com.atomikos:transactions-spring-boot-integration-tests (>=5.0.9, <=6.0.1), com.github.adetiamarhadi:mssc-brewery-bom (2.4) +170 more potentially affected by CVE-2020-10727 via org.apache.activemq:artemis-commons (>=2.7.0, <=2.12.0)

org.apache.activemq:artemis-commons MAVEN version =2.7.0, =5.0.9, =1.6, =1.1, =1.0.3, =1.0.0, =1.0.12, =1.0.0, =1.0.0, =2019.3.24, =2019.3.24, =2019.3.24, =0.0.1, =1.1.4.alpha1, =1.1.6 and more Source cves: CVE-2020-10727 Source advisory: GHSA-Q9G8-9HPP-XC82...

com.atomikos:transactions-spring-boot-integration-tests (>=5.0.9, <=6.0.1), com.github.adetiamarhadi:mssc-brewery-bom (2.4) +170 more potentially affected by CVE-2020-10727 via org.apache.activemq:artemis-commons (>=2.7.0, <=2.12.0)

org.apache.activemq:artemis-commons MAVEN version =2.7.0, =5.0.9, =1.6, =1.1, =1.0.3, =1.0.0, =1.0.12, =1.0.0, =1.0.0, =2019.3.24, =2019.3.24, =2019.3.24, =0.0.1, =1.1.4.alpha1, =1.1.6 and more Source cves: CVE-2020-10727 Source advisory: OSV:GHSA-Q9G8-9HPP-XC82...

com.pep1:pep1-commons-rest (0.6), io.syndesis:http-pull-push-example (>=0.4.2, <=0.4.5) +5 more potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.3.27.final)

io.undertow:undertow-core MAVEN version 1.3.27.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.pep1:pep1-commons-rest 0.6 - io.syndesis:http-pull-push-example =0.4.2, =0.4.2, =0.4.2, =0.4.5 -...

org.springframework:spring-portlet (2.0.3), org.springframework:spring-remoting (2.0.3) +4 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (2.0.3)

org.springframework:spring-web MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-portlet 2.0.3 - org.springframework:spring-remoting 2.0.3 -...

GHSA-CVCF-W75C-GW5R Mulesoft Mule Unsafe Deserialization

The MuleSoft Mule runtime engine before 3.8.0 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections...

Mulesoft Mule Unsafe Deserialization

The MuleSoft Mule runtime engine before 3.8.0 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections...

com.vaadin:vaadin-jandex (>=23.0.0, <=23.0.8), com.vaadin:vaadin-platform-javadoc (>=23.0.0, <=23.0.8) +3 more potentially affected by CVE-2022-29567 via com.vaadin:vaadin (>=23.0.0, <=23.0.8)

com.vaadin:vaadin MAVEN version =23.0.0, =23.0.0, =23.0.0, =23.0.8 - de.jfancy:star-rating 1.0.3 - io.rocketbase.commons:commons-vaadin-core 0.1.0 - io.rocketbase.commons:sample 0.1.0 Source cves: CVE-2022-29567 Source advisory: MEND:CVE-2022-29567...

new packages: xml-commons-resolver

An update is available for xml-commons-resolver. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Roc...

new packages: xml-commons-apis

An update is available for xml-commons-apis. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

new packages: apache-commons-net

An update is available for apache-commons-net. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

new packages: apache-commons-logging

An update is available for apache-commons-logging. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

new packages: apache-commons-lang3

An update is available for apache-commons-lang3. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Roc...

new packages: apache-commons-io

An update is available for apache-commons-io. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

new packages: apache-commons-codec

An update is available for apache-commons-codec. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Roc...

new packages: apache-commons-cli

An update is available for apache-commons-cli. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

com.processpuzzle:processpuzzle-commons-domain (>=0.1.0-release, <=0.1.1-release), com.processpuzzle:processpuzzle-litest-domain (>=0.3.1-release, <=0.3.2-release) +1 more potentially affected by CVE-2014-1216 via org.fitnesse:fitnesse (>=20131110, <=20140201)

org.fitnesse:fitnesse MAVEN version =20131110, =0.1.0-release, =0.3.1-release, =1.4.1, =1.4.2 Source cves: CVE-2014-1216 Source advisory: OSV:GHSA-MPX3-MX2P-9GV3...

ZF-Commons ZfcUser Vulnerable to XSS in Login Redirect

Cross-site scripting XSS vulnerability in user/login.phtml in ZF-Commons ZfcUser before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter...

GHSA-33RH-5HVF-5JJP ZF-Commons ZfcUser Vulnerable to XSS in Login Redirect

Cross-site scripting XSS vulnerability in user/login.phtml in ZF-Commons ZfcUser before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter...

org.apache.portals.jetspeed-2:app-servers (>=2.1.3, <=2.1.4), org.apache.portals.jetspeed-2:applications (>=2.1.3, <=2.1.4) +35 more potentially affected by CVE-2016-0711 via org.apache.portals.jetspeed-2:jetspeed-commons (>=2.1.3, <=2.3.0)

org.apache.portals.jetspeed-2:jetspeed-commons MAVEN version =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.2.1, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.3.0 and more Source cves: CVE-2016-0711 Source advisory: OSV:GHSA-5PGM-9G57-3WC7...

org.apache.portals.jetspeed-2:app-servers (>=2.1.3, <=2.1.4), org.apache.portals.jetspeed-2:applications (>=2.1.3, <=2.1.4) +35 more potentially affected by CVE-2016-0711 via org.apache.portals.jetspeed-2:jetspeed-commons (>=2.1.3, <=2.3.0)

org.apache.portals.jetspeed-2:jetspeed-commons MAVEN version =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.2.1, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.3.0 and more Source cves: CVE-2016-0711 Source advisory: GHSA-5PGM-9G57-3WC7...