com.redhat.red.build:koji-build-finder (1.4.0), org.apache.camel:camel-infinispan (3.0.0-m4) +205 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-commons (9.4.15.final)

org.infinispan:infinispan-commons MAVEN version 9.4.15.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-commons and may be impacted: - com.redhat.red.build:koji-build-finder 1.4.0 - org.apache.camel:camel-infinispan...

org.infinispan.server:infinispan-server-commons (9.4.22.final), org.infinispan.server:infinispan-server-event-logger (9.4.22.final) +76 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-commons (9.4.22.final)

org.infinispan:infinispan-commons MAVEN version 9.4.22.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-commons and may be impacted: - org.infinispan.server:infinispan-server-commons 9.4.22.final -...

org.infinispan.server:infinispan-server-commons (9.4.0.alpha1), org.infinispan.server:infinispan-server-event-logger (9.4.0.alpha1) +75 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-commons (9.4.0.alpha1)

org.infinispan:infinispan-commons MAVEN version 9.4.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-commons and may be impacted: - org.infinispan.server:infinispan-server-commons 9.4.0.alpha1 -...

com.github.dgrandemange:idempotence-receiver-infinispan-hotrod-client-impl (>=1.0.0, <=1.0.1), com.github.dgrandemange:idempotence-receiver-spring-boot-autoconfigure (>=1.0.0, <=1.0.1) +87 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-commons (9.4.5.final)

org.infinispan:infinispan-commons MAVEN version 9.4.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-commons and may be impacted: - com.github.dgrandemange:idempotence-receiver-infinispan-hotrod-client-impl =1.0.0,...

org.infinispan.wildfly:infinispan-server-commons (10.1.4.final), org.infinispan.wildfly:infinispan-server-jgroups (10.1.4.final) +78 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-commons (10.1.4.final)

org.infinispan:infinispan-commons MAVEN version 10.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-commons and may be impacted: - org.infinispan.wildfly:infinispan-server-commons 10.1.4.final -...

org.infinispan:infinispan-anchored-keys (12.1.13.final), org.infinispan:infinispan-cachestore-jdbc (12.1.13.final) +63 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-commons (12.1.13.final)

org.infinispan:infinispan-commons MAVEN version 12.1.13.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-commons and may be impacted: - org.infinispan:infinispan-anchored-keys 12.1.13.final -...

org.infinispan.server:infinispan-server-feature-pack (8.0.0.beta1), org.infinispan.server:infinispan-server-infinispan (8.0.0.beta1) +48 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-commons (8.0.0.beta1)

org.infinispan:infinispan-commons MAVEN version 8.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-commons and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.0.0.beta1 -...

org.infinispan.server:infinispan-server-commons (8.1.5.final), org.infinispan.server:infinispan-server-feature-pack (8.1.5.final) +46 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-commons (8.1.5.final)

org.infinispan:infinispan-commons MAVEN version 8.1.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-commons and may be impacted: - org.infinispan.server:infinispan-server-commons 8.1.5.final -...

org.infinispan:infinispan-anchored-keys (12.0.0.dev05), org.infinispan:infinispan-cachestore-jdbc (12.0.0.dev05) +61 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-commons (12.0.0.dev05)

org.infinispan:infinispan-commons MAVEN version 12.0.0.dev05 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-commons and may be impacted: - org.infinispan:infinispan-anchored-keys 12.0.0.dev05 -...

org.infinispan.server:example-configuration-tests (6.0.0.alpha4), org.infinispan:infinispan-as-modules (6.0.0.alpha4) +26 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-commons (6.0.0.alpha4)

org.infinispan:infinispan-commons MAVEN version 6.0.0.alpha4 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-commons and may be impacted: - org.infinispan.server:example-configuration-tests 6.0.0.alpha4 -...

com.nimbusds:oidc-session-store (>=1.2, <=1.2.1), org.hibernate:hibernate-search-infinispan (>=5.0.0.beta2, <=5.0.0.cr1) +37 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-commons (7.0.0.final)

org.infinispan:infinispan-commons MAVEN version 7.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-commons and may be impacted: - com.nimbusds:oidc-session-store =1.2, =5.0.0.beta2, =5.0.0.beta2, =5.0.0.cr1 -...

Malware in fe-commons

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in fe-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3eed6012c5576169a48a200a9b4127c89b4c8e96449f17276d6e108aef5f1a13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8735 Malicious code in fe-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3eed6012c5576169a48a200a9b4127c89b4c8e96449f17276d6e108aef5f1a13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

apache-commons-lang:LocaleUtilsFuzzer: Security exception in java.base/sun.nio.cs.CESU_8.newEncoder

Detailed Report: https://oss-fuzz.com/testcase?key=5313105131274240 Project: apache-commons-lang Fuzzing Engine: libFuzzer Fuzz Target: LocaleUtilsFuzzer Job Type: libfuzzerasanapache-commons-lang Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-lang:LocaleUtilsFuzzer: Security exception with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5393416389001216 Project: apache-commons-lang Fuzzing Engine: libFuzzer Fuzz Target: LocaleUtilsFuzzer Job Type: libfuzzerasanapache-commons-lang Platform Id: linux Crash Type: Security exception Crash Address: Crash State: NULL Sanitizer: addres...

Security Bulletin: Apache commons fileupload vulnerability affect embedded Content Platform Engine in IBM Business Automation Workflow - CVE-2023-24998

Summary The embedded Content Platform Engine in IBM Business Automation Workflow is affected by Apache commons fileupload vulnerability. Vulnerability Details CVEID:CVE-2023-24998 DESCRIPTION: Apache Commons FileUpload and Tomcat are vulnerable to a denial of service, caused by not limit the numb...

Malicious code in bv-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e94e80ca26866e3606d109422a90b437b22822a2c3cd64b9d0584b35114f07c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8716 Malicious code in bv-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e94e80ca26866e3606d109422a90b437b22822a2c3cd64b9d0584b35114f07c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in bv-commons

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...