GHSA-X94W-CG8G-G593 vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2019-3802

This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20. ExampleMatcher using ExampleMatcher.StringMatcher.STARTING, ExampleMatcher.StringMatcher.ENDING or ExampleMatcher.StringMatcher.CONTAINING could return more results than anticipated when a maliciously crafted...

am.ik.home:uaa-server (>=1.0.0, <=1.9.0), at.researchstudio.sat:won-core (>=0.2, <=0.9) +1129 more potentially affected by CVE-2019-3802 via org.springframework.data:spring-data-jpa (>=1.0.1.release, <=1.11.21.release)

org.springframework.data:spring-data-jpa MAVEN version =1.0.1.release, =1.0.0, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.2, =0.3, =0.3, =0.6 - at.researchstudio.sat:won-owner 0.3 - at.researchstudio.sat:won-owner-webapp 0.3 and more Source cves: CVE-2019-3802 Source advisory:...

bd.ac.seu.erp:model (0.0.2), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=3.5.0, <=3.6.0) +582 more potentially affected by CVE-2019-3802 via org.springframework.data:spring-data-jpa (>=2.0.0.release, <=2.0.14.release)

org.springframework.data:spring-data-jpa MAVEN version =2.0.0.release, =3.5.0, =3.5.0, =3.5.0, =0.9.1-rc1, =3.0.0.release, =3.0.1.release - cn.bjdd301:core-mvc 1.0.0 - cn.com.zhaoweiping:alpha-framework 2.0.0.release - cn.jbone:jbone-common 1.0.0 - cn.jbone:jbone-errors 1.0.0 -...

am.ik.home:uaa-server (>=1.0.0, <=1.9.0), at.researchstudio.sat:won-core (>=0.2, <=0.9) +1129 more potentially affected by CVE-2019-3802 via org.springframework.data:spring-data-jpa (>=1.0.1.release, <=1.11.21.release)

org.springframework.data:spring-data-jpa MAVEN version =1.0.1.release, =1.0.0, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.2, =0.3, =0.3, =0.6 - at.researchstudio.sat:won-owner 0.3 - at.researchstudio.sat:won-owner-webapp 0.3 and more Source cves: CVE-2019-3802 Source advisory:...

ai.hyacinth.framework:core-service-jpa-support (0.5.0), ai.hyacinth.framework:core-service-trigger-server (0.5.0) +512 more potentially affected by CVE-2019-3802 via org.springframework.data:spring-data-jpa (>=2.1.0.release, <=2.1.7.release)

org.springframework.data:spring-data-jpa MAVEN version =2.1.0.release, =3.7.0, =3.7.0, =3.7.0, =3.7.0, =3.8.0 - ch.puzzle:libpuzzle-demo-spring-boot-rest 0.1.0-rc1 and more Source cves: CVE-2019-3802 Source advisory: GHSA-XGGX-FX6W-V7CH...

ai.hyacinth.framework:core-service-jpa-support (0.5.0), ai.hyacinth.framework:core-service-trigger-server (0.5.0) +974 more potentially affected by CVE-2019-3802 via org.springframework.data:spring-data-jpa (>=2.0.0.release, <=2.1.7.release)

org.springframework.data:spring-data-jpa MAVEN version =2.0.0.release, =3.5.0, =3.6.0, =3.5.0, =3.5.0, =3.8.0 and more Source cves: CVE-2019-3802 Source advisory: OSV:GHSA-XGGX-FX6W-V7CH...

CVE-2019-3802

This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20. ExampleMatcher using ExampleMatcher.StringMatcher.STARTING, ExampleMatcher.StringMatcher.ENDING or ExampleMatcher.StringMatcher.CONTAINING could return more results than anticipated when a maliciously crafted...

CVE-2019-3802

This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20. ExampleMatcher using ExampleMatcher.StringMatcher.STARTING, ExampleMatcher.StringMatcher.ENDING or ExampleMatcher.StringMatcher.CONTAINING could return more results than anticipated when a maliciously crafted...