org.keycloak:keycloak-authz-policy-drools (2.4.0.final), org.keycloak:keycloak-dependencies-server-all (2.4.0.final) +5 more potentially affected by CVE-2018-10894 via org.keycloak:keycloak-services (2.4.0.final)

org.keycloak:keycloak-services MAVEN version 2.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.4.0.final -...

org.keycloak:keycloak-dependencies-server-all (1.9.3.final), org.keycloak:keycloak-dependencies-server-min (1.9.3.final) +2 more potentially affected by CVE-2018-10894 via org.keycloak:keycloak-services (1.9.3.final)

org.keycloak:keycloak-services MAVEN version 1.9.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.3.final -...

org.keycloak:keycloak-dependencies-server-all (1.9.5.final), org.keycloak:keycloak-dependencies-server-min (1.9.5.final) +2 more potentially affected by CVE-2018-10894 via org.keycloak:keycloak-services (1.9.5.final)

org.keycloak:keycloak-services MAVEN version 1.9.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.5.final -...

org.keycloak:keycloak-dependencies-server-all (1.9.8.final), org.keycloak:keycloak-dependencies-server-min (1.9.8.final) +2 more potentially affected by CVE-2018-10894 via org.keycloak:keycloak-services (1.9.8.final)

org.keycloak:keycloak-services MAVEN version 1.9.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.8.final -...

org.keycloak:keycloak-account-freemarker (1.8.1.final), org.keycloak:keycloak-broker-oidc (1.8.1.final) +9 more potentially affected by CVE-2018-10894 via org.keycloak:keycloak-services (1.8.1.final)

org.keycloak:keycloak-services MAVEN version 1.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.8.1.final - org.keycloak:keycloak-broker-oidc...

org.keycloak:keycloak-adapter-core (2.5.0.final), org.keycloak:keycloak-admin-client (2.5.0.final) +52 more potentially affected by CVE-2018-14658 via org.keycloak:keycloak-core (2.5.0.final)

org.keycloak:keycloak-core MAVEN version 2.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.5.0.final - org.keycloak:keycloak-admin-client 2.5.0.final -...

GHSA-PPRQ-4488-WGQX Insecure transport protocol in Gradle

Gradle versions from 1.4 to 5.3.1 use an insecure HTTP URL to download dependencies when the built-in JavaScript or CoffeeScript Gradle plugins are used. Dependency artifacts could have been maliciously compromised by a MITM attack against the ajax.googleapis.com web site...

Insecure transport protocol in Gradle

Gradle versions from 1.4 to 5.3.1 use an insecure HTTP URL to download dependencies when the built-in JavaScript or CoffeeScript Gradle plugins are used. Dependency artifacts could have been maliciously compromised by a MITM attack against the ajax.googleapis.com web site...

@kitinggan/didactic-eureka (1.1.4), @qsb-cli-test/command (1.0.10) +37 more potentially affected by CVE-2013-4941 via yui (>=3.5.0, <=3.9.1)

yui NPM version =3.5.0, =1.0.8, =1.0.8, =1.0.6, =1.0.6, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.1.1, =0.1.4 and more Source cves: CVE-2013-4941 Source advisory: OSV:GHSA-64R3-582J-FRQM...

malicious crate `rustdecimal`

The Rust Security Response WG and the crates.io team were notified1 on 2022-05-02 of the existence of the malicious crate rustdecimal, which contained malware. The crate name was intentionally similar to the name of the popular rustdecimal2 crate, hoping that potential victims would misspell its...

[SECURITY] Fedora 36 Update: golang-github-appc-docker2aci-0.17.2-8.fc36

Docker2aci is a small library and CLI binary that converts Docker images to A CI. It takes as input either a file generated by "docker save" or a Docker regist ry URL. It gets all the layers of a Docker image and squashes them into an ACI image. Optionally, it can generate one ACI for each layer,...

10tcl (>=0.0.1, <=0.0.10), 317-project (0.0.0) +1667 more potentially affected by CVE-2013-7371 via connect (>=2.0.0, <=2.8.1)

connect NPM version =2.0.0, =0.0.1, =1.0.1, =0.0.5, =0.0.2, =1.0.0, =0.0.2, =0.0.2, =0.0.2, =0.0.1, =1.0.3, =0.0.5, =1.0.39 and more Source cves: CVE-2013-7371 Source advisory: OSV:GHSA-6W62-83G6-RFHJ...

org.keycloak:keycloak-broker-saml (1.2.0.cr1), org.keycloak:keycloak-dependencies-server-all (1.2.0.cr1) +1 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (1.2.0.cr1)

org.keycloak:keycloak-saml-core MAVEN version 1.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.2.0.cr1 - org.keycloak:keycloak-dependencies-server-all...

org.keycloak:keycloak-dependencies-server-all (3.1.0.final), org.keycloak:keycloak-saml-adapter-api-public (3.1.0.final) +24 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (3.1.0.final)

org.keycloak:keycloak-saml-core MAVEN version 3.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.1.0.final -...

org.keycloak:keycloak-broker-saml (1.8.0.cr2), org.keycloak:keycloak-dependencies-server-all (1.8.0.cr2) +19 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (1.8.0.cr2)

org.keycloak:keycloak-saml-core MAVEN version 1.8.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.8.0.cr2 - org.keycloak:keycloak-dependencies-server-all...

org.keycloak:keycloak-dependencies-server-all (3.1.0.cr1), org.keycloak:keycloak-saml-adapter-api-public (3.1.0.cr1) +24 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (3.1.0.cr1)

org.keycloak:keycloak-saml-core MAVEN version 3.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.1.0.cr1 -...

org.keycloak:keycloak-dependencies-server-all (3.3.0.cr2), org.keycloak:keycloak-saml-adapter-api-public (3.3.0.cr2) +26 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (3.3.0.cr2)

org.keycloak:keycloak-saml-core MAVEN version 3.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.3.0.cr2 -...

org.keycloak:keycloak-broker-saml (1.3.1.final), org.keycloak:keycloak-dependencies-server-all (1.3.1.final) +1 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (1.3.1.final)

org.keycloak:keycloak-saml-core MAVEN version 1.3.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.3.1.final - org.keycloak:keycloak-dependencies-server-a...

org.keycloak:keycloak-dependencies-server-all (2.3.0.final), org.keycloak:keycloak-saml-adapter-api-public (2.3.0.final) +21 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (2.3.0.final)

org.keycloak:keycloak-saml-core MAVEN version 2.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.3.0.final -...

org.keycloak:keycloak-broker-saml (1.5.0.final), org.keycloak:keycloak-dependencies-server-all (1.5.0.final) +1 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (1.5.0.final)

org.keycloak:keycloak-saml-core MAVEN version 1.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.5.0.final - org.keycloak:keycloak-dependencies-server-a...