| Okio Signed to Unsigned Conversion Error vulnerabilityCVE-2023-3635 · GHSA-W33C-445M-F8W7 |
com.squareup.okio:okio-jvmcom.squareup.okio:okio |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Exposure of Sensitive Information to an Unauthorized Actor in Apache SantuarioCVE-2021-40690 · GHSA-J8WC-GXX9-82HX |
org.apache.santuario:xmlsecLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Local Information Disclosure Vulnerability in Netty on Unix-Like systemsCVE-2021-21290 · GHSA-5MCR-GQ6C-3HQ2 |
io.netty:netty-codec-httpio.netty:netty |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Cross-site scripting in Apache HttpClientCVE-2020-13956 · GHSA-7R82-7XV7-XCPJ |
org.apache.httpcomponents:httpclientRed Hat BPM Suite 6/httpclient |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Possible request smuggling in HTTP/2 due missing validation of content-lengthCVE-2021-21409 · GHSA-F256-J965-7F32 |
io.netty:netty-codec-http2io.netty:netty |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| HTTP request smuggling in nettyCVE-2021-43797 · GHSA-WX5J-54MM-RQQQ |
io.netty:netty-codec-httpio.netty:netty |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Polymorphic Typing issue in FasterXML jackson-databindCVE-2019-14540 · GHSA-H822-R4R5-V8JG |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Polymorphic deserialization of malicious object in jackson-databindCVE-2019-14893 · GHSA-QMQC-X3R4-6V39 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| XML External Entity (XXE) Injection in Jackson DatabindCVE-2020-25649 · GHSA-288C-CQ4H-88GQ |
com.fasterxml.jackson.core:jackson-databindA-MQ Clients 2/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10672 · GHSA-95CM-88F5-F2C7 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Deserialization of untrusted data in Jackson DatabindCVE-2020-14195 · GHSA-MC6H-4QGP-37QH |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Deserialization of untrusted data in Jackson DatabindCVE-2020-14062 · GHSA-C265-37VJ-CWCC |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11111 · GHSA-V3XW-C963-F5HC |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11620 · GHSA-H4RC-386G-6M85 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11112 · GHSA-58PP-9C76-5625 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Deserialization of untrusted data in Jackson DatabindCVE-2020-14060 · GHSA-J823-4QCH-3RGM |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11113 · GHSA-9VVP-FXW6-JCXR |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Deserialization of untrusted data in Jackson DatabindCVE-2020-14061 · GHSA-C2Q3-4QRH-FM48 |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-9546 · GHSA-5P34-5M6P-P58G |
com.fasterxml.jackson.core:jackson-databindRed Hat JBoss A-MQ 6/jackson-databind |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| jackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10968 · GHSA-RF6R-2C4Q-2VWG |
com.fasterxml.jackson.core:jackson-databindRed Hat Enterprise Linux 8/pki-deps:10.6/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
