WordPress CDI plugin <= 5.1.8 - Reflected Cross-Site-Scripting (XSS) vulnerability

Reflected Cross-Site-Scripting XSS vulnerability discovered by WordPress CDI plugin versions = 5.1.8. Solution Update the WordPress CDI plugin to the latest available version at least 5.1.9...

com.blogspot.mydailyjava:wicket-async-task (>=0.1, <=0.3), com.blogspot.mydailyjava:wicket-async-task-demo (>=0.1, <=0.3) +35 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.9.1)

org.apache.wicket:wicket-core MAVEN version 6.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.blogspot.mydailyjava:wicket-async-task =0.1, =0.1, =0.1, =6.9.1.0, =6.9.1.0, =0.1.0, =0.1.7 -...

new packages: cdi-api

An update is available for cdi-api. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

org.apache.struts:struts2-apps (2.3.28), org.apache.struts:struts2-assembly (2.3.28) +39 more potentially affected by CVE-2016-3082 via org.apache.struts:struts2-core (2.3.28)

org.apache.struts:struts2-core MAVEN version 2.3.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - org.apache.struts:struts2-apps 2.3.28 - org.apache.struts:struts2-assembly 2.3.28 -...

org.jboss.resteasy:async-http-servlet-3.0 (2.3.0.ga), org.jboss.resteasy:examples-jsapi (2.3.0.ga) +16 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.3.0.ga)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.3.0.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - org.jboss.resteasy:async-http-servlet-3.0 2.3.0.ga - org.jboss.resteasy:examples-jsapi...

org.chtijbug.drools:guvnor-jaxb-entities (5.6.2.chtijbug), org.drools:guvnor-jaxb-entities (>=5.6.0.cr1, <=5.6.0.final) +18 more potentially affected by CVE-2016-6346 via org.jboss.resteasy:resteasy-jaxrs (2.2.3.ga)

org.jboss.resteasy:resteasy-jaxrs MAVEN version 2.2.3.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-jaxrs and may be impacted: - org.chtijbug.drools:guvnor-jaxb-entities 5.6.2.chtijbug - org.drools:guvnor-jaxb-entities...

com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=2.0.2, <=2.0.4), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (>=2.0.2, <=2.0.4) +42 more potentially affected by CVE-2016-0785 via org.apache.struts:struts2-core (>=2.3.24, <=2.3.24.1)

org.apache.struts:struts2-core MAVEN version =2.3.24, =2.0.2, =2.0.2, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24, =2.3.24.1 and more Source cves: CVE-2016-0785 Source advisory: GHSA-876P-4WGC-75RX...

org.graniteds:granite-beanvalidation (2.2.1.ga), org.graniteds:granite-cdi (2.2.1.ga) +9 more potentially affected by CVE-2017-3199 via org.graniteds:granite-core (2.2.1.ga)

org.graniteds:granite-core MAVEN version 2.2.1.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.graniteds:granite-core and may be impacted: - org.graniteds:granite-beanvalidation 2.2.1.ga - org.graniteds:granite-cdi 2.2.1.ga -...

org.graniteds:granite-beanvalidation (2.3.1.ga), org.graniteds:granite-cdi (2.3.1.ga) +10 more potentially affected by CVE-2017-3199 via org.graniteds:granite-core (2.3.1.ga)

org.graniteds:granite-core MAVEN version 2.3.1.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.graniteds:granite-core and may be impacted: - org.graniteds:granite-beanvalidation 2.3.1.ga - org.graniteds:granite-cdi 2.3.1.ga -...

org.graniteds:granite-beanvalidation (2.2.0.rc2), org.graniteds:granite-cdi (2.2.0.rc2) +9 more potentially affected by CVE-2017-3199 via org.graniteds:granite-core (2.2.0.rc2)

org.graniteds:granite-core MAVEN version 2.2.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graniteds:granite-core and may be impacted: - org.graniteds:granite-beanvalidation 2.2.0.rc2 - org.graniteds:granite-cdi 2.2.0.rc2 -...

org.graniteds:granite-beanvalidation (2.3.0.rc1), org.graniteds:granite-cdi (2.3.0.rc1) +10 more potentially affected by CVE-2017-3199 via org.graniteds:granite-core (2.3.0.rc1)

org.graniteds:granite-core MAVEN version 2.3.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graniteds:granite-core and may be impacted: - org.graniteds:granite-beanvalidation 2.3.0.rc1 - org.graniteds:granite-cdi 2.3.0.rc1 -...

org.graniteds:granite-beanvalidation (2.2.0.sp1), org.graniteds:granite-cdi (2.2.0.sp1) +10 more potentially affected by CVE-2017-3199 via org.graniteds:granite-core (2.2.0.sp1)

org.graniteds:granite-core MAVEN version 2.2.0.sp1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graniteds:granite-core and may be impacted: - org.graniteds:granite-beanvalidation 2.2.0.sp1 - org.graniteds:granite-cdi 2.2.0.sp1 -...

org.graniteds:granite-beanvalidation (2.2.0.ga), org.graniteds:granite-cdi (2.2.0.ga) +10 more potentially affected by CVE-2017-3199 via org.graniteds:granite-core (2.2.0.ga)

org.graniteds:granite-core MAVEN version 2.2.0.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.graniteds:granite-core and may be impacted: - org.graniteds:granite-beanvalidation 2.2.0.ga - org.graniteds:granite-cdi 2.2.0.ga -...

maven:3.6 security and enhancement update

An update is available for apache-commons-io, atinject, jsr-305, maven-shared-utils, plexus-cipher, aopalliance, plexus-classworlds, guava, apache-commons-cli, plexus-containers, plexus-sec-dispatcher, httpcomponents-client, maven-resolver, apache-commons-lang3, plexus-interpolation, sisu,...

com.edugility:liquibase-extensions (>=1.0.1, <=1.0.2), com.edugility:liquiunit (>=1.0.0, <=1.0.4) +9 more potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (3.3.0)

org.liquibase:liquibase-core MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - com.edugility:liquibase-extensions =1.0.1, =1.0.0, =1.1.0, =1.2.0, =2.0.0.beta1, =2.0.0.beta2 Source...

com.hack23.cia:service.data.impl (2016.10.2), com.hack23.cia:service.impl (2016.10.2) +4 more potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (3.5.2)

org.liquibase:liquibase-core MAVEN version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - com.hack23.cia:service.data.impl 2016.10.2 - com.hack23.cia:service.impl 2016.10.2 -...

ch.inftec.ju:ju-dbutil-test (4.1), com.aceevo.ursus:ursus-db (>=0.2.11, <=0.2.15) +11 more potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (3.0.7)

org.liquibase:liquibase-core MAVEN version 3.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - ch.inftec.ju:ju-dbutil-test 4.1 - com.aceevo.ursus:ursus-db =0.2.11, =2.3, =1.0.0, =1.0.0, =1.0.0,...

org.liquibase:liquibase-cdi (3.3.4), org.liquibase:liquibase-maven-plugin (3.3.4) +1 more potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (3.3.4)

org.liquibase:liquibase-core MAVEN version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - org.liquibase:liquibase-cdi 3.3.4 - org.liquibase:liquibase-maven-plugin 3.3.4 -...

io.bootique.liquibase:bootique-liquibase (>=1.0.rc1, <=1.0), io.dropwizard:dropwizard-migrations (1.3.3) +2 more potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (3.6.0)

org.liquibase:liquibase-core MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - io.bootique.liquibase:bootique-liquibase =1.0.rc1, =1.0 - io.dropwizard:dropwizard-migrations 1.3.3 -...

org.liquibase:liquibase-cdi (3.2.1), org.liquibase:liquibase-debian (3.2.1) +2 more potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (3.2.1)

org.liquibase:liquibase-core MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - org.liquibase:liquibase-cdi 3.2.1 - org.liquibase:liquibase-debian 3.2.1 -...