| Snakeyaml vulnerable to Stack overflow leading to denial of serviceCVE-2022-41854 · GHSA-W37G-RHQ8-7M4J |
org.yaml:snakeyamlA-MQ Clients 2/dev-java-snakeyaml |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jettison parser crash by stackoverflowCVE-2022-40149 · GHSA-56H3-78GP-V83R |
org.codehaus.jettison:jettisonLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Guava vulnerable to insecure use of temporary directoryCVE-2023-2976 · GHSA-7G45-4RM6-3MM3 |
com.google.guava:guavaMigration Toolkit for Runtimes/org.jboss.windup-windup-parent |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jettison vulnerable to infinite recursionCVE-2023-1436 · GHSA-Q6G2-G7F3-RR83 |
org.codehaus.jettison:jettisonLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNodeCVE-2021-46877 · GHSA-3X8X-79M2-3W2W |
com.fasterxml.jackson.core:jackson-databindCryostat 2/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Uncontrolled Resource Consumption in Jackson-databindCVE-2022-42003 · GHSA-JJJH-JJXP-WPFF |
com.fasterxml.jackson.core:jackson-databindRed Hat Enterprise Linux 8/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Apache Commons Net vulnerable to information leakage via malicious serverCVE-2021-37533 · GHSA-CGP8-4M63-FHH5 |
commons-net:commons-netMigration Toolkit for Applications 6/io.netty-netty-tcnative-parent |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jettison Out-of-bounds Write vulnerabilityCVE-2022-45693 · GHSA-GRR4-WV38-F68W |
org.codehaus.jettison:jettisonMigration Toolkit for Runtimes/org.keycloak-keycloak-parent |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Jettison memory exhaustionCVE-2022-40150 · GHSA-X27M-9W8J-5VCW |
org.codehaus.jettison:jettisonLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Uncontrolled Resource Consumption in FasterXML jackson-databindCVE-2022-42004 · GHSA-RGV9-Q543-RQG4 |
com.fasterxml.jackson.core:jackson-databindRed Hat Enterprise Linux 8/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Improper Check for Unusual or Exceptional Conditions in json-smartCVE-2021-27568 · GHSA-V528-7HRM-FRQP |
net.minidev:json-smart-mininet.minidev:json-smart |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| fabric8 kubernetes-client vulnerable CVE-2021-4178 · GHSA-98G7-RXMF-RRXM |
io.fabric8:kubernetes-clientRed Hat Decision Manager 7/kubernetes-client |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Deserialization of Untrusted Data in GsonCVE-2022-25647 · GHSA-4JRV-PPP4-JM57 |
com.google.code.gson:gsonLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Square OkHttp can accept the wrong certificateCVE-2021-0341 · GHSA-3CQM-MF7H-PRRJ |
com.squareup.okhttp3:okhttpRed Hat Decision Manager 7/okhttp |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Jenkins Credentials Binding Plugin Stores Passwords in a Recoverable FormatCVE-2019-1010241 · GHSA-J7GW-MWFG-VQF4 |
org.jenkins-ci.plugins:credentials-bindingRed Hat OpenShift Container Platform 3.10/jenkins-plugin-credentials |
MavenRed Hat |
متوسط
|
اصلاح اعلام نشده |
|
| Jenkins Config File Provider Plugin improper credential masking vulnerabilityCVE-2023-40339 · GHSA-PV2G-VM98-VJXF |
org.jenkins-ci.plugins:config-file-providerRed Hat OpenShift Container Platform 3.11/jenkins-2-plugins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Exposure of system-scoped credentials in Jenkins Dimensions PluginCVE-2023-32262 · GHSA-PX39-5H8C-J3C8 |
org.jenkins-ci.plugins:dimensionsscmOpenShift Developer Tools and Services/jenkins-2-plugins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Missing permission check in Jenkins Dimensions Plugin allows enumerating credentials IDsCVE-2023-32261 · GHSA-27PR-R7HM-C2RC |
org.jenkins-ci.plugins:dimensionsscmOpenShift Developer Tools and Services/jenkins-2-plugins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Incorrect Permission Assignment for Critical Resource in Jenkins Credentials Binding PluginCVE-2022-20616 · GHSA-GQM2-2GCX-P88W |
org.jenkins-ci.plugins:credentials-bindingRed Hat OpenShift Container Platform 3.11/jenkins-2-plugins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| google-oauth-java-client improperly verifies cryptographic signatureCVE-2021-22573 · GHSA-HW42-3568-WJ87 |
com.google.oauth-client:google-oauth-clientLogging Subsystem for Red Hat OpenShift/google-oauth-client |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
