com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack (>=1.7.2, <=1.8.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.0.0, <=1.7.1) +1 more potentially affected by CVE-2018-1000009 via org.jvnet.hudson.plugins:checkstyle (>=3.32, <=3.43)

org.jvnet.hudson.plugins:checkstyle MAVEN version =3.32, =1.7.2, =1.0.0, =1.7.1 - org.jenkins-ci.plugins:php 1.0 Source cves: CVE-2018-1000009 Source advisory: GHSA-JFJ9-7J5W-6XGX...

com.groupon.jenkins-ci.plugins:dotci-plugins-starter-pack (>=1.7.2, <=1.8.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.0.0, <=1.7.1) +1 more potentially affected by CVE-2018-1000009 via org.jvnet.hudson.plugins:checkstyle (>=3.32, <=3.43)

org.jvnet.hudson.plugins:checkstyle MAVEN version =3.32, =1.7.2, =1.0.0, =1.7.1 - org.jenkins-ci.plugins:php 1.0 Source cves: CVE-2018-1000009 Source advisory: OSV:GHSA-JFJ9-7J5W-6XGX...

GHSA-JFJ9-7J5W-6XGX XXE vulnerability in Jenkins Checkstyle Plugin

Jenkins Checkstyle Plugin 3.49 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...

activemq:activemq (1.1), activemq:activemq-core (3.2) +583 more potentially affected by CVE-2015-7501 via commons-collections:commons-collections (2.1)

commons-collections:commons-collections MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on commons-collections:commons-collections and may be impacted: - activemq:activemq 1.1 - activemq:activemq-core 3.2 - activemq:activemq-gbean 3.2 -...

org.apache.maven.plugins:maven-checkstyle-plugin (2.2) potentially affected by CVE-2017-1000487 via org.codehaus.plexus:plexus-utils (1.4.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.apache.maven.plugins:maven-checkstyle-plugin 2.2 Source cves: CVE-2017-1000487 Source...

com.zaxxer:nuprocess (>=0.9.0, <=0.9.4), com.zaxxer:sansorm (1.0) +47 more potentially affected by CVE-2021-26291 via org.apache.maven:maven-core (2.0.7)

org.apache.maven:maven-core MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.maven:maven-core and may be impacted: - com.zaxxer:nuprocess =0.9.0, =2.0, =1.1.0.beta5, =2.3.5, =2.2.5, =2.2.5, =1.0-beta-1, =2.1m1, =2.1m1,...

Debian DLA-2099-1 : checkstyle security update

Security researchers from Snyk discovered that the fix for CVE-2019-9658 was incomplete. Checkstyle, a development tool to help programmers write Java code that adheres to a coding standard, was still vulnerable to XML External Entity XXE injection. For Debian 8 'Jessie', this problem has been...

Debian: Security Advisory (DLA-2099-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2099-1] checkstyle security update

Package : checkstyle Version : 5.9-1+deb8u2 CVE ID : CVE-2019-10782 Security researchers from Snyk discovered that the fix for CVE-2019-9658 was incomplete. Checkstyle, a development tool to help programmers write Java code that adheres to a coding standard, was still vulnerable to XML External...

org.apache.maven.plugins:maven-checkstyle-plugin (2.14) potentially affected by CVE-2019-10782 via com.puppycrawl.tools:checkstyle (5.8)

com.puppycrawl.tools:checkstyle MAVEN version 5.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - org.apache.maven.plugins:maven-checkstyle-plugin 2.14 Source cves: CVE-2019-10782 Source advisory:...

org.apache.maven.plugins:maven-checkstyle-plugin (2.16), org.opendaylight.yangtools:checkstyle-logging (>=0.8.0-beryllium, <=0.8.4-beryllium-sr4) potentially affected by CVE-2019-10782 via com.puppycrawl.tools:checkstyle (6.2)

com.puppycrawl.tools:checkstyle MAVEN version 6.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - org.apache.maven.plugins:maven-checkstyle-plugin 2.16 - org.opendaylight.yangtools:checkstyle-loggi...

io.cdap.cdap:cdap-event-writer-ext-gcp-pubsub (1.4.0), io.cdap.cdap:cdap-event-writer-extensions (1.4.0) +5 more potentially affected by CVE-2019-10782 via com.puppycrawl.tools:checkstyle (6.11.2)

com.puppycrawl.tools:checkstyle MAVEN version 6.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - io.cdap.cdap:cdap-event-writer-ext-gcp-pubsub 1.4.0 - io.cdap.cdap:cdap-event-writer-extensions...

com.noveogroup.android.check:com.noveogroup.android.check.gradle.plugin (>=1.1.2, <=1.2.0), com.noveogroup.android:check (>=1.1.2, <=1.2.0) +3 more potentially affected by CVE-2019-10782 via com.puppycrawl.tools:checkstyle (6.1.1)

com.puppycrawl.tools:checkstyle MAVEN version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - com.noveogroup.android.check:com.noveogroup.android.check.gradle.plugin =1.1.2, =1.1.2, =4, =2, =...

GHSA-763G-FQQ7-48WG XML external entity (XXE) processing ('external-parameter-entities' feature was not fully disabled))

Due to an incomplete fix for CVE-2019-9658, checkstyle was still vulnerable to XML External Entity XXE Processing. Impact User: Build Maintainers This vulnerability probably doesn't impact Maven/Gradle users as, in most cases, these builds are processing files that are trusted, or pre-vetted by a...

org.stoyicker.android-check:org.stoyicker.android-check.gradle.plugin (>=2.196, <=2.198), org.stoyicker.android-check:plugin (>=2.196, <=2.198) +2 more potentially affected by CVE-2019-10782 via com.puppycrawl.tools:checkstyle (7.8.1)

com.puppycrawl.tools:checkstyle MAVEN version 7.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - org.stoyicker.android-check:org.stoyicker.android-check.gradle.plugin =2.196, =2.196, =2.198 -...

com.thomasjensen.checkstyle.addons:checkstyle-addons (>=1.0.1, <=3.0.0), com.thomasjensen.checkstyle.addons:checkstyle-addons-java7 (>=4.0.0, <=4.2.0) +3 more potentially affected by CVE-2019-10782 via com.puppycrawl.tools:checkstyle (6.4.1)

com.puppycrawl.tools:checkstyle MAVEN version 6.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - com.thomasjensen.checkstyle.addons:checkstyle-addons =1.0.1, =4.0.0, =9.0.0, =7.1-milestone-1,...

cn.com.infosec:netty-build (23), com.thomasjensen.checkstyle.addons:checkstyle-addons-java7 (>=5.0.0, <=7.0.1) +1 more potentially affected by CVE-2019-10782 via com.puppycrawl.tools:checkstyle (6.16.1)

com.puppycrawl.tools:checkstyle MAVEN version 6.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - cn.com.infosec:netty-build 23 - com.thomasjensen.checkstyle.addons:checkstyle-addons-java7 =5.0....

com.opower:opower-checks (1.0.0), com.qulice:qulice-ant (>=0.12.2, <=0.13.3) +2 more potentially affected by CVE-2019-10782 via com.puppycrawl.tools:checkstyle (6.8.1)

com.puppycrawl.tools:checkstyle MAVEN version 6.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - com.opower:opower-checks 1.0.0 - com.qulice:qulice-ant =0.12.2, =0.12.2, =0.12.2, =0.13.3 Source...

org.stoyicker.android-check:org.stoyicker.android-check.gradle.plugin (>=2.149.1, <=2.161), org.stoyicker.android-check:plugin (>=2.149.1, <=2.161) potentially affected by CVE-2019-10782 via com.puppycrawl.tools:checkstyle (7.5)

com.puppycrawl.tools:checkstyle MAVEN version 7.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - org.stoyicker.android-check:org.stoyicker.android-check.gradle.plugin =2.149.1, =2.149.1, =2.161...

com.thomasjensen.checkstyle.addons:checkstyle-addons-java6 (>=1.3.1, <=4.2.0), org.codehaus.sonar-plugins.java:sonar-checkstyle-plugin (2.2) potentially affected by CVE-2019-10782 via com.puppycrawl.tools:checkstyle (6.1)

com.puppycrawl.tools:checkstyle MAVEN version 6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - com.thomasjensen.checkstyle.addons:checkstyle-addons-java6 =1.3.1, =4.2.0 -...