org.infinispan.wildfly:infinispan-wildfly-infinispan (11.0.0.dev04), org.infinispan:infinispan-distribution (11.0.0.dev04) +7 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-remote (11.0.0.dev04)

org.infinispan:infinispan-cachestore-remote MAVEN version 11.0.0.dev04 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-remote and may be impacted: - org.infinispan.wildfly:infinispan-wildfly-infinispan 11.0.0.dev04 ...

io.quarkus:quarkus-test-infinispan-client (>=2.13.1.final, <=2.13.7.final), org.infinispan:infinispan-distribution (13.0.11.final) +12 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-remote (13.0.11.final)

org.infinispan:infinispan-cachestore-remote MAVEN version 13.0.11.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-remote and may be impacted: - io.quarkus:quarkus-test-infinispan-client =2.13.1.final,...

org.infinispan:infinispan-cachestore-remote (12.0.0.dev05), org.infinispan:infinispan-cdi-remote (12.0.0.dev05) +12 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-client-hotrod (12.0.0.dev05)

org.infinispan:infinispan-client-hotrod MAVEN version 12.0.0.dev05 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-client-hotrod and may be impacted: - org.infinispan:infinispan-cachestore-remote 12.0.0.dev05 -...

io.smallrye.reactive:smallrye-mutiny-vertx-web-sstore-infinispan (>=3.3.0, <=3.4.2), io.vertx:vertx-stack-depchain (>=4.4.0, <=4.4.3) +25 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-client-hotrod (13.0.15.final)

org.infinispan:infinispan-client-hotrod MAVEN version 13.0.15.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-client-hotrod and may be impacted: - io.smallrye.reactive:smallrye-mutiny-vertx-web-sstore-infinispan =3.3.0,...

org.infinispan:infinispan-cachestore-remote (13.0.4.final), org.infinispan:infinispan-cdi-remote (13.0.4.final) +19 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-client-hotrod (13.0.4.final)

org.infinispan:infinispan-client-hotrod MAVEN version 13.0.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-client-hotrod and may be impacted: - org.infinispan:infinispan-cachestore-remote 13.0.4.final -...

org.infinispan.wildfly:infinispan-wildfly-infinispan (11.0.0.alpha), org.infinispan:infinispan-cachestore-remote (11.0.0.alpha) +12 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-client-hotrod (11.0.0.alpha)

org.infinispan:infinispan-client-hotrod MAVEN version 11.0.0.alpha is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-client-hotrod and may be impacted: - org.infinispan.wildfly:infinispan-wildfly-infinispan 11.0.0.alpha -...

org.infinispan:infinispan-docs (12.1.2.final), org.infinispan:infinispan-javadoc-all (12.1.2.final) +8 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc (12.1.2.final)

org.infinispan:infinispan-cachestore-jdbc MAVEN version 12.1.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-jdbc and may be impacted: - org.infinispan:infinispan-docs 12.1.2.final -...

org.infinispan:infinispan-docs (12.0.0.dev05), org.infinispan:infinispan-javadoc-all (12.0.0.dev05) +7 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc (12.0.0.dev05)

org.infinispan:infinispan-cachestore-jdbc MAVEN version 12.0.0.dev05 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-jdbc and may be impacted: - org.infinispan:infinispan-docs 12.0.0.dev05 -...

org.infinispan:infinispan-docs (12.1.16.final), org.infinispan:infinispan-server-integration (12.1.16.final) +6 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-jdbc (12.1.16.final)

org.infinispan:infinispan-cachestore-jdbc MAVEN version 12.1.16.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-jdbc and may be impacted: - org.infinispan:infinispan-docs 12.1.16.final -...

[SECURITY] Fedora 38 Update: python3.12-3.12.1-2.fc38

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...

SUSE SLES15 / openSUSE 15 Security Update : tinyxml (SUSE-SU-2023:4958-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4958-1 advisory. - CVE-2023-34194: Fixed reachable assertion may lead to denial of service bsc1218040. Tenable has extracted the preceding description bloc...

Malicious code in spectro-cloud-docs (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f5f48697cbdd8e8f64a4634d5d8ea37633a9f97394cf53ceac7d2e6a05fb41e Any computer that has this package install...

MAL-2023-8700 Malicious code in spectro-cloud-docs (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f5f48697cbdd8e8f64a4634d5d8ea37633a9f97394cf53ceac7d2e6a05fb41e Any computer that has this package install...

1337-docs (>=1.0.10, <=1.0.16), 1pointfixed1 (1.3.5) +3709 more potentially affected by CVE-2023-26920 via fast-xml-parser (>=2.3.1, <=4.1.1)

fast-xml-parser NPM version =2.3.1, =1.0.10, =2.0.0, =1.0.0, =7.0.35, =2.0.0, =1.0.0, =3.0.0-beta.0, =3.0.0-beta.0, =2.73.2, =1.6.66, =0.5.0, =0.9.2 - @adamkac/gus-api-regon 1.0.2 and more Source cves: CVE-2023-26920 Source advisory: MEND:CVE-2023-26920...

org.springframework.boot:spring-boot-docs (1.1.1.release), org.springframework.boot:spring-boot-starter-actuator (1.1.1.release) +1 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.1.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - org.springframework.boot:spring-boot-docs 1.1.1.release -...

org.springframework.boot:spring-boot-docs (1.1.11.release), org.springframework.boot:spring-boot-starter-actuator (1.1.11.release) +1 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.11.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - org.springframework.boot:spring-boot-docs 1.1.11.release -...

org.springframework.boot:spring-boot-docs (1.1.2.release), org.springframework.boot:spring-boot-starter-actuator (1.1.2.release) +1 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.2.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - org.springframework.boot:spring-boot-docs 1.1.2.release -...

org.springframework.boot:spring-boot-docs (1.1.10.release), org.springframework.boot:spring-boot-starter-actuator (1.1.10.release) +1 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.10.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - org.springframework.boot:spring-boot-docs 1.1.10.release -...

com.stormpath.spring:stormpath-sdk-examples-zuul-spring-cloud-starter (>=1.5.0, <=1.5.1), com.stormpath.spring:stormpath-zuul-spring-cloud-starter (>=1.5.0, <=1.5.1) +4 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.0.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: -...

org.springframework.boot:spring-boot-docs (1.1.12.release), org.springframework.boot:spring-boot-starter-actuator (1.1.12.release) +1 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.12.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - org.springframework.boot:spring-boot-docs 1.1.12.release -...