RHSA-2023:1049

SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization.

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.

Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey.

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.

Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter.

moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates.

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution.

The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.

keycloak: path traversal via double URL encoding.

Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).

Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates.

A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one…

JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand (e.g.

In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays.

A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url variable in interpolateName.js.

A vulnerability in Apache CXF before versions 3.5.5 and 3.4.10 allows an attacker to perform a remote directory listing or code exfiltration.

In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGL…

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.

A reflected cross-site scripting (XSS) vulnerability was found in the 'oob' OAuth endpoint due to incorrect null-byte handling.

Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS).

Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS).

A flaw was found in the offline_access scope in Keycloak.

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS).

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS).

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS).

A flaw was found in Keycloak.

A flaw was found in the Keycloak Node.js Adapter.

A flaw was found in Keycloak in the execute-actions-email endpoint.

A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests.

A flaw was found in Undertow.

A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client credential flow.