TI-2021-04449 CVE-2021-21349 · GHSA-f6hm-88x3-mfjv
Deserialization of untrusted data in xstream
Priority HIGH 73
XStream is a Java library to serialize objects to XML and back again.
RHSA-2022:1029
Red Hat Integration Camel-K 1.6.4 release and security update
Released 2022-03-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHINT Camel-K 1.6.4
Fixes 11 records
TI-2021-13169 CVE-2021-33813 · GHSA-2363-cqg2-863c
An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of…
Priority MEDIUM 51
An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.
TI-2021-08126 CVE-2021-26291 · GHSA-2f88-5hg8-9x2x
block repositories using http by default
Priority MEDIUM 51
Apache Maven will follow repositories that are defined in a dependency’s Project Object Model (pom) which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is…
TI-2022-08283 CVE-2022-24407 · GHSA-fvc5-cffp-h22w
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the…
Priority MEDIUM 45
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
TI-2021-02626 CVE-2021-3690 · GHSA-fj7c-vg2v-ccrm
Uncontrolled resource consumption in undertow
Priority LOW 36
A flaw was found in Undertow.
TI-2020-16544 CVE-2020-27218 · GHSA-86wm-rrjm-8wh8
In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2…
Priority LOW 33
In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto…
TI-2020-12221 CVE-2020-15522 · GHSA-6xx3-rg99-gc3p
Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2…
Priority LOW 30
Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when…
TI-2021-09397 CVE-2021-28168 · GHSA-c43q-5hpj-4crv
Exposure of resource to wrong sphere in Eclipse Jersey
Priority LOW 29
Eclipse Jersey 2.28 to 2.33 and Eclipse Jersey 3.0.0 to 3.0.1 contains a local information disclosure vulnerability.
TI-2021-03583 CVE-2021-20293 · GHSA-5h26-c766-g93v
Cross-site scripting in RESTEasy
Priority LOW 29
A reflected Cross-Site Scripting (XSS) flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL encoding when calling @javax.ws.rs.PathParam without any @Produces Med…
TI-2021-09399 CVE-2021-28170 · GHSA-v6w3-2prq-h95f
Improper input validation in Eclipse Foundation Jakarta Expression Language Implementation
Priority LOW 28
In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.
TI-2020-07155 CVE-2020-8908 · GHSA-5mg8-w23w-74h3
Temp directory permission issue in Guava
Priority LOW 18
A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.F…