RHSA-2022:6813

pgjdbc is the offical PostgreSQL JDBC Driver.

moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates.

Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).

Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates.

This affects the package chart.js before 2.9.4.

In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection properties.

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.

This affects the package immer before 9.0.6.

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.

There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads.

A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data.

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript.

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript.

In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through uncontrolled resource consumption of memory.

XML external entity injection(XXE) is a vulnerability that allows an attacker to interfere with an application's processing of XML data.

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0.

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository lquixada/cross-fetch prior to 3.1.5.

node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor