TI-2020-15666 CVE-2020-25649 · GHSA-288c-cq4h-88gq
XML external entity injection in jackson-databind
Priority MEDIUM 56
A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly.
RHSA-2021:2039
Service Registry (container images) release and security update [1.1.1.GA]
Released 2021-05-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Integration
Fixes 3 records
TI-2020-15656 CVE-2020-25638 · GHSA-j8jw-g6fq-mp7h
SQL injection in hibernate-core
Priority MEDIUM 40
A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final.
TI-2020-11000 CVE-2020-14040 · GHSA-5rcv-m4m3-hfh7
The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could…
Priority LOW 37
The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory.