All products

Migration Toolkit for Runtimes/xstream

Red Hat · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Denial of Service due to parser crashCVE-2022-40152 · GHSA-3F7H-MF4Q-VRM4 com.fasterxml.woodstox:woodstox-coreMigration Toolkit for Runtimes/xstream MavenRed Hat Medium Fix reported
XStream can cause a Denial of Service by injecting deeply nested objects raising a stack overflowCVE-2022-40151 · GHSA-F8CC-G7J8-XXPM com.thoughtworks.xstream:xstreamMigration Toolkit for Runtimes/xstream MavenRed Hat High Fix reported