All products

Red Hat OpenShift Container Platform 3.11/openshift3/metrics-hawkular-metrics

Red Hat · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Snakeyaml vulnerable to Stack overflow leading to denial of serviceCVE-2022-41854 · GHSA-W37G-RHQ8-7M4J org.yaml:snakeyamlA-MQ Clients 2/dev-java-snakeyaml MavenRed Hat Medium Fix reported
Okio Signed to Unsigned Conversion Error vulnerabilityCVE-2023-3635 · GHSA-W33C-445M-F8W7 com.squareup.okio:okio-jvmcom.squareup.okio:okio MavenRed Hat Medium Fix reported
SnakeYaml Constructor Deserialization Remote Code ExecutionCVE-2022-1471 · GHSA-MJMJ-J48Q-9WG2 org.yaml:snakeyamlA-MQ Clients 2/snakeyaml MavenRed Hat High Fix reported
Uncontrolled Resource Consumption in snakeyamlCVE-2022-25857 · GHSA-3MC7-4Q67-W48M org.yaml:snakeyamlA-MQ Clients 2/snakeyaml MavenRed Hat High Fix reported
snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds WriteCVE-2022-38751 · GHSA-98WM-3W3Q-MW94 org.yaml:snakeyamlOpenShift Developer Tools and Services/jenkins-2-plugins MavenRed Hat Medium Fix reported
snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds WriteCVE-2022-38750 · GHSA-HHHW-99GJ-P3C3 org.yaml:snakeyamlOpenShift Developer Tools and Services/jenkins-2-plugins MavenRed Hat Medium Fix reported
snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds WriteCVE-2022-38749 · GHSA-C4R9-R8FH-9VJ2 be.cylab:snakeyamlcom.alipay.sofa.acts:acts-common-util MavenRed Hat Medium Fix reported
snakeYAML before 1.32 vulnerable to Denial of Service due to Out-of-bounds WriteCVE-2022-38752 · GHSA-9W3M-GQGF-C4P9 org.yaml:snakeyamlOpenShift Developer Tools and Services/jenkins-2-plugins MavenRed Hat Medium Fix reported
Arbitrary code execution in H2 ConsoleCVE-2022-23221 · GHSA-45HX-WFHJ-473X com.h2database:h2Red Hat BPM Suite 6/h2 MavenRed Hat Critical Fix reported
Apache Cassandra vulnerable to Code Injection due to unsafe configurationCVE-2021-44521 · GHSA-8FFC-79XG-29W8 org.apache.cassandra:cassandra-allRed Hat Fuse 7/cassandra MavenRed Hat Critical Fix reported