java-sig-commits

java-sig-commits@lists.fedoraproject.org
  • 1 participants
  • 288 discussions
[Bug 1926524] New: jna-5.7.0 is available
by bugzilla@redhat.com
2 years, 6 months
[Bug 1848617] New: CVE-2019-17566 batik: SSRF via "xlink:href"
by bugzilla@redhat.com
2 years, 6 months
[Bug 1908838] New: CVE-2020-26259 xstream: arbitrary file deletion on the local host when unmarshalling [fedora-all]
by bugzilla@redhat.com
2 years, 6 months
[Bug 1908833] New: CVE-2020-26258 xstream: Server-Side Forgery Request vulnerability can be activated when unmarshalling [fedora-all]
by bugzilla@redhat.com
2 years, 6 months
[Bug 1872707] New: CVE-2020-24616 jackson-databind: mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP)
by bugzilla@redhat.com
2 years, 6 months
[Bug 1797065] New: CVE-2020-2104 jenkins: Memory usage graphs accessible to anyone with Overall/Read
by bugzilla@redhat.com
2 years, 6 months
[Bug 1797062] New: CVE-2020-2103 jenkins: Exposed session identifiers on user detail object in the whoAmI diagnostic page
by bugzilla@redhat.com
2 years, 6 months
[Bug 1881158] New: CVE-2020-5421 springframework: RFD protection bypass via jsessionid
by bugzilla@redhat.com
2 years, 7 months
[Bug 1767483] New: CVE-2019-10086 apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default
by bugzilla@redhat.com
2 years, 7 months
[Bug 1799475] New: CVE-2020-5398 springframework: RFD attack via Content-Disposition Header sourced from request input by Spring MVC or Spring WebFlux Application
by bugzilla@redhat.com
2 years, 7 months
Results per page: