| jsoup XmlTreeBuilder vulnerable to memory exhaustion through deeply nested namespace declarationsCVE-2026-75140 · GHSA-65R4-943X-97JJ |
org.jsoup:jsoupExploit Intelligence/exploit-intelligence/agent-client-rhel9 |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Incomplete fix for Apache Log4j vulnerabilityCVE-2021-45046 · GHSA-7RJR-3Q55-VV33 |
org.apache.logging.log4j:log4j-coreorg.ops4j.pax.logging:pax-logging-log4j2 |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| jackson-core: UTF8DataInputJsonParser._reportInvalidToken() missing maxErrorTokenLength limit -> unbounded StringBuilder growth (DoS)CVE-2026-89425 · GHSA-7HHH-6RMP-J9QF |
com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind: Duration XMLGregorianCalendar Unbounded Number Parse DoSCVE-2026-68497 · GHSA-Q4XH-88C3-WMH7 |
com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| JLine: ReDoS in Nano Editor Regex Search ModeCVE-2026-77421 · GHSA-PH9C-7HW9-VHHW |
org.jline:jline-builtinsRed Hat AMQ Broker 7/jline-builtins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| JLine: ReDoS in Built-in grep Command Amplified by Automatic `.*` WrappingCVE-2026-77422 · GHSA-R2XF-8XR9-62GW |
org.jline:jline-builtinsRed Hat Fuse 7/jline |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| JLine: ReDoS via `HISTORY_IGNORE` Configuration VariableCVE-2026-77420 · GHSA-5Q95-HRPC-M3W3 |
org.jline:jline-readerRed Hat AMQ Broker 7/jline-reader |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Denial of Service due to parser crashCVE-2022-40152 · GHSA-3F7H-MF4Q-VRM4 |
com.fasterxml.woodstox:woodstox-coreMigration Toolkit for Runtimes/xstream |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Sqlite-jdbc vulnerable to remote code execution when JDBC url is attacker controlledCVE-2023-32697 · GHSA-6PHF-6H5G-97J2 |
org.xerial:sqlite-jdbcRed Hat OpenStack Platform 13 (Queens)/opendaylight |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNodeCVE-2021-46877 · GHSA-3X8X-79M2-3W2W |
com.fasterxml.jackson.core:jackson-databindCryostat 2/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Uncontrolled Resource Consumption in Jackson-databindCVE-2022-42003 · GHSA-JJJH-JJXP-WPFF |
com.fasterxml.jackson.core:jackson-databindRed Hat Enterprise Linux 8/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Apache Commons Net vulnerable to information leakage via malicious serverCVE-2021-37533 · GHSA-CGP8-4M63-FHH5 |
commons-net:commons-netMigration Toolkit for Applications 6/io.netty-netty-tcnative-parent |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Uncontrolled Resource Consumption in FasterXML jackson-databindCVE-2022-42004 · GHSA-RGV9-Q543-RQG4 |
com.fasterxml.jackson.core:jackson-databindRed Hat Enterprise Linux 8/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Jetty invalid URI parsing may produce invalid HttpURI.authorityCVE-2022-2047 · GHSA-CJ7V-27PG-WF7Q |
org.eclipse.jetty:jetty-httpOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
کم
|
اصلاح گزارش شده |
|
| XNIO `notifyReadClosed` method logging message to unexpected endCVE-2022-0084 · GHSA-76FG-MHRG-FMMG |
org.jboss.xnio:xnio-allRed Hat Integration Camel K 1/xnio |
MavenRed Hat |
زیاد
|
اصلاح اعلام نشده |
|
| Loop with Unreachable Exit Condition in Apache ThriftCVE-2019-0205 · GHSA-RJ7P-RFGP-852X |
org.apache.thrift:libthriftOpenShift Service Mesh 1/jaeger |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Apache Thrift Go Library Command InjectionCVE-2016-5397 · GHSA-R4M4-PMVW-M6J5 |
github.com/apache/thriftRed Hat JBoss Fuse Integration Service 2/libthrift |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Encoded URIs can access WEB-INF directory in Eclipse JettyCVE-2021-34429 · GHSA-VJV5-GP2W-65VM |
org.eclipse.jetty:jetty-webappRed Hat Enterprise Linux 7/jetty |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Uncaught Exception in jsoupCVE-2021-37714 · GHSA-M72M-MHQ2-9P6C |
org.jsoup:jsoupRed Hat BPM Suite 6/jsoup |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Jetty Utility Servlets ConcatServlet Double Decoding Information Disclosure VulnerabilityCVE-2021-28169 · GHSA-GWCR-J4WH-J3CQ |
org.eclipse.jetty:jetty-servletsRed Hat Enterprise Linux 7/jetty |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
