io.thorntail:teiid-amazon-s3 (>=2.0.0.final, <=2.2.1.final), io.thorntail:teiid-odata-v4 (>=2.0.0.final, <=2.2.1.final) +28 more potentially affected by CVE-2026-50629 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.1.12)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - io.thorntail:teiid-amazon-s3 =2.0.0.final, =2.0.0.final, =2.0.0.final,...

org.jboss.narayana.rts:lra-coordinator-quarkus (5.12.0.final), org.jboss.narayana.rts:lra-coordinator-thorntail (5.12.0.final) potentially affected by CVE-2024-8447 via org.jboss.narayana.rts:lra-coordinator-jar (5.12.0.final)

org.jboss.narayana.rts:lra-coordinator-jar MAVEN version 5.12.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.narayana.rts:lra-coordinator-jar and may be impacted: - org.jboss.narayana.rts:lra-coordinator-quarkus 5.12.0.final -...

org.jboss.narayana.rts:lra-coordinator-quarkus (5.11.4.final), org.jboss.narayana.rts:lra-coordinator-thorntail (5.11.4.final) potentially affected by CVE-2024-8447 via org.jboss.narayana.rts:lra-coordinator-jar (5.11.4.final)

org.jboss.narayana.rts:lra-coordinator-jar MAVEN version 5.11.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.narayana.rts:lra-coordinator-jar and may be impacted: - org.jboss.narayana.rts:lra-coordinator-quarkus 5.11.4.final -...

org.jboss.narayana.rts:lra-coordinator-quarkus (5.11.1.final), org.jboss.narayana.rts:lra-coordinator-thorntail (5.11.1.final) potentially affected by CVE-2024-8447 via org.jboss.narayana.rts:lra-coordinator-jar (5.11.1.final)

org.jboss.narayana.rts:lra-coordinator-jar MAVEN version 5.11.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.narayana.rts:lra-coordinator-jar and may be impacted: - org.jboss.narayana.rts:lra-coordinator-quarkus 5.11.1.final -...

org.jboss.narayana.rts:lra-coordinator-quarkus (5.11.0.final), org.jboss.narayana.rts:lra-coordinator-thorntail (5.11.0.final) potentially affected by CVE-2024-8447 via org.jboss.narayana.rts:lra-coordinator-jar (5.11.0.final)

org.jboss.narayana.rts:lra-coordinator-jar MAVEN version 5.11.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.narayana.rts:lra-coordinator-jar and may be impacted: - org.jboss.narayana.rts:lra-coordinator-quarkus 5.11.0.final -...

org.jboss.narayana.rts:lra-coordinator (5.10.5.final), org.jboss.narayana.rts:lra-coordinator-thorntail (5.10.5.final) potentially affected by CVE-2024-8447 via org.jboss.narayana.rts:lra-coordinator-jar (5.10.5.final)

org.jboss.narayana.rts:lra-coordinator-jar MAVEN version 5.10.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.narayana.rts:lra-coordinator-jar and may be impacted: - org.jboss.narayana.rts:lra-coordinator 5.10.5.final -...

org.jboss.narayana.rts:lra-coordinator-quarkus (5.11.2.final), org.jboss.narayana.rts:lra-coordinator-thorntail (5.11.2.final) potentially affected by CVE-2024-8447 via org.jboss.narayana.rts:lra-coordinator-jar (5.11.2.final)

org.jboss.narayana.rts:lra-coordinator-jar MAVEN version 5.11.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.narayana.rts:lra-coordinator-jar and may be impacted: - org.jboss.narayana.rts:lra-coordinator-quarkus 5.11.2.final -...

org.jboss.narayana.rts:lra-coordinator (5.10.6.final), org.jboss.narayana.rts:lra-coordinator-thorntail (5.10.6.final) potentially affected by CVE-2024-8447 via org.jboss.narayana.rts:lra-coordinator-jar (5.10.6.final)

org.jboss.narayana.rts:lra-coordinator-jar MAVEN version 5.10.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.narayana.rts:lra-coordinator-jar and may be impacted: - org.jboss.narayana.rts:lra-coordinator 5.10.6.final -...

org.jboss.narayana.rts:lra-coordinator-quarkus (5.12.1.final), org.jboss.narayana.rts:lra-coordinator-thorntail (5.12.1.final) +1 more potentially affected by CVE-2024-8447 via org.jboss.narayana.rts:lra-coordinator-jar (5.12.1.final)

org.jboss.narayana.rts:lra-coordinator-jar MAVEN version 5.12.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.narayana.rts:lra-coordinator-jar and may be impacted: - org.jboss.narayana.rts:lra-coordinator-quarkus 5.12.1.final -...

Important: Red Hat Security Advisory: Red Hat build of Thorntail 2.7.3 security and bug fix update

An update is now available for Red Hat build of Thorntail. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more...

Important: Red Hat Security Advisory: Red Hat build of Thorntail 2.7.2 security and bug fix update

An update is now available for Red Hat build of Thorntail. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more...

CVE-2020-10721

A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configuration, a malicious YAML configuration file on the local machine executing the maven plug-in could allow for deserialization of untrusted data resulting in arbitrary code execution...

CVE-2020-10721

A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configuration, a malicious YAML configuration file on the local machine executing the maven plug-in could allow for deserialization of untrusted data resulting in arbitrary code execution...

CVE-2020-10721

A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configuration, a malicious YAML configuration file on the local machine executing the maven plug-in could allow for deserialization of untrusted data resulting in arbitrary code execution...

CVE-2020-10721: Deserialization of Untrusted Data

A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configuration, a malicious YAML configuration file on the local machine executing the maven plug-in could allow for deserialization of untrusted data resulting in arbitrary code execution...

Important: Red Hat Security Advisory: Red Hat build of Thorntail 2.7.1 security and bug fix update

An update is now available for Red Hat build of Thorntail. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more...

Important: Red Hat Security Advisory: Red Hat build of Thorntail 2.7.0 security and bug fix update

An update is now available for Red Hat build of Thorntail. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more...

Important: Red Hat Security Advisory: Red Hat build of Thorntail 2.5.1 security and bug fix update

An update is now available for Red Hat build of Thorntail. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more...

Important: Red Hat Security Advisory: Red Hat OpenShift Application Runtimes Thorntail 2.5.0 security & bug fix update

An update is now available for Red Hat OpenShift Application Runtimes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important: Red Hat Security Advisory: Red Hat OpenShift Application Runtimes Thorntail 2.4.0 security & bug fix update

An update is now available for Red Hat OpenShift Application Runtimes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...