java-sig-commits

java-sig-commits@lists.fedoraproject.org
  • 1 participants
  • 207 discussions
[Bug 1781214] New: CVE-2019-17632 jetty: generation of default unhandled error response content does not escape exception messages in stacktraces included in error output
by bugzilla@redhat.com
21 hours, 29 minutes
[Bug 1713303] New: jdependency-2.2.0 is available
by bugzilla@redhat.com
2 days, 18 hours
[Bug 1699692] New: apache-commons-lang3-3.9 is available
by bugzilla@redhat.com
3 days
[Bug 1709860] New: CVE-2019-5427 c3p0: loading XML configuration leads to denial of service
by bugzilla@redhat.com
4 days, 9 hours
[Bug 1774726] New: CVE-2019-12422 shiro: Cookie padding oracle vulnerability with default configuration
by bugzilla@redhat.com
4 days, 10 hours
[Bug 1752962] New: CVE-2019-14439 jackson-databind: Polymorphic typing issue related to logback/JNDI
by bugzilla@redhat.com
4 days, 10 hours
[Bug 1737517] New: CVE-2019-14379 jackson-databind: default typing mishandling leading to remote code execution
by bugzilla@redhat.com
4 days, 10 hours
[Bug 1725807] New: CVE-2019-12384 jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution
by bugzilla@redhat.com
4 days, 10 hours
[Bug 1725795] New: CVE-2019-12814 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafter JSON message.
by bugzilla@redhat.com
4 days, 10 hours
[Bug 1756388] New: CVE-2019-15052 gradle: sends authentication credentials originally destined for the configured host
by bugzilla@redhat.com
4 days, 11 hours
Results per page: