CVE-2025-12383

CVE-2025-12383 is a race-condition vulnerability in Eclipse Jersey that can cause ignoring of critical SSL configurations (e.g., mutual authentication, custom key/trust stores), potentially enabling unauthorized trust in insecure servers. Affected assets in the provided IBM context include IBM St...

CVE-2025-12383 Race Condition allows Bypass of Trust Restrictions

In Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 a race condition can cause ignoring of critical SSL configurations - such as mutual authentication, custom key/trust stores, and other security settings. This issue may result in SSLHandshakeException under normal circumstances, but under certain...

PT-2025-47323

Name of the Vulnerable Software and Affected Versions Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 Description A race condition in Eclipse Jersey’s SSL configuration processing can lead to the ignoring of critical SSL configurations, including mutual authentication and custom key/trust stores. Thi...

CVE-2025-12383: Concurrent Execution using Shared Resource with Improper Synchronization

In Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 a race condition can cause ignoring of critical SSL configurations - such as mutual authentication, custom key/trust stores, and other security settings. This issue may result in SSLHandshakeException under normal circumstances, but under certain...

Eclipse Jersey 竞争条件问题漏洞

Eclipse Jersey is a Java Web services development framework from the Eclipse Foundation. A Competitive Conditions Issue vulnerability exists in Eclipse Jersey versions 2.45, 3.0.16, and 3.1.9, which stems from a competitive condition that could lead to the omission of critical SSL configurations,...

EUVD-2025-178302

Malicious code in janus-regulus-eclipse-castor npm...

EUVD-2025-179200

Malicious code in eclipse-ursa-element-ui-middleware npm...

EUVD-2025-179636

Malicious code in commitlint-chalk-eclipse-init npm...

EUVD-2025-175775

Malicious code in uranology-less-markdown-pdf-eclipse npm...

EUVD-2025-180248

Malicious code in atlas-repository-nova-eclipse npm...

EUVD-2025-176939

Malicious code in public-eclipse-wavefunction-entanglement npm...

EUVD-2025-175743

Malicious code in vega-eclipse-paleoclimatology-lacerta npm...

EUVD-2025-178721

Malicious code in geodynamo-callback-less-eclipse npm...

EUVD-2025-179204

Malicious code in eclipse-hercules-europa-prettier-plugin-markdown npm...

MAL-2025-186678 Malicious code in eclipse-hercules-europa-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c819411e05d0061457e9887c6906e3929d2896491c60dcced2f30818f4ef45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180308

Malicious code in asteroid-winston-eclipse-hugo npm...

EUVD-2025-176574

Malicious code in sadr-corvus-janus-eclipse npm...

EUVD-2025-179642

Malicious code in commitizen-eclipse-sadr-chariklo npm...

Malicious code in commitlint-chalk-eclipse-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b08cb43ec4ac2e4a214da7f273798b819d8970ac0a947c0225b6f9a4d62c83b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-ursa-element-ui-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b2f32fc1e6c1adb25c4d848fbe498ef1b40cff343779a68a89fa75d88f08b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...