenkins-2-plugins MavenRed Hat Medium Fix reported
snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds WriteCVE-2022-38749 · GHSA-C4R9-R8FH-9VJ2 be.cylab:snakeyamlcom.alipay.sofa.acts:acts-common-util MavenRed Hat Medium Fix reported
snakeYAML before 1.32 vulnerable to Denial of Service due to Out-of-bounds WriteCVE-2022-38752 · GHSA-9W3M-GQGF-C4P9 org.yaml:snakeyamlOpenShift Developer Tools and Services/jenkins-2-plugins MavenRed Hat Medium Fix reported
codehaus-plexus vulnerable to XML injectionCVE-2022-4245 · GHSA-JCWR-X25H-X5FH org.codehaus.plexus:plexus-utilsA-MQ Clients 2/codehaus-plexus MavenRed Hat Medium Fix reported
plexus-codehaus vulnerable to directory traversalCVE-2022-4244 · GHSA-G6PH-X5WF-G337 org.codehaus.plexus:plexus-utilsRed Hat Data Grid 8/codehaus-plexus MavenRed Hat High Fix reported
gradle: Arbitrary code execution via specially crafted environment variablesCVE-2021-32751 Red Hat JBoss Enterprise Application Platform 6/gradleRed Hat Software Collections/rh-maven36-byte-buddy Red Hat Medium No fix reported
gradle: Dependency verification can ignore checksum verification when signature verification cannot be performedCVE-2022-31156 Red Hat JBoss Enterprise Application Platform 6/gradleRed Hat Software Collections/rh-maven36-byte-buddy Red Hat Low No fix reported
gradle: path traversal while handling of tar archivesCVE-2023-35947 Red Hat JBoss Enterprise Application Platform 6/gradleRed Hat Software Collections/rh-maven36-byte-buddy Red Hat Medium No fix reported
gradle: Dependency cache path traversalCVE-2023-35946 Red Hat JBoss Enterprise Application Platform 6/gradleRed Hat Software Collections/rh-maven36-byte-buddy Red Hat Medium No fix reported
gradle: Incorrect permission assignment for symlinked files used in copy or archiving operationsCVE-2023-44387 Red Hat Integration Camel K 1/gradleRed Hat JBoss Enterprise Application Platform 6/gradle Red Hat Low No fix reported
gradle: Possible local text file exfiltration by XML External entity injectionCVE-2023-42445 Red Hat Integration Camel K 1/gradleRed Hat JBoss Enterprise Application Platform 6/gradle Red Hat Medium No fix reported