CGA-XQVV-V5W6-4949

Bulletin has no description...

ROOT-APP-MAVEN-CVE-2025-4949 CVE-2025-4949 in io.root.org.eclipse.jgit:org.eclipse.jgit - Patched by Root

Root has patched CVE-2025-4949 in the io.root.org.eclipse.jgit:org.eclipse.jgit package for Root:Maven. Multiple fixed versions available...

CVE-2026-4949

creationtimestamp| type| source ---|---|--- 2026-04-16 02:06:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjld5kvghr2t...

RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.4.24 (RHSA-2026:4915)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:4915 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

CVE-2023-4949

An attacker with local access to a system either through a disk or external drive can present a modified XFS partition to grub-legacy in such a way to exploit a memory corruption in grub’s XFS file system implementation...

RHEL 8 : Red Hat JBoss Enterprise Application Platform 8.0.11 (RHSA-2025:22773)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22773 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release ...

RHEL 8 : Red Hat JBoss Enterprise Application Platform 8.1.2 (RHSA-2025:22187)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:22187 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release of Red Ha...

RHEL 9 : Red Hat JBoss Enterprise Application Platform 8.1.2 Security update (Moderate) (RHSA-2025:22188)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:22188 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release of Red Ha...

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.2 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Security Bulletin: Due to the use of Eclipse JGit, IBM webMethods Integration is affected by denial of service, and other security issues.

Summary Eclipse JGit is used by IBM webMethods Integration in repository function CVE-2025-4949 Vulnerability Details CVEID:CVE-2025-4949 DESCRIPTION: In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implemen...

EUVD-2023-38406

Malicious code in bioql PyPI...

Security Bulletin: IBM Application Modernization Accelerator is affected by multiple vulnerabilities found in Java and Node.js (CVE-2025-48924, CVE-2025-4949)

Summary There are multiple vulnerabilities in Java and Node.js used by IBM Application Modernization Accelerator. Vulnerability Details CVEID:CVE-2025-48924 DESCRIPTION: Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with...

openSUSE Security Advisory (SUSE-SU-2025:02762-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2025:02762-1 Security update for eclipse-jgit

This update for eclipse-jgit fixes the following issues: - CVE-2025-4949: Fixed the XXE vulnerability in ManifestParser and AmazonS3 class bsc1243647...

jgit-5.11.0-2.1 on GA media (moderate)

jgit-5.11.0-2.1 on GA media Announcement ID: openSUSE-SU-2025:15232-1 Rating: moderate Cross-References: CVE-2023-4759 CVE-2025-4949 CVSS scores: CVE-2023-4759 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-4949 SUSE : 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N Affected...

SUSE CVE-2025-4949

In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git pack files in an Amazon S3 bucket, are vulnerable to XML External Entity XXE...

CVE-2025-4949 vulnerabilities

Vulnerabilities for packages: nextflow, apicurio-registry, apache-nifi-registry, wildfly, thingsboard, sonarqube-10, gradle...

CVE-2025-4949

creationtimestamp| type| source ---|---|--- 2025-05-23 07:44:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17373 2025-08-13 13:43:36+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lwbxfw23622c 2026-01-21 04:00:00+00:00| seen|...

com.beijunyi:parallelgit (1.0.0), com.beijunyi:parallelgit-commands (1.0.0) +40 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (4.1.0.201509280440-r)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 4.1.0.201509280440-r is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - com.beijunyi:parallelgit 1.0.0 - com.beijunyi:parallelgit-commands 1.0.0 -...

org.eclipse.jgit:org.eclipse.jgit.ant (4.0.0.201505260635-rc2), org.eclipse.jgit:org.eclipse.jgit.archive (4.0.0.201505260635-rc2) +6 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (4.0.0.201505260635-rc2)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 4.0.0.201505260635-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - org.eclipse.jgit:org.eclipse.jgit.ant 4.0.0.201505260635-rc2 -...