org.jenkins-ci.main:jenkins-test-harness (1.531), org.jenkins-ci.main:jenkins-war (1.531) +3 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.531)

org.jenkins-ci.main:jenkins-core MAVEN version 1.531 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.531 - org.jenkins-ci.main:jenkins-war 1.531 -...

org.jenkins-ci.main:jenkins-test-harness (1.466.1), org.jenkins-ci.main:jenkins-war (1.466.1) +2 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.466.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.466.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.466.1 - org.jenkins-ci.main:jenkins-war 1.466.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.423), org.jenkins-ci.main:jenkins-war (1.423) +4 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.423)

org.jenkins-ci.main:jenkins-core MAVEN version 1.423 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.423 - org.jenkins-ci.main:jenkins-war 1.423 -...

org.jenkins-ci.main:jenkins-test-harness (1.409.1), org.jenkins-ci.main:jenkins-war (1.409.1) +2 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.409.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.409.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.409.1 - org.jenkins-ci.main:jenkins-war 1.409.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.412), org.jenkins-ci.main:jenkins-war (1.412) +5 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.412)

org.jenkins-ci.main:jenkins-core MAVEN version 1.412 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.412 - org.jenkins-ci.main:jenkins-war 1.412 -...

org.jenkins-ci.main:jenkins-test-harness (1.409.3), org.jenkins-ci.main:jenkins-war (1.409.3) +2 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.409.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.409.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.409.3 - org.jenkins-ci.main:jenkins-war 1.409.3 -...

com.korwe:kordapt-core (>=1.0.1, <=1.1.2), com.korwe:kordapt-gradle-plugin (>=1.0.1, <=1.1.2) +17 more potentially affected by CVE-2021-41973 via org.apache.mina:mina-core (1.0.1)

org.apache.mina:mina-core MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mina:mina-core and may be impacted: - com.korwe:kordapt-core =1.0.1, =1.0.1, =1.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =1.0, =1.5.0, =2.9.8 -...

com.alexkasko.krakatau:krakatau-maven-plugin-test (>=1.0, <=1.1), com.alexkasko.netty:netty-ftp-receiver (>=1.0, <=1.2.3) +4 more potentially affected by CVE-2021-37137 via org.jboss.netty:netty (3.2.8.final)

org.jboss.netty:netty MAVEN version 3.2.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.netty:netty and may be impacted: - com.alexkasko.krakatau:krakatau-maven-plugin-test =1.0, =1.0, =0.12.1, =1.0.0, =1.0.3 - com.emc.ecs:nfsclient...

org.apache.maven.continuum:continuum-cc (>=1.0-alpha-4, <=1.0-beta-1), org.apache.maven.continuum:continuum-core (>=1.0-alpha-4, <=1.0-beta-1) +5 more potentially affected by CVE-2021-26291 via org.apache.maven:maven-core (2.0-beta-1)

org.apache.maven:maven-core MAVEN version 2.0-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.maven:maven-core and may be impacted: - org.apache.maven.continuum:continuum-cc =1.0-alpha-4, =1.0-alpha-4, =1.0-alpha-4, =1.0-alpha-4,...

com.sshtools:codeswitcher-maven-plugin (2.1.1), org.codehaus.mojo:build-helper-maven-plugin (>=1.3, <=1.5) potentially affected by CVE-2021-26291 via org.apache.maven:maven-core (2.0.2)

org.apache.maven:maven-core MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.maven:maven-core and may be impacted: - com.sshtools:codeswitcher-maven-plugin 2.1.1 - org.codehaus.mojo:build-helper-maven-plugin =1.3, =1.5...

io.github.htools:htools (>=0.26, <=0.27), io.github.k3nn:k3nn (0.01) +11 more potentially affected by CVE-2021-26291 via org.apache.maven:maven-compat (2.2.1)

org.apache.maven:maven-compat MAVEN version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.maven:maven-compat and may be impacted: - io.github.htools:htools =0.26, =0.0.19, =0.0.19, =0.0.19, =0.0.15, =1.0-beta-5, =1.5, =1.16 Source...

org.apache.maven:maven-archiver (2.0-alpha-1), org.apache.maven:maven-plugin-tools-api (2.0-alpha-1) +3 more potentially affected by CVE-2021-26291 via org.apache.maven:maven-core (2.0-alpha-1)

org.apache.maven:maven-core MAVEN version 2.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.maven:maven-core and may be impacted: - org.apache.maven:maven-archiver 2.0-alpha-1 - org.apache.maven:maven-plugin-tools-api 2.0-alpha-1 -...

com.jcabi:jcabi-aspects (0.7.8), com.jcabi:jcabi-heroku-maven-plugin (0.7.8) +4 more potentially affected by CVE-2020-10693 via org.hibernate:hibernate-validator (5.0.0.beta1)

org.hibernate:hibernate-validator MAVEN version 5.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.jcabi:jcabi-aspects 0.7.8 - com.jcabi:jcabi-heroku-maven-plugin 0.7.8 -...

com.jcabi:jcabi-aspects (0.7.14), com.jcabi:jcabi-heroku-maven-plugin (0.7.14) +2 more potentially affected by CVE-2020-10693 via org.hibernate:hibernate-validator (5.0.0.cr2)

org.hibernate:hibernate-validator MAVEN version 5.0.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.jcabi:jcabi-aspects 0.7.14 - com.jcabi:jcabi-heroku-maven-plugin 0.7.14 -...

rhel8 bug fix and enhancement update

An update is available for jmc, ee4j-parent, jaf, HdrHistogram, lz4-java, owasp-java-encoder, directory-maven-plugin, jmc-core. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

org.webjars:emberjs (>=1.0.0-rc.4, <=1.0.0-rc.6), ro.isdc.wro4j:wro4j-extensions (1.7.1) +1 more potentially affected by CVE-2021-23369 via org.webjars:handlebars (1.0.0-rc.4)

org.webjars:handlebars MAVEN version 1.0.0-rc.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:handlebars and may be impacted: - org.webjars:emberjs =1.0.0-rc.4, =1.0.0-rc.6 - ro.isdc.wro4j:wro4j-extensions 1.7.1 -...

org.webjars:emberjs (1.2.0), ro.isdc.wro4j:wro4j-extensions (1.7.3) +1 more potentially affected by CVE-2021-23369 via org.webjars:handlebars (1.1.2)

org.webjars:handlebars MAVEN version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:handlebars and may be impacted: - org.webjars:emberjs 1.2.0 - ro.isdc.wro4j:wro4j-extensions 1.7.3 - ro.isdc.wro4j:wro4j-maven-plugin 1.7.3 Source...

io.undertow:undertow-servlet (1.0.14.final), io.undertow:undertow-websockets-jsr (1.0.14.final) +1 more potentially affected by CVE-2020-10719 via io.undertow:undertow-core (1.0.14.final)

io.undertow:undertow-core MAVEN version 1.0.14.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.14.final - io.undertow:undertow-websockets-jsr 1.0.14.final -...

io.inkstand:scribble-http (>=0.3.0, <=0.3.2.1), io.mangoo:mangooio-core (>=2.0.0-beta6, <=2.0.0-beta7) +8 more potentially affected by CVE-2020-10719 via io.undertow:undertow-core (1.3.6.final)

io.undertow:undertow-core MAVEN version 1.3.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.inkstand:scribble-http =0.3.0, =2.0.0-beta6, =2.0.0-beta6, =2.0.0-beta6, =2.0.0-beta6, =0.4.0-m1,...

Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI Generator Maven plugin

Impact Using File.createTempFile in JDK will result in creating and using insecure temporary files that can leave application and system data vulnerable to attacks. This vulnerability only impacts unix-like systems where the local system temporary directory is shared between all users. This...