Security Bulletin: Security Vulnerability in Jetty affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-5115)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Jetty Vulnerability Details CVEID:CVE-2025-5115 DESCRIPTION: In Eclipse Jetty, versions =9.4.57, =10.0.25, =11.0.25, =12.0.21, =12.1.0.alpha2, an HTTP/2 client may trigger the server to send...

Security Bulletin: IBM Storage Protect Server is affected by a vulnerability in the Eclipse http2-common library that could cause resource exhaustion (CVE-2025-5115).

Summary IBM Storage Protect Server uses the Eclipse http2-common library in certain components. A vulnerability in http2-common could cause malicious client to repeatedly send malformed or invalid HTTP/2 frames, forcing the server to generate excessive RSTSTREAM responses. This can result in...

zbuilder (>=0.0.18, <=0.0.21) potentially affected by CVE-2023-5115 via ansible (2.9.7)

ansible PYPI version 2.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - zbuilder =0.0.18, =0.0.21 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...

bastion-key-client (>=1.0.1, <=1.4.0) potentially affected by CVE-2023-5115 via ansible (5.1.0)

ansible PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - bastion-key-client =1.0.1, =1.4.0 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...

ops-cli (>=2.2.0, <=2.2.1) potentially affected by CVE-2023-5115 via ansible (8.2.0)

ansible PYPI version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ops-cli =2.2.0, =2.2.1 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...

unfurl (>=0.0.1.dev390, <=0.0.1.dev391) potentially affected by CVE-2023-5115 via ansible (2.9.14)

ansible PYPI version 2.9.14 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - unfurl =0.0.1.dev390, =0.0.1.dev391 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...

alpacloud-ansible-builder (0.1.0), ansible-role-collect-logs (>=1.3.0, <=1.4.0) +13 more potentially affected by CVE-2023-5115 via ansible (2.10.7)

ansible PYPI version 2.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - alpacloud-ansible-builder 0.1.0 - ansible-role-collect-logs =1.3.0, =0.1.2, =0.1.9, =4.2.4, =10.0.0.0rc1, =0.1.0, =2.0.6, =0.2.1, =1.0.0, =0.1.4,...

galaxy-importer (0.1.3b11) potentially affected by CVE-2023-5115 via ansible (2.9.0rc5)

ansible PYPI version 2.9.0rc5 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - galaxy-importer 0.1.3b11 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...

ants-client (2.0.0b6), dojot-toolbox (0.0.2) +2 more potentially affected by CVE-2023-5115 via ansible (2.9.2)

ansible PYPI version 2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ants-client 2.0.0b6 - dojot-toolbox 0.0.2 - pyesxi 0.0.3 - pyvsphere =0.0.6, =0.0.7 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-112...

walletlib (0.1.0) potentially affected by CVE-2023-5115 via ansible (2.8.4)

ansible PYPI version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - walletlib 0.1.0 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...

ansible-please (0.1.18), bbot (>=1.0.0, <=1.0.4.1199rc0) +9 more potentially affected by CVE-2023-5115 via ansible (5.10.0)

ansible PYPI version 5.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ansible-please 0.1.18 - bbot =1.0.0, =7.2.1, =0.11.0, =0.12.0.post1, =12.0.0.0rc1, =0.1.0, =2.20.0.0a1, =0.5.0, =0.9.0 - tenks 2.0.0 Source cves:...

fabric-am-handlers (>=1.5.0b5, <=1.80.0b0) potentially affected by CVE-2023-5115 via ansible (7.5.0)

ansible PYPI version 7.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - fabric-am-handlers =1.5.0b5, =1.80.0b0 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...

ants-client (>=3.0.0, <=3.0.5) potentially affected by CVE-2023-5115 via ansible (2.10.1)

ansible PYPI version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ants-client =3.0.0, =3.0.5 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...

kayobe (>=7.0.0.0rc1, <=7.3.0) potentially affected by CVE-2023-5115 via ansible (2.8.20)

ansible PYPI version 2.8.20 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - kayobe =7.0.0.0rc1, =7.3.0 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...

ants-client (>=2.0.0b4, <=2.0.0b5) potentially affected by CVE-2023-5115 via ansible (2.9.1)

ansible PYPI version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ants-client =2.0.0b4, =2.0.0b5 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...

ops-cli (>=2.0.11, <=2.1.7) potentially affected by CVE-2023-5115 via ansible (2.9.25)

ansible PYPI version 2.9.25 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ops-cli =2.0.11, =2.1.7 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...

bbot (>=1.0.4.1233rc0, <=1.1.7.3028rc0), enoslib (>=8.3.1, <=8.4.1) +3 more potentially affected by CVE-2023-5115 via ansible (7.7.0)

ansible PYPI version 7.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - bbot =1.0.4.1233rc0, =8.3.1, =14.0.0.0rc1, =0.1.0, =0.2.0, =0.2.2 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...

galaxy-importer (>=0.1.2, <=0.1.3b10) potentially affected by CVE-2023-5115 via ansible (2.9.0b1)

ansible PYPI version 2.9.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - galaxy-importer =0.1.2, =0.1.3b10 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...

cloudmesh-client (4.2.6) potentially affected by CVE-2023-5115 via ansible (2.0.2.0)

ansible PYPI version 2.0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - cloudmesh-client 4.2.6 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...

sagecreator (>=0.0.31, <=0.1.1.3) potentially affected by CVE-2023-5115 via ansible (2.7.2)

ansible PYPI version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - sagecreator =0.0.31, =0.1.1.3 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...