java-sig-commits

java-sig-commits@lists.fedoraproject.org
  • 1 participants
  • 290 discussions
[Bug 1528565] CVE-2017-17485 jackson-databind: Unsafe deserialization due to incomplete black list ( incomplete fix for CVE-2017-15095)
by bugzilla@redhat.com
6 years, 2 months
[Bug 1508110] CVE-2016-5002 xmlrpc: XML external entity vulnerability SSRF via a crafted DTD
by bugzilla@redhat.com
6 years, 2 months
[Bug 1549276] CVE-2018-7489 jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries
by bugzilla@redhat.com
6 years, 2 months
[Bug 1549276] CVE-2018-7489 jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries
by bugzilla@redhat.com
6 years, 2 months
[Bug 1549276] CVE-2018-7489 jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries
by bugzilla@redhat.com
6 years, 2 months
[Bug 1541996] New: CVE-2018-1199 Spring Security: Security bypass with static resources
by bugzilla@redhat.com
6 years, 2 months
[Bug 1528565] CVE-2017-17485 jackson-databind: Unsafe deserialization due to incomplete black list ( incomplete fix for CVE-2017-15095)
by bugzilla@redhat.com
6 years, 2 months
[Bug 1506612] CVE-2017-15095 jackson-databind: Unsafe deserialization due to incomplete black list ( incomplete fix for CVE-2017-7525)
by bugzilla@redhat.com
6 years, 2 months
[Bug 1462702] CVE-2017-7525 jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper
by bugzilla@redhat.com
6 years, 2 months
[Bug 1547501] New: FTBFS: Could not resolve dependencies for project org.codehaus.mojo: castor-maven-plugin:maven-plugin:2.5:
by bugzilla@redhat.com
6 years, 2 months
Results per page: