EUVD-2022-4947

Malicious code in bioql PyPI...

EUVD-2022-1875

Malicious code in bioql PyPI...

de.gedoplan:baselibs-wildfly (36.0.1_02), org.eclipse.jetty.documentation:code-examples (>=10.0.22, <=11.0.25) +16 more potentially affected by CVE-2024-12369 via org.wildfly.security:wildfly-elytron (>=2.3.0.final, <=2.6.0.final)

org.wildfly.security:wildfly-elytron MAVEN version =2.3.0.final, =10.0.22, =10.0.21, =10.0.21, =10.0.21, =10.0.21, =10.0.21, =26.0.0, =26.0.0, =26.0.0, =2.1.0.final, =2.1.6.final and more Source cves: CVE-2024-12369 Source advisory: MEND:CVE-2024-12369...

io.quarkus:quarkus-elytron-security-oauth2 (>=2.3.0.cr1, <=2.3.1.final), io.quarkus:quarkus-elytron-security-oauth2-deployment (>=2.3.0.cr1, <=2.3.1.final) +58 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.17.0.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.17.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - io.quarkus:quarkus-elytron-security-oauth2 =2.3.0.cr1,...

org.fakereplace:fakereplace-wildfly-tests (>=1.0.0.alpha6, <=1.0.0.alpha7), org.wildfly.bom:ejb-client-bom (>=13.0.0.alpha1, <=13.0.0.final) +5 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (>=4.0.0.beta16, <=4.0.37.final)

org.jboss:jboss-ejb-client MAVEN version =4.0.0.beta16, =1.0.0.alpha6, =13.0.0.alpha1, =1.0.0.alpha2, =11.0.0.alpha1, =11.0.0.alpha1, =11.0.0.alpha1, =11.0.0.alpha1, =22.0.1.final Source cves: CVE-2021-20250 Source advisory: GHSA-2259-H742-5VR4...

org.jboss:jboss-remote-naming (1.0.0.beta4) potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.0.beta12)

org.jboss:jboss-ejb-client MAVEN version 1.0.0.beta12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.jboss:jboss-remote-naming 1.0.0.beta4 Source cves: CVE-2021-20250 Source advisory:...

ch.inftec.ju:ju-testing-ee (>=4.1, <=4.2), org.jboss:jboss-remote-naming (>=1.0.0.final, <=1.0.5.final) potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.0.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - ch.inftec.ju:ju-testing-ee =4.1, =1.0.0.final, =1.0.5.final Source cves: CVE-2021-20250 Source...

org.jboss.as:jboss-as-ejb-client-bom (7.1.0.final), org.jboss.as:jboss-as-jms-client-bom (7.1.0.final) potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.2.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.jboss.as:jboss-as-ejb-client-bom 7.1.0.final - org.jboss.as:jboss-as-jms-client-bom 7.1.0.final...

ch.inftec.ju:ju-testing-ee (>=4.4-4, <=4.5.1-11), ch.inftec.ju:ju-util-ee (>=4.4-4, <=4.5.1-11) +6 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.5.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - ch.inftec.ju:ju-testing-ee =4.4-4, =4.4-4, =0.2.4, =0.2.9, =0.3.0 Source cves: CVE-2021-20250 Source...

org.jboss.as:jboss-as-ejb-client-bom (7.1.2.final), org.jboss.as:jboss-as-jms-client-bom (7.1.2.final) potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.10.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.10.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.jboss.as:jboss-as-ejb-client-bom 7.1.2.final - org.jboss.as:jboss-as-jms-client-bom 7.1.2.final...

org.jboss.as:jboss-as-ejb-client-bom (7.1.3.final), org.jboss.as:jboss-as-jms-client-bom (7.1.3.final) potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.11.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.11.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.jboss.as:jboss-as-ejb-client-bom 7.1.3.final - org.jboss.as:jboss-as-jms-client-bom 7.1.3.final...

org.jboss:jboss-remote-naming (>=1.0.6.final, <=2.0.0.beta2) potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.13.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.13.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.jboss:jboss-remote-naming =1.0.6.final, =2.0.0.beta2 Source cves: CVE-2021-20250 Source advisory...

ch.inftec.ju:ju-util-ee (>=4.1, <=4.2), com.github.marschall:osgi-remoting-ejb-jboss (0.2.0) +7 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.16.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.16.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - ch.inftec.ju:ju-util-ee =4.1, =3.0.39, =3.0.39, =3.0.53, =3.0.53, =7.1.83 Source cves: CVE-2021-2025...

org.wildfly:wildfly-ee (8.0.0.alpha1), org.wildfly:wildfly-ejb-client-bom (8.0.0.alpha1) +8 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.21.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.21.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.wildfly:wildfly-ee 8.0.0.alpha1 - org.wildfly:wildfly-ejb-client-bom 8.0.0.alpha1 -...

org.wildfly:wildfly-ee (8.0.0.alpha2), org.wildfly:wildfly-ejb-client-bom (8.0.0.alpha2) +8 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (1.0.22.final)

org.jboss:jboss-ejb-client MAVEN version 1.0.22.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.wildfly:wildfly-ee 8.0.0.alpha2 - org.wildfly:wildfly-ejb-client-bom 8.0.0.alpha2 -...

org.wildfly:wildfly-arquillian-common-domain (>=8.0.0.alpha3, <=8.0.0.beta1), org.wildfly:wildfly-arquillian-container-domain-managed (>=8.0.0.alpha3, <=8.0.0.beta1) +14 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.0.0.beta3)

org.jboss:jboss-ejb-client MAVEN version 2.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.wildfly:wildfly-arquillian-common-domain =8.0.0.alpha3, =8.0.0.alpha3, =8.0.0.alpha3,...

org.javafxdata:datafx-ejb-wildfly (8.0b1), org.javafxdata:datafx-samples (8.0b1) +25 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.0.0.beta5)

org.jboss:jboss-ejb-client MAVEN version 2.0.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.javafxdata:datafx-ejb-wildfly 8.0b1 - org.javafxdata:datafx-samples 8.0b1 -...

br.eti.clairton:ds-test (0.4.0), com.bertoncelj.wildflysingletonservice:wildfly-singleton-service (>=1.0.1, <=1.2.1) +52 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.0.0.final)

org.jboss:jboss-ejb-client MAVEN version 2.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - br.eti.clairton:ds-test 0.4.0 - com.bertoncelj.wildflysingletonservice:wildfly-singleton-service...

org.wildfly:wildfly-client-all (9.0.0.alpha1), org.wildfly:wildfly-clustering-ejb-spi (>=8.1.0.cr1, <=9.0.0.alpha1) +2 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.0.1.final)

org.jboss:jboss-ejb-client MAVEN version 2.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.wildfly:wildfly-client-all 9.0.0.alpha1 - org.wildfly:wildfly-clustering-ejb-spi =8.1.0.cr1,...

org.wildfly:wildfly-batch (>=9.0.0.beta1, <=9.0.0.cr1), org.wildfly:wildfly-batch-parent (>=9.0.0.beta1, <=9.0.0.cr1) +21 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.0.3.final)

org.jboss:jboss-ejb-client MAVEN version 2.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.wildfly:wildfly-batch =9.0.0.beta1, =9.0.0.beta1, =9.0.0.beta1, =9.0.0.beta1, =9.0.0.beta1,...