TI-2021-16530 CVE-2021-39144 · GHSA-j9h8-phrw-h4fh
XStream is vulnerable to a Remote Command Execution attack
Priority CRITICAL 96KEV
XStream is a simple library to serialize objects to XML and back again.
RHSA-2022:0520
Red Hat Data Grid 8.3.0 security update
Released 2022-02-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Data Grid 8.3.0
Fixes 19 records
TI-2021-10213 CVE-2021-29505 · GHSA-7chv-rrw6-w6fc
XStream is vulnerable to a Remote Command Execution attack
Priority HIGH 79
XStream is software for serializing Java objects to XML and back again.
TI-2021-16528 CVE-2021-39141 · GHSA-g5w6-mrj7-75h2
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 61
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16532 CVE-2021-39146 · GHSA-p8pq-r894-fm8f
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 60
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16538 CVE-2021-39152 · GHSA-xw4p-crpj-vjx2
A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling
Priority MEDIUM 56
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16526 CVE-2021-39139 · GHSA-64xx-cq4q-mf44
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 53
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16540 CVE-2021-39154 · GHSA-6w62-hx7r-mw68
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16539 CVE-2021-39153 · GHSA-2q8x-2p7f-574v
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16537 CVE-2021-39151 · GHSA-hph2-m3g5-xxv4
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16535 CVE-2021-39149 · GHSA-3ccq-5vw3-2p6x
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16534 CVE-2021-39148 · GHSA-qrx8-8545-4wg2
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16533 CVE-2021-39147 · GHSA-h7v4-7xg3-hxcc
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16531 CVE-2021-39145 · GHSA-8jrj-525p-826v
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16536 CVE-2021-39150 · GHSA-cxfm-5m4g-x7xp
A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling
Priority MEDIUM 51
XStream is a simple library to serialize objects to XML and back again.
TI-2021-15209 CVE-2021-37137 · GHSA-9vjp-v76f-g363
Uncontrolled resource consumption in Netty
Priority MEDIUM 48
The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage.
TI-2021-15208 CVE-2021-37136 · GHSA-grg4-wf29-r9vv
Uncontrolled resource consumption in Netty
Priority MEDIUM 48
The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression).
TI-2021-16527 CVE-2021-39140 · GHSA-6wf9-jmg9-vxcc
XStream can cause a Denial of Service
Priority MEDIUM 44
XStream is a simple library to serialize objects to XML and back again.
TI-2021-19603 CVE-2021-43797 · GHSA-wx5j-54mm-rqqq
HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling
Priority LOW 34
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.
TI-2021-02587 CVE-2021-3642 · GHSA-5499-qjvh-6j7w
Observable discrepancy in wildfly-elytron
Priority LOW 26
A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled.