org.hibernate:hibernate-infinispan (4.0.0.final), org.infinispan:infinispan-cachestore-bdbje (5.1.0.cr1) +21 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (5.1.0.cr1)

org.infinispan:infinispan-core MAVEN version 5.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.hibernate:hibernate-infinispan 4.0.0.final - org.infinispan:infinispan-cachestore-bdbje...

com.coherentlogic.coherent.data-model:data-adapter-application (>=1.0.24-release, <=1.0.26-release), com.coherentlogic.coherent.data-model:data-adapter-core (>=1.0.24-release, <=1.0.26-release) +97 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (8.2.4.final)

org.infinispan:infinispan-core MAVEN version 8.2.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - com.coherentlogic.coherent.data-model:data-adapter-application =1.0.24-release,...

org.infinispan:infinispan-cachestore-bdbje (5.1.5.cr1), org.infinispan:infinispan-cachestore-cassandra (5.1.5.cr1) +19 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (5.1.5.cr1)

org.infinispan:infinispan-core MAVEN version 5.1.5.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan:infinispan-cachestore-bdbje 5.1.5.cr1 -...

org.infinispan:infinispan-cachestore-bdbje (5.1.0.alpha1), org.infinispan:infinispan-cachestore-cassandra (5.1.0.alpha1) +18 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (5.1.0.alpha1)

org.infinispan:infinispan-core MAVEN version 5.1.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.infinispan:infinispan-cachestore-bdbje 5.1.0.alpha1 -...

org.entando.entando.plugins:entando-plugin-jpinfinispan (5.1.0), org.hibernate.ogm:hibernate-ogm-infinispan (5.0.0.beta1) +35 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (8.0.2.final)

org.infinispan:infinispan-core MAVEN version 8.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.entando.entando.plugins:entando-plugin-jpinfinispan 5.1.0 -...

io.github.martinhickson:picketbox-infinispan (5.0.3.jakarta.bravura.1), io.thorntail:infinispan (>=2.0.0.final, <=2.2.1.final) +79 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (8.2.8.final)

org.infinispan:infinispan-core MAVEN version 8.2.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - io.github.martinhickson:picketbox-infinispan 5.0.3.jakarta.bravura.1 - io.thorntail:infinispa...

org.hibernate:hibernate-search-infinispan (>=4.3.0.alpha1, <=4.3.0.final), org.hibernate:hibernate-search-modules (>=4.3.0.alpha1, <=4.3.0.final) +36 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (5.2.5.final)

org.infinispan:infinispan-core MAVEN version 5.2.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.hibernate:hibernate-search-infinispan =4.3.0.alpha1, =4.3.0.alpha1, =4.3.0.final -...

org.commonjava.aprox.wars:aprox-basic (>=0.4, <=0.5), org.commonjava.aprox.wars:aprox-rest-min (>=0.4, <=0.5) +31 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (5.1.7.final)

org.infinispan:infinispan-core MAVEN version 5.1.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.commonjava.aprox.wars:aprox-basic =0.4, =0.4, =0.4, =0.4, =0.4, =0.5 -...

com.geeoz.atom:atom-api (>=1.0.0, <=1.0d32), com.geeoz.atom:atom-kie (>=1.0.0, <=1.0d32) +93 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (6.0.2.final)

org.infinispan:infinispan-core MAVEN version 6.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - com.geeoz.atom:atom-api =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.1....

GHSA-Q4V9-QJMW-J7VF Insecure Default Initialization of Resource in Pivotal Spring Web Flow

An issue was discovered in Pivotal Spring Web Flow through 2.4.5. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property which is disabled by default i.e., set to 'false' can be vulnerable to malicious EL expressions in view states that process form...

io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3), org.apache.juddi:juddi-tomcat (>=3.3.1, <=3.3.4) +12 more potentially affected by CVE-2017-5664 via org.apache.tomcat:tomcat (>=7.0.37, <=7.0.68)

org.apache.tomcat:tomcat MAVEN version =7.0.37, =3.3.1, =3.3.1, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =4.5.2, =5.16.3, =5.19.9 Source cves: CVE-2017-5664 Source advisory: GHSA-JMVV-524F-HJ5J...

io.fabric8.jube.images.fabric8:tomcat (>=2.0.1, <=2.0.5), io.fabric8.jube.images.fabric8:tomcat-8.0 (>=2.0.6, <=2.2.0) +8 more potentially affected by CVE-2017-5664 via org.apache.tomcat:tomcat (>=8.0.14, <=8.0.32)

org.apache.tomcat:tomcat MAVEN version =8.0.14, =2.0.1, =2.0.6, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m3 Source cves: CVE-2017-5664 Source advisory: OSV:GHSA-JMVV-524F-HJ5J...

io.fabric8.jube.images.fabric8:tomcat (>=2.0.1, <=2.0.5), io.fabric8.jube.images.fabric8:tomcat-8.0 (>=2.0.6, <=2.2.0) +8 more potentially affected by CVE-2017-5664 via org.apache.tomcat:tomcat (>=8.0.14, <=8.0.32)

org.apache.tomcat:tomcat MAVEN version =8.0.14, =2.0.1, =2.0.6, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m3 Source cves: CVE-2017-5664 Source advisory: GHSA-JMVV-524F-HJ5J...

io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3), org.apache.juddi:juddi-tomcat (>=3.3.1, <=3.3.4) +12 more potentially affected by CVE-2017-5664 via org.apache.tomcat:tomcat (>=7.0.37, <=7.0.68)

org.apache.tomcat:tomcat MAVEN version =7.0.37, =3.3.1, =3.3.1, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =4.5.2, =5.16.3, =5.19.9 Source cves: CVE-2017-5664 Source advisory: OSV:GHSA-JMVV-524F-HJ5J...

org.apache.tomee:apache-tomee (>=7.0.0, <=7.0.3), org.apache.tomee:arquillian-tomee-codi-tests (>=7.0.0, <=7.0.3) +6 more potentially affected by CVE-2017-5664 via org.apache.tomcat:tomcat (>=8.5.2, <=8.5.11)

org.apache.tomcat:tomcat MAVEN version =8.5.2, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.3 Source cves: CVE-2017-5664 Source advisory: GHSA-JMVV-524F-HJ5J...

org.apache.tomee:apache-tomee (>=7.0.0, <=7.0.3), org.apache.tomee:arquillian-tomee-codi-tests (>=7.0.0, <=7.0.3) +6 more potentially affected by CVE-2017-5664 via org.apache.tomcat:tomcat (>=8.5.2, <=8.5.11)

org.apache.tomcat:tomcat MAVEN version =8.5.2, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.3 Source cves: CVE-2017-5664 Source advisory: OSV:GHSA-JMVV-524F-HJ5J...

com.github.dblock.waffle:waffle-tomcat9 (1.8.1), com.github.waffle:waffle-tomcat9 (>=1.8.2, <=1.8.3) +14 more potentially affected by CVE-2017-5651 via org.apache.tomcat:tomcat-coyote (>=9.0.0.m1, <=9.0.0.m18)

org.apache.tomcat:tomcat-coyote MAVEN version =9.0.0.m1, =1.8.2, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m18 and more Source cves: CVE-2017-5651 Source advisory: OSV:GHSA-9HG2-395J-83RM...

com.github.dblock.waffle:waffle-tomcat9 (1.8.1), com.github.waffle:waffle-tomcat9 (>=1.8.2, <=1.8.3) +14 more potentially affected by CVE-2017-5651 via org.apache.tomcat:tomcat-coyote (>=9.0.0.m1, <=9.0.0.m18)

org.apache.tomcat:tomcat-coyote MAVEN version =9.0.0.m1, =1.8.2, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m18 and more Source cves: CVE-2017-5651 Source advisory: GHSA-9HG2-395J-83RM...

com.cloudera.oryx:oryx-lambda-serving (2.3.0), com.collaborne.operations:tomcat-remoteip-aws-valve (>=1.0.0, <=1.1.5) +55 more potentially affected by CVE-2017-5651 via org.apache.tomcat:tomcat-coyote (>=8.5.0, <=8.5.12)

org.apache.tomcat:tomcat-coyote MAVEN version =8.5.0, =1.0.0, =1.0.4, =1.8.2, =2.1, =1.9.5, =1.2.0, =0.5.0, =0.0.3, =0.0.5 and more Source cves: CVE-2017-5651 Source advisory: GHSA-9HG2-395J-83RM...

am.ik.home:uaa-server (>=1.0.0, <=1.9.0), au.com.cybernostics:theme-tree (0.9.0) +970 more potentially affected by CVE-2017-5651 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.12)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =1.0.0, =1, =1, =1, =1, =1, =0.1.0, =1.0.0-rc, =0.2.1, =0.1.1, =0.1.1, =0.0.26, =0.9.6 and more Source cves: CVE-2017-5651 Source advisory: OSV:GHSA-9HG2-395J-83RM...