TI-2024-38034 CVE-2024-57699 · GHSA-pq2g-wx69-c263
A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1.
Priority HIGH 72
A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1.
RHSA-2025:10097
Red Hat Product OCP Tools 4.17 OpenShift Jenkins security update
Released 2025-07-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- OpenShift Developer Tools and Services for OCP 4.17 jenkins-2-plugins-4.17.1750851950-1.el9, jenkins-2.504.2.1750851690-3.el9
Fixes 4 records
TI-2025-33004 CVE-2025-52999 · GHSA-h46c-h94j-95f3
jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data
Priority MEDIUM 45
jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor.
TI-2025-01693 CVE-2025-1948 · GHSA-889j-63jv-qhr8
Eclipse Jetty HTTP clients can increase memory allocation
Priority MEDIUM 40
In Eclipse Jetty versions 12.0.0 to 12.0.16 included, an HTTP/2 client can specify a very large value for the HTTP/2 settings parameter SETTINGS_MAX_HEADER_LIST_SIZE.
TI-2025-16139 CVE-2025-22228 · GHSA-mg83-c7gq-rv5c
CVE-2025-22228: Spring Security BCryptPasswordEncoder does not enforce maximum password length
Priority LOW 35
BCryptPasswordEncoder.matches(CharSequence,String) will incorrectly return true for passwords larger than 72 characters as long as the first 72 characters are the same.