io.gitee.sylarsylar:maplex (>=1.0, <=5.5.12), org.apache.tomcat.embed:tomcat-embed-jasper (8.5.88) +2 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (8.5.88)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.88 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - io.gitee.sylarsylar:maplex =1.0, =3.21.0, =3.23.5 Source cves: CVE-2026-4128...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.104), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.104) +1 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.104)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.104 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.104 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.99), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.99) +1 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (7.0.99)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.99 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.99 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.104), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.104) +1 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (7.0.104)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.104 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.104 -...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.10, <=0.1.12), com.github.surpassm:liaoin-security-app (0.0.1.release) +7 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.5.15.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.5.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: -...

EUVD-2024-2493

Malicious code in bioql PyPI...

Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to arbitrary code execution due to redisson-3.17.7 (CVE-2023-42809)

Summary redisson is used by DataStage on Cloud Pak for Data as part of the Redis Java client. Vulnerability Details CVEID:CVE-2023-42809 DESCRIPTION: Redisson could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By persuading a victim to...

org.redisson:redisson-tomcat-11 (>=3.38.0, <=3.39.0) potentially affected by CVE-2024-52318 via org.apache.tomcat:tomcat-jasper (11.0.0)

org.apache.tomcat:tomcat-jasper MAVEN version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-jasper and may be impacted: - org.redisson:redisson-tomcat-11 =3.38.0, =3.39.0 Source cves: CVE-2024-52318 Source advisory:...

org.redisson:redisson-tomcat-11 (>=3.38.0, <=3.39.0) potentially affected by CVE-2024-52318 via org.apache.tomcat:tomcat-jasper (11.0.0)

org.apache.tomcat:tomcat-jasper MAVEN version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-jasper and may be impacted: - org.redisson:redisson-tomcat-11 =3.38.0, =3.39.0 Source cves: CVE-2024-52318 Source advisory:...

com.uwyn.rife2:rife2 (1.9.1), org.redisson:redisson-tomcat-11 (>=3.38.0, <=3.41.0) potentially affected by CVE-2024-52318 via org.apache.tomcat.embed:tomcat-embed-jasper (11.0.0)

org.apache.tomcat.embed:tomcat-embed-jasper MAVEN version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-jasper and may be impacted: - com.uwyn.rife2:rife2 1.9.1 - org.redisson:redisson-tomcat-11 =3.38.0,...

com.uwyn.rife2:rife2 (1.9.1), org.redisson:redisson-tomcat-11 (>=3.38.0, <=3.41.0) potentially affected by CVE-2024-52318 via org.apache.tomcat.embed:tomcat-embed-jasper (11.0.0)

org.apache.tomcat.embed:tomcat-embed-jasper MAVEN version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-jasper and may be impacted: - com.uwyn.rife2:rife2 1.9.1 - org.redisson:redisson-tomcat-11 =3.38.0,...

com.uwyn.rife2:rife2 (1.9.1), org.redisson:redisson-tomcat-11 (>=3.38.0, <=3.41.0) potentially affected by CVE-2024-52318 via org.apache.tomcat.embed:tomcat-embed-jasper (11.0.0)

org.apache.tomcat.embed:tomcat-embed-jasper MAVEN version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-jasper and may be impacted: - com.uwyn.rife2:rife2 1.9.1 - org.redisson:redisson-tomcat-11 =3.38.0,...

org.redisson:redisson-tomcat-11 (>=3.38.0, <=3.39.0) potentially affected by CVE-2024-52318 via org.apache.tomcat:tomcat-jasper (11.0.0)

org.apache.tomcat:tomcat-jasper MAVEN version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-jasper and may be impacted: - org.redisson:redisson-tomcat-11 =3.38.0, =3.39.0 Source cves: CVE-2024-52318 Source advisory:...

CVE-2023-42809

Deserialization of untrusted data vulnerability was found in Redisson, as some messages received from the Redis server contain Java objects that the client deserializes without further validation. This flaw allows attackers who manage to trick clients into communicating with a malicious server to...

com.corundumstudio.socketio:netty-socketio (>=1.6.2, <=1.6.3) potentially affected by CVE-2023-42809 via org.redisson:redisson (1.0.1)

org.redisson:redisson MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.corundumstudio.socketio:netty-socketio =1.6.2, =1.6.3 Source cves: CVE-2023-42809 Source advisory:...

com.netflix.dyno:dyno-redisson (>=0.9.0, <=1.9.1) potentially affected by CVE-2023-42809 via org.redisson:redisson (1.1.0)

org.redisson:redisson MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.netflix.dyno:dyno-redisson =0.9.0, =1.9.1 Source cves: CVE-2023-42809 Source advisory: OSV:GHSA-4HVC-QWR2-F8RV...

com.corundumstudio.socketio:netty-socketio (>=1.7.0, <=1.7.3) potentially affected by CVE-2023-42809 via org.redisson:redisson (1.1.1)

org.redisson:redisson MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.corundumstudio.socketio:netty-socketio =1.7.0, =1.7.3 Source cves: CVE-2023-42809 Source advisory:...

org.atmosphere:atmosphere-redis-redisson (>=2.4.1, <=2.6.5) potentially affected by CVE-2023-42809 via org.redisson:redisson (2.1.3)

org.redisson:redisson MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.atmosphere:atmosphere-redis-redisson =2.4.1, =2.6.5 Source cves: CVE-2023-42809 Source advisory:...

com.yy:java-server-push-sdk (1.0.0) potentially affected by CVE-2023-42809 via org.redisson:redisson (2.1.4)

org.redisson:redisson MAVEN version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.yy:java-server-push-sdk 1.0.0 Source cves: CVE-2023-42809 Source advisory: OSV:GHSA-4HVC-QWR2-F8RV...

com.corundumstudio.socketio:netty-socketio (1.7.11) potentially affected by CVE-2023-42809 via org.redisson:redisson (2.2.17)

org.redisson:redisson MAVEN version 2.2.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.corundumstudio.socketio:netty-socketio 1.7.11 Source cves: CVE-2023-42809 Source advisory: OSV:GHSA-4HVC-QWR2-F8...