org.apache.camel:camel-example-cxf (1.5.0), org.apache.cxf:cxf-eclipse-plugin (2.1.3) potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.1.3)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 1.5.0 - org.apache.cxf:cxf-eclipse-plugin 2.1.3 Sour...

org.apache.cxf:cxf-eclipse-plugin (2.0.8) potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.0.8)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf:cxf-eclipse-plugin 2.0.8 Source cves: CVE-2025-48913 Source advisory:...

org.apache.camel:camel-example-cxf (1.4.0), org.apache.cxf:cxf-eclipse-plugin (2.1.1) potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.1.1)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 1.4.0 - org.apache.cxf:cxf-eclipse-plugin 2.1.1 Sour...

org.apache.camel:camel-example-cxf (>=1.6.0, <=2.0-m1), org.apache.cxf:apache-cxf (2.1.4) +8 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.1.4)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf =1.6.0, =2.0-m1 - org.apache.cxf:apache-cxf 2.1.4 -...

org.apache.cxf:apache-cxf (2.1), org.apache.cxf:cxf-anttasks (2.1) +8 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.1)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf:apache-cxf 2.1 - org.apache.cxf:cxf-anttasks 2.1 -...

org.apache.cxf:cxf-anttasks (2.1.1), org.apache.cxf:cxf-eclipse-plugin (2.1.1) +4 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.1.1)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf:cxf-anttasks 2.1.1 - org.apache.cxf:cxf-eclipse-plugin 2.1.1 -...

org.apache.cxf:apache-cxf (2.1.6), org.apache.cxf:cxf-anttasks (2.1.6) +6 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.1.6)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf:apache-cxf 2.1.6 - org.apache.cxf:cxf-anttasks 2.1.6 -...

org.apache.cxf:cxf-anttasks (2.1.3), org.apache.cxf:cxf-eclipse-plugin (2.1.3) +5 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.1.3)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf:cxf-anttasks 2.1.3 - org.apache.cxf:cxf-eclipse-plugin 2.1.3 -...

GHSA-5R8J-QMCM-7G7Q Apache UIMA Java SDK Deserialization of Untrusted Data, Improper Input Validation vulnerability

Deserialization of Untrusted Data, Improper Input Validation vulnerability in Apache UIMA Java SDK. This issue affects Apache UIMA Java SDK before 3.5.0. Users are recommended to upgrade to version 3.5.0, which fixes the issue. There are several locations in the code where serialized Java objects...

com.google.code.maven-svn-wagon:maven-svn-wagon (>=1.1, <=1.4), jp.pizzafactory.maven:s3-maven-wagon (3.3) +42 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (1.4.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.google.code.maven-svn-wagon:maven-svn-wagon =1.1, =3.2, =1.1.1, =1.0-alpha-2, =1.0-beta-3,...

org.apache.cxf:apache-cxf (2.1.6), org.apache.cxf:cxf-distribution-manifest (2.1.6) +3 more potentially affected by CVE-2020-1954 via org.apache.cxf:cxf-rt-management (2.1.6)

org.apache.cxf:cxf-rt-management MAVEN version 2.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-management and may be impacted: - org.apache.cxf:apache-cxf 2.1.6 - org.apache.cxf:cxf-distribution-manifest 2.1.6 -...

org.apache.cxf:cxf-eclipse-plugin (2.0.8), org.apache.cxf:cxf-rt-transports-jms (2.0.8) potentially affected by CVE-2020-1954 via org.apache.cxf:cxf-rt-management (2.0.8)

org.apache.cxf:cxf-rt-management MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-management and may be impacted: - org.apache.cxf:cxf-eclipse-plugin 2.0.8 - org.apache.cxf:cxf-rt-transports-jms 2.0.8 Source cve...

org.apache.camel:camel-cxf (1.4.0), org.apache.camel:camel-example-cxf (1.4.0) +4 more potentially affected by CVE-2020-1954 via org.apache.cxf:cxf-rt-management (2.1.1)

org.apache.cxf:cxf-rt-management MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-management and may be impacted: - org.apache.camel:camel-cxf 1.4.0 - org.apache.camel:camel-example-cxf 1.4.0 -...

org.apache.camel:camel-cxf (1.5.0), org.apache.camel:camel-example-cxf (1.5.0) +4 more potentially affected by CVE-2020-1954 via org.apache.cxf:cxf-rt-management (2.1.3)

org.apache.cxf:cxf-rt-management MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-management and may be impacted: - org.apache.camel:camel-cxf 1.5.0 - org.apache.camel:camel-example-cxf 1.5.0 -...

org.apache.cxf:cxf-eclipse-plugin (2.0.9), org.apache.cxf:cxf-rt-transports-jms (2.0.9) potentially affected by CVE-2020-1954 via org.apache.cxf:cxf-rt-management (2.0.9)

org.apache.cxf:cxf-rt-management MAVEN version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-management and may be impacted: - org.apache.cxf:cxf-eclipse-plugin 2.0.9 - org.apache.cxf:cxf-rt-transports-jms 2.0.9 Source cve...

org.apache.cxf:apache-cxf (2.0.12), org.apache.cxf:cxf-distribution-manifest (2.0.12) +7 more potentially affected by CVE-2018-8039 via org.apache.cxf:cxf-rt-transports-http (2.0.12)

org.apache.cxf:cxf-rt-transports-http MAVEN version 2.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-http and may be impacted: - org.apache.cxf:apache-cxf 2.0.12 - org.apache.cxf:cxf-distribution-manifest 2.0.12 -...