org.infinispan.server:infinispan-server-commons (>=8.1.0.alpha1, <=8.1.0.alpha2), org.infinispan.server:infinispan-server-infinispan (>=8.1.0.alpha1, <=8.1.0.alpha2) +26 more potentially affected by CVE-2021-20250 via org.jboss:jboss-ejb-client (2.1.2.final)

org.jboss:jboss-ejb-client MAVEN version 2.1.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.infinispan.server:infinispan-server-commons =8.1.0.alpha1, =8.1.0.alpha1, =8.1.0.alpha1,...

CVE-2020-10721

A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configuration, a malicious YAML configuration file on the local machine executing the maven plug-in could allow for deserialization of untrusted data resulting in arbitrary code execution...

CVE-2020-10721

A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configuration, a malicious YAML configuration file on the local machine executing the maven plug-in could allow for deserialization of untrusted data resulting in arbitrary code execution...

CVE-2020-10721

A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configuration, a malicious YAML configuration file on the local machine executing the maven plug-in could allow for deserialization of untrusted data resulting in arbitrary code execution...

CVE-2020-10721: Deserialization of Untrusted Data

A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configuration, a malicious YAML configuration file on the local machine executing the maven plug-in could allow for deserialization of untrusted data resulting in arbitrary code execution...

io.undertow:undertow-websockets-jsr (1.3.3.final), org.hawkular.accounts:hawkular-accounts-sample-websocket-backend (>=2.0.2.final, <=2.0.10.final) +6 more potentially affected by CVE-2019-10184 via io.undertow:undertow-servlet (1.3.3.final)

io.undertow:undertow-servlet MAVEN version 1.3.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-servlet and may be impacted: - io.undertow:undertow-websockets-jsr 1.3.3.final -...

Moderate: Red Hat Security Advisory: Red Hat OpenShift Application Runtimes security and bug fix update

An update is now available for Red Hat OpenShift Application Runtimes. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...