EUVD-2022-1875

Malicious code in bioql PyPI...

io.quarkus:quarkus-elytron-security-oauth2 (>=2.3.0.cr1, <=2.3.1.final), io.quarkus:quarkus-elytron-security-oauth2-deployment (>=2.3.0.cr1, <=2.3.1.final) +58 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.17.0.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.17.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - io.quarkus:quarkus-elytron-security-oauth2 =2.3.0.cr1,...

org.jboss:jboss-remote-naming (1.0.0.beta4) potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.0.beta12)

org.jboss:jboss-ejb-client MAVEN version 1.0.0.beta12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.jboss:jboss-remote-naming 1.0.0.beta4 Source cves: CVE-2021-20250 Source advisory:...

ch.inftec.ju:ju-testing-ee (>=4.1, <=4.2), org.jboss:jboss-remote-naming (>=1.0.0.final, <=1.0.5.final) potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.0.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - ch.inftec.ju:ju-testing-ee =4.1, =1.0.0.final, =1.0.5.final Source cves: CVE-2021-20250 Source...

org.jboss.as:jboss-as-ejb-client-bom (7.1.0.final), org.jboss.as:jboss-as-jms-client-bom (7.1.0.final) potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.2.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.jboss.as:jboss-as-ejb-client-bom 7.1.0.final - org.jboss.as:jboss-as-jms-client-bom 7.1.0.final...

ch.inftec.ju:ju-testing-ee (>=4.4-4, <=4.5.1-11), ch.inftec.ju:ju-util-ee (>=4.4-4, <=4.5.1-11) +6 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.5.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - ch.inftec.ju:ju-testing-ee =4.4-4, =4.4-4, =0.2.4, =0.2.9, =0.3.0 Source cves: CVE-2021-20250 Source...

org.jboss.as:jboss-as-ejb-client-bom (7.1.2.final), org.jboss.as:jboss-as-jms-client-bom (7.1.2.final) potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.10.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.10.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.jboss.as:jboss-as-ejb-client-bom 7.1.2.final - org.jboss.as:jboss-as-jms-client-bom 7.1.2.final...

org.jboss.as:jboss-as-ejb-client-bom (7.1.3.final), org.jboss.as:jboss-as-jms-client-bom (7.1.3.final) potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.11.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.11.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.jboss.as:jboss-as-ejb-client-bom 7.1.3.final - org.jboss.as:jboss-as-jms-client-bom 7.1.3.final...

org.jboss:jboss-remote-naming (>=1.0.6.final, <=2.0.0.beta2) potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.13.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.13.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.jboss:jboss-remote-naming =1.0.6.final, =2.0.0.beta2 Source cves: CVE-2021-20250 Source advisory...

ch.inftec.ju:ju-util-ee (>=4.1, <=4.2), com.github.marschall:osgi-remoting-ejb-jboss (0.2.0) +7 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.16.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.16.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - ch.inftec.ju:ju-util-ee =4.1, =3.0.39, =3.0.39, =3.0.53, =3.0.53, =7.1.83 Source cves: CVE-2021-2025...

org.wildfly:wildfly-ee (8.0.0.alpha1), org.wildfly:wildfly-ejb-client-bom (8.0.0.alpha1) +8 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.21.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.21.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.wildfly:wildfly-ee 8.0.0.alpha1 - org.wildfly:wildfly-ejb-client-bom 8.0.0.alpha1 -...

org.wildfly:wildfly-ee (8.0.0.alpha2), org.wildfly:wildfly-ejb-client-bom (8.0.0.alpha2) +8 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.22.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.22.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.wildfly:wildfly-ee 8.0.0.alpha2 - org.wildfly:wildfly-ejb-client-bom 8.0.0.alpha2 -...

org.wildfly:wildfly-arquillian-common-domain (>=8.0.0.alpha3, <=8.0.0.beta1), org.wildfly:wildfly-arquillian-container-domain-managed (>=8.0.0.alpha3, <=8.0.0.beta1) +14 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.0.0.beta3)

org.jboss:jboss-ejb-client MAVEN version 2.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.wildfly:wildfly-arquillian-common-domain =8.0.0.alpha3, =8.0.0.alpha3, =8.0.0.alpha3,...

org.javafxdata:datafx-ejb-wildfly (8.0b1), org.javafxdata:datafx-samples (8.0b1) +25 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.0.0.beta5)

org.jboss:jboss-ejb-client MAVEN version 2.0.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.javafxdata:datafx-ejb-wildfly 8.0b1 - org.javafxdata:datafx-samples 8.0b1 -...

org.wildfly:wildfly-client-all (9.0.0.alpha1), org.wildfly:wildfly-clustering-ejb-spi (>=8.1.0.cr1, <=9.0.0.alpha1) +2 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.0.1.final)

org.jboss:jboss-ejb-client MAVEN version 2.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.wildfly:wildfly-client-all 9.0.0.alpha1 - org.wildfly:wildfly-clustering-ejb-spi =8.1.0.cr1,...

org.wildfly:wildfly-batch (>=9.0.0.beta1, <=9.0.0.cr1), org.wildfly:wildfly-batch-parent (>=9.0.0.beta1, <=9.0.0.cr1) +21 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.0.3.final)

org.jboss:jboss-ejb-client MAVEN version 2.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.wildfly:wildfly-batch =9.0.0.beta1, =9.0.0.beta1, =9.0.0.beta1, =9.0.0.beta1, =9.0.0.beta1,...

com.logitags:cibet-integrationtest (>=2.2, <=2.2.2), org.fakereplace:fakereplace-wildfly-tests (1.0.0.alpha3) +25 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.1.1.final)

org.jboss:jboss-ejb-client MAVEN version 2.1.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - com.logitags:cibet-integrationtest =2.2, =8.0.0.beta2, =8.0.0.beta1, =8.0.0.beta2, =9.0.0.cr2,...

org.infinispan.server:infinispan-server-commons (>=8.1.0.alpha1, <=8.1.0.alpha2), org.infinispan.server:infinispan-server-infinispan (>=8.1.0.alpha1, <=8.1.0.alpha2) +26 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.1.2.final)

org.jboss:jboss-ejb-client MAVEN version 2.1.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.infinispan.server:infinispan-server-commons =8.1.0.alpha1, =8.1.0.alpha1, =8.1.0.alpha1,...

org.infinispan.server:infinispan-server-commons (>=8.1.0.beta1, <=8.2.0.beta1), org.infinispan.server:infinispan-server-infinispan (>=8.1.0.beta1, <=8.2.0.beta1) +29 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.1.3.final)

org.jboss:jboss-ejb-client MAVEN version 2.1.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.infinispan.server:infinispan-server-commons =8.1.0.beta1, =8.1.0.beta1, =8.1.0.beta1, =10.0.0.cr4...

ch.inftec.ju:ju-ee (>=6.0-2, <=6.1-s-5), org.fakereplace:fakereplace-wildfly-tests (>=1.0.0.alpha4, <=1.0.0.alpha5) +49 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.1.4.final)

org.jboss:jboss-ejb-client MAVEN version 2.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - ch.inftec.ju:ju-ee =6.0-2, =1.0.0.alpha4, =8.2.0.beta2, =8.2.0.beta2, =8.2.0.beta2, =1.0.0.beta5,...