Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
Vulnerabilities
search
All ecosystems
828136
AlmaLinux
5541
Alpaquita
12789
Alpine
4417
Android
3403
Azure Linux
12016
BellSoft Hardened Containers
616
Bitnami
8525
Chainguard
10019
CleanStart
1988
CRAN
14
crates.io
2640
Debian
63410
Echo
7870
GHC
3
GIT
99191
GitHub Actions
54
Go
8603
Hackage
32
Hex
228
Julia
1655
Linux
27477
Mageia
6105
Maven
6833
MinimOS
112794
npm
226203
NuGet
1844
opam
24
openEuler
7592
openSUSE
13885
OSS-Fuzz
3978
Packagist
6822
Pub
11
PyPI
24363
Red Hat
22068
Rocky Linux
3901
Root
18886
RubyGems
4591
SUSE
22318
SwiftURL
59
TuxCare
8322
Ubuntu
59900
VSCode
20
Wolfi
7126
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-h84g-69h7-mw6v
Maven/com.mchange:mchange-commons-java
mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"
yesterday
Fix available
Severity - 7.1 (High)
GHSA-fpmh-vx4h-xc33
Maven/org.openidentityplatform.openam:openam-core
OpenAM Insecure SSO Cookie Initialization
yesterday
Fix available
Severity - 7.0 (High)
GHSA-p9jm-q85p-7mcp
Maven/io.netty:netty-codec-redis
Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state
07 Aug
Fix available
Severity - 6.5 (Medium)
GHSA-pmhh-3w7g-xqp8
Maven/org.jsoup:jsoup
jsoup: Cleaner may expose markup with custom raw-text elements
06 Aug
Fix available
Severity - 4.7 (Medium)
GHSA-pjp7-q6wp-97qx
Maven/org.geonetwork-opensource:geonetwork
core-geonetwork has an Open Redirect Bypass
31 Jul
Fix available
Severity - 4.8 (Medium)
GHSA-93wv-jw9v-4972
Maven/io.netty:netty-codec-http2
Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS)
31 Jul
Fix available
Severity - 7.5 (High)
GHSA-88fw-v6x4-3f58
Maven/org.springframework.data:spring-data-commons
Spring Data: Unbounded property-path cache keyed by externally-supplied path string
31 Jul
Fix available
Severity - 7.5 (High)
GHSA-hjcp-jmpx-g3qm
Maven/org.apache.httpcomponents.client5:httpclient5
Apache HttpComponents Client: Connection Leak on Content-Encoding Decode Error Leads to Pool Exhaustion DoS
31 Jul
Fix available
Severity - 5.3 (Medium)
GHSA-rwqx-fvqh-6wm4
Maven/io.opentelemetry.javaagent:opentelemetry-javaagent
OpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwords
29 Jul
Fix available
Severity - 6.5 (Medium)
GHSA-fq3f-m5qm-99f5
Maven/io.opentelemetry.javaagent:opentelemetry-javaagent
OpenTelemetry Javaagent RMI context propagation allows resource exhaustion
29 Jul
Fix available
Severity - 5.3 (Medium)
GHSA-qcxp-gm7m-4j5v
Maven/io.quarkus:quarkus-vertx-http
Quarkus: Authentication/Authorization Bypass via Advanced Path Normalization Vulnerabilities
29 Jul
Fix available
Severity - 7.5 (High)
GHSA-7c26-995w-6f47
Maven/org.verapdf:parser
veraPDF Parser DoS via PostScript Type 1 Font Programs
29 Jul
Fix available
Severity - 6.9 (Medium)
GHSA-jrmc-qg6p-94fp
Maven/org.verapdf:parser
veraPDF Parser DoS via PostScript CMap Streams
29 Jul
Fix available
Severity - 6.9 (Medium)
GHSA-cg9x-g3gm-h5h6
Maven/org.verapdf:validation-model
Maven/org.verapdf:validation-model-jakarta
veraPDF-validatio: Use of Default `DocumentBuilderFactory` leads to XXE When Processing Untrusted PDFs
29 Jul
Fix available
Severity - 6.5 (Medium)
GHSA-3jh7-wm29-q568
Maven/org.verapdf:validation-model
Maven/org.verapdf:validation-model-jakarta
veraPDF Validation XXE via Rich Text
29 Jul
Fix available
Severity - 8.7 (High)
GHSA-36mm-w85j-3q2j
Maven/org.verapdf:validation-model
Maven/org.verapdf:validation-model-jakarta
veraPDF Validation XXE via XFA
29 Jul
Fix available
Severity - 8.7 (High)
Load more...
Maven - OSV