Important: Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 3.20.4 release and security update

Red Hat Integration Camel for Spring Boot 3.20.4 release and security update is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 4.0.2 release security update

Red Hat Integration Camel for Spring Boot 4.0.2 release and security update is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

cloud.opencode.base:opencode-base-token (1.0.0), io.github.junxworks:junx-ep-auth (>=2.0.0, <=2.1.0) +11 more potentially affected by CVE-2023-46750 via org.apache.shiro:shiro-web (>=2.0.0-alpha-1, <=2.0.0-alpha-3)

org.apache.shiro:shiro-web MAVEN version =2.0.0-alpha-1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-1, =2.0.0-alpha-3 Source cves: CVE-2023-46750 Source advisory: OSV:GHSA-HHW5-C326-822H...

com.sap.cds:cds-starter-cloudfoundry (>=2.0.1, <=2.4.0), com.sap.cds:cds-starter-k8s (>=2.0.1, <=2.4.0) +2 more potentially affected by CVE-2023-50422 via com.sap.cloud.security.xsuaa:spring-xsuaa (>=3.0.0, <=3.2.1)

com.sap.cloud.security.xsuaa:spring-xsuaa MAVEN version =3.0.0, =2.0.1, =2.0.1, =3.0.0, =3.0.0, =3.2.1 Source cves: CVE-2023-50422 Source advisory: GHSA-59C9-PXQ8-9C73...

com.sap.cloud.security:resourceserver-security-spring-boot-starter (>=2.10.2, <=2.16.0) potentially affected by CVE-2023-50422 via com.sap.cloud.security:spring-security (>=2.10.2, <=2.16.0)

com.sap.cloud.security:spring-security MAVEN version =2.10.2, =2.10.2, =2.16.0 Source cves: CVE-2023-50422 Source advisory: GHSA-59C9-PXQ8-9C73...

com.sap.cds:cds-starter-cloudfoundry (>=2.2.0, <=2.4.0), com.sap.cds:cds-starter-k8s (>=2.2.0, <=2.4.0) +5 more potentially affected by CVE-2023-50422 via com.sap.cloud.security:spring-security (>=3.0.0, <=3.2.1)

com.sap.cloud.security:spring-security MAVEN version =3.0.0, =2.2.0, =2.2.0, =1.0.4, =3.0.0, =2.0.0, =2.0.0, =2.0.0, =2.4.0 Source cves: CVE-2023-50422 Source advisory: GHSA-59C9-PXQ8-9C73...

com.sap.cloud.security.xsuaa:spring-xsuaa-mock (1.7.0), com.sap.cloud.security.xsuaa:xsuaa-spring-boot-starter (1.7.0) potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security.xsuaa:spring-xsuaa (1.7.0)

com.sap.cloud.security.xsuaa:spring-xsuaa MAVEN version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.sap.cloud.security.xsuaa:spring-xsuaa and may be impacted: - com.sap.cloud.security.xsuaa:spring-xsuaa-mock 1.7.0 -...

com.sap.cloud.security.xsuaa:spring-xsuaa-mock (1.6.0), com.sap.cloud.security.xsuaa:xsuaa-spring-boot-starter (1.6.0) potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security.xsuaa:spring-xsuaa (1.6.0)

com.sap.cloud.security.xsuaa:spring-xsuaa MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.sap.cloud.security.xsuaa:spring-xsuaa and may be impacted: - com.sap.cloud.security.xsuaa:spring-xsuaa-mock 1.6.0 -...

com.sap.cloud.security:resourceserver-security-spring-boot-starter (0.1.0) potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security:spring-security (0.1.0)

com.sap.cloud.security:spring-security MAVEN version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.sap.cloud.security:spring-security and may be impacted: - com.sap.cloud.security:resourceserver-security-spring-boot-starter 0.1.0 Source cve...

com.sap.cloud.security:resourceserver-security-spring-boot-starter (0.1.1) potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security:spring-security (0.1.1)

com.sap.cloud.security:spring-security MAVEN version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.sap.cloud.security:spring-security and may be impacted: - com.sap.cloud.security:resourceserver-security-spring-boot-starter 0.1.1 Source cve...

com.sap.cds:cds-starter-cloudfoundry (>=2.0.1, <=2.4.0), com.sap.cds:cds-starter-k8s (>=2.0.1, <=2.4.0) +2 more potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security.xsuaa:spring-xsuaa (>=3.0.0, <=3.2.1)

com.sap.cloud.security.xsuaa:spring-xsuaa MAVEN version =3.0.0, =2.0.1, =2.0.1, =3.0.0, =3.0.0, =3.2.1 Source cves: CVE-2023-50422, CVE-2023-50424 Source advisory: OSV:GHSA-59C9-PXQ8-9C73...

com.sap.cloud.security:resourceserver-security-spring-boot-starter (0.1.3) potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security:spring-security (0.1.3)

com.sap.cloud.security:spring-security MAVEN version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.sap.cloud.security:spring-security and may be impacted: - com.sap.cloud.security:resourceserver-security-spring-boot-starter 0.1.3 Source cve...

com.sap.cloud.security:resourceserver-security-spring-boot-starter (0.1.6) potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security:spring-security (0.1.6)

com.sap.cloud.security:spring-security MAVEN version 0.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.sap.cloud.security:spring-security and may be impacted: - com.sap.cloud.security:resourceserver-security-spring-boot-starter 0.1.6 Source cve...

com.sap.cloud.security:resourceserver-security-spring-boot-starter (0.3.0) potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security:spring-security (0.3.0)

com.sap.cloud.security:spring-security MAVEN version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.sap.cloud.security:spring-security and may be impacted: - com.sap.cloud.security:resourceserver-security-spring-boot-starter 0.3.0 Source cve...

com.sap.cloud.security:resourceserver-security-spring-boot-starter (>=2.10.2, <=2.16.0) potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security:spring-security (>=2.10.2, <=2.16.0)

com.sap.cloud.security:spring-security MAVEN version =2.10.2, =2.10.2, =2.16.0 Source cves: CVE-2023-50422, CVE-2023-50424 Source advisory: OSV:GHSA-59C9-PXQ8-9C73...

com.sap.cloud.security:resourceserver-security-spring-boot-starter (0.3.1) potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security:spring-security (0.3.1)

com.sap.cloud.security:spring-security MAVEN version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.sap.cloud.security:spring-security and may be impacted: - com.sap.cloud.security:resourceserver-security-spring-boot-starter 0.3.1 Source cve...

com.sap.cds:cds-starter-cloudfoundry (>=2.2.0, <=2.4.0), com.sap.cds:cds-starter-k8s (>=2.2.0, <=2.4.0) +5 more potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security:spring-security (>=3.0.0, <=3.2.1)

com.sap.cloud.security:spring-security MAVEN version =3.0.0, =2.2.0, =2.2.0, =1.0.4, =3.0.0, =2.0.0, =2.0.0, =2.0.0, =2.4.0 Source cves: CVE-2023-50422, CVE-2023-50424 Source advisory: OSV:GHSA-59C9-PXQ8-9C73...

com.sap.cloud.security:resourceserver-security-spring-boot-starter (0.1.4) potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security:spring-security (0.1.4)

com.sap.cloud.security:spring-security MAVEN version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.sap.cloud.security:spring-security and may be impacted: - com.sap.cloud.security:resourceserver-security-spring-boot-starter 0.1.4 Source cve...

com.sap.cloud.security:resourceserver-security-spring-boot-starter (0.1.5) potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security:spring-security (0.1.5)

com.sap.cloud.security:spring-security MAVEN version 0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.sap.cloud.security:spring-security and may be impacted: - com.sap.cloud.security:resourceserver-security-spring-boot-starter 0.1.5 Source cve...

com.sap.cloud.security:resourceserver-security-spring-boot-starter (0.1.7) potentially affected by CVE-2023-50422 +1 more via com.sap.cloud.security:spring-security (0.1.7)

com.sap.cloud.security:spring-security MAVEN version 0.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.sap.cloud.security:spring-security and may be impacted: - com.sap.cloud.security:resourceserver-security-spring-boot-starter 0.1.7 Source cve...