23 matches found
RHLW-2026-27D595C7DC400686 Lightwell Security Advisory: classgraph 4.8.83.rhlw-00001
Red Hat Lightwell has released io.github.classgraph:classgraph 4.8.83.rhlw-00001 with a backported security fix. CVE-2021-47621: ClassGraph before 4.8.112 was not resistant to XML eXternal Entity XXE attacks. This patched artifact is a drop-in replacement for io.github.classgraph:classgraph 4.8.8...
RHLW-2026-9BD677F780E42D38 Lightwell Security Advisory: classgraph 4.8.36.rhlw-00001
Red Hat Lightwell has released io.github.classgraph:classgraph 4.8.36.rhlw-00001 with a backported security fix. CVE-2021-47621: ClassGraph before 4.8.112 was not resistant to XML eXternal Entity XXE attacks. This patched artifact is a drop-in replacement for io.github.classgraph:classgraph 4.8.3...
ROOT-APP-MAVEN-CVE-2021-47621 CVE-2021-47621 in io.root.io.github.classgraph:classgraph - Patched by Root
Root has patched CVE-2021-47621 in the io.root.io.github.classgraph:classgraph package for Root:Maven. Multiple fixed versions available...
EUVD-2024-2166
Malicious code in bioql PyPI...
CVE-2021-47621
ClassGraph before 4.8.112 was not resistant to XML eXternal Entity XXE attacks...
Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to leaking sensitive information due to the ClassGraph package ( CVE-2021-47621 )
Summary ClassGraph is used by DataStage on Cloud Pak for Data as part of the path and module scanning functionality. Vulnerability Details CVEID:CVE-2021-47621 DESCRIPTION: ClassGraph could allow a remote attacker to obtain sensitive information, caused by improper handling of XML external entity...
Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities
Summary Multiple vulnerabilities were remediated in IBM Observability with Instana OnPrem build 1.0.291 Vulnerability Details CVEID:CVE-2021-20293 DESCRIPTION: RESTEasy is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit thi...
Security Bulletin: IBM Maximo Application Suite, IBM Truststore Manager and IBM Asset Data Dictionary Component uses third party libraries which is vulnerable to multiple CVEs
Summary IBM Maximo Application Suite, IBM Truststore Manager and IBM Asset Data Dictionary Component uses FlaskCors-4.0.1-py2.py3-none-any.whl, requests-2.31.0-py3-none-any.whl, express-4.19.2.tgz, commons-compress-1.22.jar, commons-io-2.11.0.jar, urllib3-1.26.18-py2.py3-none-any.whl,...
XML External Entity (XXE)
io.github.classgraph:classgraph is vulnerable to XML External Entity XXE. The vulnerability is due to improper handling of external entities during XML processing, which can result in XML External Entity XXE injection attacks that can expose sensitive data or execute malicious code...
ClassGraph XML External Entity Reference
ClassGraph before 4.8.112 was not resistant to XML eXternal Entity XXE attacks...
africa.absa:inception-api (>=1.0.0, <=1.2.0), africa.absa:inception-codes-api (>=1.0.0, <=1.0.1) +6830 more potentially affected by CVE-2021-47621 via io.github.classgraph:classgraph (>=4.0.3, <=4.8.110)
io.github.classgraph:classgraph MAVEN version =4.0.3, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.25, =0.25, =0.25, =0.25, =1.2.8 and more Source cves: CVE-2021-47621 Source advisory: OSV:GHSA-V2XM-76PQ-PHCF...
GHSA-V2XM-76PQ-PHCF ClassGraph XML External Entity Reference
ClassGraph before 4.8.112 was not resistant to XML eXternal Entity XXE attacks...
africa.absa:inception-api (>=1.0.0, <=1.2.0), africa.absa:inception-codes-api (>=1.0.0, <=1.0.1) +6830 more potentially affected by CVE-2021-47621 via io.github.classgraph:classgraph (>=4.0.3, <=4.8.110)
io.github.classgraph:classgraph MAVEN version =4.0.3, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.25, =0.25, =0.25, =0.25, =1.2.8 and more Source cves: CVE-2021-47621 Source advisory: GHSA-V2XM-76PQ-PHCF...
CVE-2021-47621
ClassGraph before 4.8.112 was not resistant to XML eXternal Entity XXE attacks...
CVE-2021-47621
ClassGraph before 4.8.112 was not resistant to XML eXternal Entity XXE attacks...
CVE-2021-47621
The ClassGraph library, specifically versions prior to 4.8.112 , is vulnerable to XML External Entity (XXE) attacks. The root cause is a lack of resistance to XXE within the library's processing. Exploitation details are not provided in the documents. Remediation involves upgrading to version 4.8...
CVE-2021-47621
ClassGraph before 4.8.112 was not resistant to XML eXternal Entity XXE attacks...
PT-2024-11501
Name of the Vulnerable Software and Affected Versions ClassGraph versions prior to 4.8.112 Description The issue concerns the susceptibility of ClassGraph to XML eXternal Entity XXE attacks. This means that an attacker could potentially exploit the software by injecting malicious XML code, leadin...
