TI-2022-08636 CVE-2022-24823 · GHSA-269q-hmxg-m83q
Local Information Disclosure Vulnerability in io.netty:netty-codec-http
Priority MEDIUM 58
Netty is an open-source, asynchronous event-driven network application framework.
RHSA-2022:5894
Red Hat JBoss Enterprise Application Platform 7.4.6 Security update.
Released 2022-08-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss EAP 7.4 for RHEL 9 eap7-1-18.el9eap, eap7-FastInfoset-1.2.13-11.1.redhat_1.1.el9eap, eap7-activemq-artemis-2.16.0-9.redhat_00042.1.el9eap +47
Fixes 3 records
TI-2021-20323 CVE-2021-44906 · GHSA-xvch-5gv4-984h
Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).
Priority MEDIUM 56
Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).
TI-2022-09231 CVE-2022-25647 · GHSA-4jrv-ppp4-jm57
Deserialization of untrusted data in com.google.code.gson:gson
Priority MEDIUM 50
The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.