EUVD-2024-1177

Malicious code in bioql PyPI...

jberet: jberet-core logging database credentials

A vulnerability was found in jberet-core logging. An exception in 'dbProperties' might display user credentials such as the username and password for the database-connection...

jberet: jberet-core logging database credentials

A vulnerability was found in jberet-core logging. An exception in 'dbProperties' might display user credentials such as the username and password for the database-connection...

jberet: jberet-core logging database credentials

A vulnerability was found in jberet-core logging. An exception in 'dbProperties' might display user credentials such as the username and password for the database-connection...

Sensitive Information Into Log File

jberet-core is vulnerable to Insertion of Sensitive Information into Log File. The vulnerability is due to missing data masking during logging via the getConnection method within JdbcRepository.java. It occurs when error messages include sensitive information, such as database connection properti...

GHSA-9WMF-XF3H-R8PR Jberet: jberet-core logging database credentials

A vulnerability was found in jberet-core logging. An exception in 'dbProperties' might display user credentials such as the username and password for the database-connection...

org.jberet.test-apps:chunkpartition (1.0.0.alpha4), org.jberet.test-apps:chunkstop (1.0.0.alpha4) +14 more potentially affected by CVE-2024-1102 via org.jberet:jberet-core (1.0.0.alpha4)

org.jberet:jberet-core MAVEN version 1.0.0.alpha4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jberet:jberet-core and may be impacted: - org.jberet.test-apps:chunkpartition 1.0.0.alpha4 - org.jberet.test-apps:chunkstop 1.0.0.alpha4 -...

org.jberet.test-apps:chunkpartition (1.0.0.beta1), org.jberet.test-apps:chunkstop (1.0.0.beta1) +11 more potentially affected by CVE-2024-1102 via org.jberet:jberet-core (1.0.0.beta1)

org.jberet:jberet-core MAVEN version 1.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jberet:jberet-core and may be impacted: - org.jberet.test-apps:chunkpartition 1.0.0.beta1 - org.jberet.test-apps:chunkstop 1.0.0.beta1 -...

org.jberet.test-apps:chunkpartition (1.0.0.beta2), org.jberet.test-apps:chunkstop (1.0.0.beta2) +11 more potentially affected by CVE-2024-1102 via org.jberet:jberet-core (1.0.0.beta2)

org.jberet:jberet-core MAVEN version 1.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jberet:jberet-core and may be impacted: - org.jberet.test-apps:chunkpartition 1.0.0.beta2 - org.jberet.test-apps:chunkstop 1.0.0.beta2 -...

org.jberet.test-apps:chunkpartition (1.0.0.cr1), org.jberet.test-apps:chunkstop (1.0.0.cr1) +14 more potentially affected by CVE-2024-1102 via org.jberet:jberet-core (1.0.0.cr1)

org.jberet:jberet-core MAVEN version 1.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jberet:jberet-core and may be impacted: - org.jberet.test-apps:chunkpartition 1.0.0.cr1 - org.jberet.test-apps:chunkstop 1.0.0.cr1 -...

org.jberet:jberet-distribution (1.0.0.cr2), org.jberet:jberet-se (1.0.0.cr2) potentially affected by CVE-2024-1102 via org.jberet:jberet-core (1.0.0.cr2)

org.jberet:jberet-core MAVEN version 1.0.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jberet:jberet-core and may be impacted: - org.jberet:jberet-distribution 1.0.0.cr2 - org.jberet:jberet-se 1.0.0.cr2 Source cves: CVE-2024-1102 Source...

org.jberet:jberet-distribution (1.0.0.final), org.jberet:jberet-se (1.0.0.final) +3 more potentially affected by CVE-2024-1102 via org.jberet:jberet-core (1.0.0.final)

org.jberet:jberet-core MAVEN version 1.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jberet:jberet-core and may be impacted: - org.jberet:jberet-distribution 1.0.0.final - org.jberet:jberet-se 1.0.0.final - org.wildfly:wildfly-batch...

org.jberet:jberet-distribution (1.0.1.beta), org.jberet:jberet-se (1.0.1.beta) potentially affected by CVE-2024-1102 via org.jberet:jberet-core (1.0.1.beta)

org.jberet:jberet-core MAVEN version 1.0.1.beta is affected by a known vulnerability. The following packages have a transitive dependency on org.jberet:jberet-core and may be impacted: - org.jberet:jberet-distribution 1.0.1.beta - org.jberet:jberet-se 1.0.1.beta Source cves: CVE-2024-1102 Source...

org.jberet:jberet-distribution (1.0.1.cr1), org.jberet:jberet-se (1.0.1.cr1) potentially affected by CVE-2024-1102 via org.jberet:jberet-core (1.0.1.cr1)

org.jberet:jberet-core MAVEN version 1.0.1.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jberet:jberet-core and may be impacted: - org.jberet:jberet-distribution 1.0.1.cr1 - org.jberet:jberet-se 1.0.1.cr1 Source cves: CVE-2024-1102 Source...

org.jberet:jberet-distribution (1.0.1.cr2), org.jberet:jberet-se (1.0.1.cr2) potentially affected by CVE-2024-1102 via org.jberet:jberet-core (1.0.1.cr2)

org.jberet:jberet-core MAVEN version 1.0.1.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jberet:jberet-core and may be impacted: - org.jberet:jberet-distribution 1.0.1.cr2 - org.jberet:jberet-se 1.0.1.cr2 Source cves: CVE-2024-1102 Source...

org.jberet:jberet-distribution (1.0.1.final), org.jberet:jberet-se (1.0.1.final) potentially affected by CVE-2024-1102 via org.jberet:jberet-core (1.0.1.final)

org.jberet:jberet-core MAVEN version 1.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jberet:jberet-core and may be impacted: - org.jberet:jberet-distribution 1.0.1.final - org.jberet:jberet-se 1.0.1.final Source cves: CVE-2024-1102 Sour...

org.jberet:jberet-distribution (1.0.2.final), org.jberet:jberet-se (1.0.2.final) potentially affected by CVE-2024-1102 via org.jberet:jberet-core (1.0.2.final)

org.jberet:jberet-core MAVEN version 1.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jberet:jberet-core and may be impacted: - org.jberet:jberet-distribution 1.0.2.final - org.jberet:jberet-se 1.0.2.final Source cves: CVE-2024-1102 Sour...

org.jberet:jberet-distribution (1.1.0.alpha1), org.jberet:jberet-se (1.1.0.alpha1) potentially affected by CVE-2024-1102 via org.jberet:jberet-core (1.1.0.alpha1)

org.jberet:jberet-core MAVEN version 1.1.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jberet:jberet-core and may be impacted: - org.jberet:jberet-distribution 1.1.0.alpha1 - org.jberet:jberet-se 1.1.0.alpha1 Source cves: CVE-2024-1102...

org.jberet:jberet-distribution (1.1.0.alpha2), org.jberet:jberet-se (1.1.0.alpha2) potentially affected by CVE-2024-1102 via org.jberet:jberet-core (1.1.0.alpha2)

org.jberet:jberet-core MAVEN version 1.1.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jberet:jberet-core and may be impacted: - org.jberet:jberet-distribution 1.1.0.alpha2 - org.jberet:jberet-se 1.1.0.alpha2 Source cves: CVE-2024-1102...

org.jberet:jberet-distribution (1.1.0.alpha3), org.jberet:jberet-se (1.1.0.alpha3) potentially affected by CVE-2024-1102 via org.jberet:jberet-core (1.1.0.alpha3)

org.jberet:jberet-core MAVEN version 1.1.0.alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jberet:jberet-core and may be impacted: - org.jberet:jberet-distribution 1.1.0.alpha3 - org.jberet:jberet-se 1.1.0.alpha3 Source cves: CVE-2024-1102...