CVE-2019-10086
Insecure Deserialization in Apache Commons Beanutils
7.3 HighFix available
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
29.1%Up 7.8 points since Apr 14, 2021
What each source reports
NVD Score used
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
- Record
CVE-2019-10086- CVSS 3.1
- 7.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-502
- Updated
- 2026-11-02
CVE List No score
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
- Record
CVE-2019-10086- Updated
- 2026-11-02
EUVDEUVD-2020-0465 No score
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
- Record
EUVD-2020-0465- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-6phf-73q6-gh87
Insecure Deserialization in Apache Commons Beanutils
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
- Record
GHSA-6phf-73q6-gh87- CVSS 3.1
- 7.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-502
- Updated
- 2026-11-02
OSV
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
- Record
CVE-2019-10086- CVSS 3.1
- 7.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-10086
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
- Record
DEBIAN-CVE-2019-10086- CVSS 3.1
- 7.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
Show 27 moreShow less
OSVGHSA-6phf-73q6-gh87
Insecure Deserialization in Apache Commons Beanutils
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
- Record
GHSA-6phf-73q6-gh87- CVSS 3.1
- 7.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-502
- Updated
- 2026-11-02
OSVRHBA-2020:0496
Red Hat Bug Fix Advisory: Satellite 6.6.2 Async Bug Fix Update
- Record
RHBA-2020:0496- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2019:4317
Red Hat Security Advisory: rh-maven35-apache-commons-beanutils security update
- Record
RHSA-2019:4317- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2020:0057
Red Hat Security Advisory: rh-java-common-apache-commons-beanutils security update
- Record
RHSA-2020:0057- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2020:0194
Red Hat Security Advisory: apache-commons-beanutils security update
- Record
RHSA-2020:0194- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2020:0804
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.7 on RHEL 6 security update
- Record
RHSA-2020:0804- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2020:0805
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.7 on RHEL 7 security update
- Record
RHSA-2020:0805- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2020:0806
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.7 on RHEL 8 security update
- Record
RHSA-2020:0806- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2020:1308
Red Hat Security Advisory: Red Hat Virtualization Engine security, bug fix 4.3.9
- Record
RHSA-2020:1308- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2020:1454
Red Hat Security Advisory: Satellite 6.7 release.
- Record
RHSA-2020:1454- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2020:2740
Red Hat Security Advisory: candlepin and satellite security update
- Record
RHSA-2020:2740- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2024:5856
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.7 on RHEL 7 security update
- Record
RHSA-2024:5856- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2025:9318
Red Hat Security Advisory: javapackages-tools:201801 security update
- Record
RHSA-2025:9318- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2025:9318
Important: javapackages-tools:201801 security update
The javapackages-tools packages provide macros and scripts to support Java packaging.
Security Fix(es):
-
apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default (CVE-2019-10086)
-
commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default (CVE-2025-48734)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2025:9318- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-10086
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
- Record
UBUNTU-CVE-2019-10086- CVSS 3.1
- 7.3 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVALSA-2025:9318 No score
Important: javapackages-tools:201801 security update
The javapackages-tools packages provide macros and scripts to support Java packaging.
Security Fix(es):
- apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default (CVE-2019-10086)
- commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default (CVE-2025-48734)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2025:9318- Updated
- 2026-11-02
OSVCLSA-2026-1776991051 No score
TuxCare security update for commons-beanutils:commons-beanutils (2 CVEs)
TuxCare rebuilt commons-beanutils:commons-beanutils to address 2 CVEs. Fixed in 1.8.3-tuxcare.1.
- Record
CLSA-2026-1776991051- Updated
- 2026-11-02
OSVCLSA-2026-1777336746 No score
TuxCare security update for commons-beanutils:commons-beanutils (1 CVE)
TuxCare rebuilt commons-beanutils:commons-beanutils to address 1 CVE. Fixed in 1.6-tuxcare.2.
- Record
CLSA-2026-1777336746- Updated
- 2026-11-02
OSVCLSA-2026-1791878536 No score
TuxCare security update for commons-beanutils:commons-beanutils (3 CVEs)
TuxCare rebuilt commons-beanutils:commons-beanutils to address 3 CVEs. Fixed in 1.9.3-tuxcare.1.
- Record
CLSA-2026-1791878536- Updated
- 2026-11-02
OSVMGASA-2019-0399 No score
Updated apache-commons-beanutils packages fix security vulnerability
Updated apache-commons-beanutils packages fix security vulnerability:
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean (CVE-2019-10086).
Also, the apache-commons-collections package has been rebuilt to regenerate the OSGi metadata, to allow the apache-commons-beanutils package to build.
- Record
MGASA-2019-0399- Updated
- 2026-11-02
OSVopenSUSE-SU-2019:2058-1 No score
Security update for apache-commons-beanutils
This update for apache-commons-beanutils fixes the following issues:
Security issue fixed:
- CVE-2019-10086: Added special BeanIntrospector class which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects (bsc#1146657).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:2058-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10617-1 No score
apache-commons-beanutils-1.9.4-3.7 on GA media
These are all security issues fixed in the apache-commons-beanutils-1.9.4-3.7 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10617-1- Updated
- 2026-11-02
OSVROOT-APP-MAVEN-CVE-2019-10086 No score
CVE-2019-10086 in commons-beanutils:commons-beanutils - Patched by Root
Root has patched CVE-2019-10086 in the commons-beanutils:commons-beanutils package for Root:Maven. Multiple fixed versions available.
- Record
ROOT-APP-MAVEN-CVE-2019-10086- Updated
- 2026-11-02
OSVSUSE-SU-2019:2244-1 No score
Security update for apache-commons-beanutils
This update for apache-commons-beanutils fixes the following issues:
Security issue fixed:
- CVE-2019-10086: Added special BeanIntrospector class which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects (bsc#1146657).
- Record
SUSE-SU-2019:2244-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:2245-1 No score
Security update for apache-commons-beanutils
This update for apache-commons-beanutils fixes the following issues:
Security issue fixed:
- CVE-2019-10086: Added special BeanIntrospector class which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects (bsc#1146657).
- Record
SUSE-SU-2019:2245-1- Updated
- 2026-11-02
OSVUSN-4766-1 No score
commons-beanutils vulnerabilities
It was discovered that Apache Commons BeanUtils improperly handled certain input. An attacker could possibly use this vulnerability to cause a crash or execute arbitrary code.
- Record
USN-4766-1- Updated
- 2026-11-02
OSVUSN-8322-2 No score
commons-beanutils regression
USN-8322-1 fixed a vulnerability in Apache Commons BeanUtils. It was discovered that for Ubuntu 18.04 LTS, during the update preparation phase, a previous fix for CVE-2014-0114 and CVE-2019-10086 was incorrectly dropped. This update reintroduces the fix for CVE-2014-0114 and CVE-2019-10086.
We apologize for the inconvenience.
Original advisory details:
It was discovered that Apache Commons BeanUtils incorrectly allowed access to the declaredClass property of Java enum objects when handling externally supplied property paths. An attacker could possibly use this issue to execute arbitrary code.
- Record
USN-8322-2- Updated
- 2026-11-02
Affected products
- apache commons beanutils
- apache nifi
- debian linux
- fedoraproject fedora
- opensuse leap
- oracle agile product lifecycle management
- oracle agile product lifecycle management integration pack
- oracle application testing suite
- oracle banking platform
- oracle blockchain platform
- oracle communications billing and revenue management
- oracle communications billing and revenue management elastic charging engine
Show 48 moreShow less
- oracle communications cloud native core console
- oracle communications cloud native core policy
- oracle communications cloud native core unified data repository
- oracle communications convergence
- oracle communications design studio
- oracle communications evolved communications application server
- oracle communications metasolv solution
- oracle communications network integrity
- oracle communications performance intelligence center
- oracle communications pricing design center
- oracle communications unified inventory management
- oracle customer management and segmentation foundation
- oracle enterprise manager for virtualization
- oracle financial services revenue management and billing analytics
- oracle flexcube private banking
- oracle fusion middleware
- oracle healthcare foundation
- oracle hospitality opera 5
- oracle hospitality reporting and analytics
- oracle insurance data gateway
- oracle jd edwards enterpriseone orchestrator
- oracle jd edwards enterpriseone tools
- oracle peoplesoft enterprise peopletools
- oracle peoplesoft enterprise pt peopletools
- oracle primavera gateway
- oracle real-time decisions solutions
- oracle retail advanced inventory planning
- oracle retail back office
- oracle retail central office
- oracle retail invoice matching
- oracle retail merchandising system
- oracle retail point-of-service
- oracle retail predictive application server
- oracle retail price management
- oracle retail returns management
- oracle retail xstore point of service
- oracle service bus
- oracle solaris cluster
- oracle time and labor
- oracle utilities framework
- oracle weblogic server
- redhat enterprise linux desktop
- redhat enterprise linux eus
- redhat enterprise linux server
- redhat enterprise linux server aus
- redhat enterprise linux server tus
- redhat enterprise linux workstation
- redhat jboss enterprise application platform
Affected packages
| Package | Affected | Fixed |
|---|---|---|
commons-beanutils:commons-beanutilsMaven |
before 1.9.4 | 1.9.4 |
antAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-antlrAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-apache-bcelAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-apache-bsfAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-apache-log4jAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-apache-oroAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-apache-regexpAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-apache-resolverAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-apache-xalan2AlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ant-commons-loggingAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-commons-netAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-contribAlmaLinux:8 |
before 1.0-0.32.b3.module_el8.0.0+6004+2fc32706 | 1.0-0.32.b3.module_el8.0.0+6004+2fc32706 |
ant-contrib-javadocAlmaLinux:8 |
before 1.0-0.32.b3.module_el8.0.0+6004+2fc32706 | 1.0-0.32.b3.module_el8.0.0+6004+2fc32706 |
ant-javadocAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-javamailAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-jdependAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-jmfAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-jschAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-junitAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-libAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-manualAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-swingAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-testutilAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
ant-xzAlmaLinux:8 |
before 1.10.5-1.module_el8.0.0+6004+2fc32706 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
antlr-C++AlmaLinux:8 |
before 2.7.7-56.module_el8.0.0+6004+2fc32706 | 2.7.7-56.module_el8.0.0+6004+2fc32706 |
antlr-C++AlmaLinux:8 |
before 2.7.7-56.module_el8.5.0+197+0c7f4e0a | 2.7.7-56.module_el8.5.0+197+0c7f4e0a |
antlr-C++AlmaLinux:8 |
before 2.7.7-56.module_el8.6.0+3182+f8468cf8 | 2.7.7-56.module_el8.6.0+3182+f8468cf8 |
antlr-javadocAlmaLinux:8 |
before 2.7.7-56.module_el8.0.0+6004+2fc32706 | 2.7.7-56.module_el8.0.0+6004+2fc32706 |
antlr-manualAlmaLinux:8 |
before 2.7.7-56.module_el8.0.0+6004+2fc32706 | 2.7.7-56.module_el8.0.0+6004+2fc32706 |
antlr-toolAlmaLinux:8 |
before 2.7.7-56.module_el8.0.0+6004+2fc32706 | 2.7.7-56.module_el8.0.0+6004+2fc32706 |
aopallianceAlmaLinux:8 |
before 1.0-17.module_el8.0.0+6004+2fc32706 | 1.0-17.module_el8.0.0+6004+2fc32706 |
aopalliance-javadocAlmaLinux:8 |
before 1.0-17.module_el8.0.0+6004+2fc32706 | 1.0-17.module_el8.0.0+6004+2fc32706 |
apache-commons-beanutilsAlmaLinux:8 |
before 1.9.3-5.module_el8.10.0+4020+7deec6e4 | 1.9.3-5.module_el8.10.0+4020+7deec6e4 |
apache-commons-beanutils-javadocAlmaLinux:8 |
before 1.9.3-5.module_el8.10.0+4020+7deec6e4 | 1.9.3-5.module_el8.10.0+4020+7deec6e4 |
apache-commons-cliAlmaLinux:8 |
before 1.4-4.module_el8.0.0+6004+2fc32706 | 1.4-4.module_el8.0.0+6004+2fc32706 |
apache-commons-cli-javadocAlmaLinux:8 |
before 1.4-4.module_el8.0.0+6004+2fc32706 | 1.4-4.module_el8.0.0+6004+2fc32706 |
apache-commons-codecAlmaLinux:8 |
before 1.11-3.module_el8.0.0+6004+2fc32706 | 1.11-3.module_el8.0.0+6004+2fc32706 |
apache-commons-codec-javadocAlmaLinux:8 |
before 1.11-3.module_el8.0.0+6004+2fc32706 | 1.11-3.module_el8.0.0+6004+2fc32706 |
apache-commons-collectionsAlmaLinux:8 |
before 3.2.2-10.module_el8.0.0+6004+2fc32706 | 3.2.2-10.module_el8.0.0+6004+2fc32706 |
apache-commons-collections-javadocAlmaLinux:8 |
before 3.2.2-10.module_el8.0.0+6004+2fc32706 | 3.2.2-10.module_el8.0.0+6004+2fc32706 |
apache-commons-collections-testframeworkAlmaLinux:8 |
before 3.2.2-10.module_el8.0.0+6004+2fc32706 | 3.2.2-10.module_el8.0.0+6004+2fc32706 |
apache-commons-compressAlmaLinux:8 |
before 1.18-1.module_el8.0.0+6004+2fc32706 | 1.18-1.module_el8.0.0+6004+2fc32706 |
apache-commons-compress-javadocAlmaLinux:8 |
before 1.18-1.module_el8.0.0+6004+2fc32706 | 1.18-1.module_el8.0.0+6004+2fc32706 |
apache-commons-execAlmaLinux:8 |
before 1.3-8.module_el8.0.0+6004+2fc32706 | 1.3-8.module_el8.0.0+6004+2fc32706 |
apache-commons-exec-javadocAlmaLinux:8 |
before 1.3-8.module_el8.0.0+6004+2fc32706 | 1.3-8.module_el8.0.0+6004+2fc32706 |
apache-commons-ioAlmaLinux:8 |
before 1:2.6-3.module_el8.0.0+6004+2fc32706 | 1:2.6-3.module_el8.0.0+6004+2fc32706 |
apache-commons-io-javadocAlmaLinux:8 |
before 1:2.6-3.module_el8.0.0+6004+2fc32706 | 1:2.6-3.module_el8.0.0+6004+2fc32706 |
apache-commons-jxpathAlmaLinux:8 |
before 1.3-29.module_el8.0.0+6004+2fc32706 | 1.3-29.module_el8.0.0+6004+2fc32706 |
apache-commons-jxpath-javadocAlmaLinux:8 |
before 1.3-29.module_el8.0.0+6004+2fc32706 | 1.3-29.module_el8.0.0+6004+2fc32706 |
apache-commons-langAlmaLinux:8 |
before 2.6-21.module_el8.0.0+6004+2fc32706 | 2.6-21.module_el8.0.0+6004+2fc32706 |
apache-commons-lang-javadocAlmaLinux:8 |
before 2.6-21.module_el8.0.0+6004+2fc32706 | 2.6-21.module_el8.0.0+6004+2fc32706 |
apache-commons-lang3AlmaLinux:8 |
before 3.7-3.module_el8.0.0+6004+2fc32706 | 3.7-3.module_el8.0.0+6004+2fc32706 |
apache-commons-lang3-javadocAlmaLinux:8 |
before 3.7-3.module_el8.0.0+6004+2fc32706 | 3.7-3.module_el8.0.0+6004+2fc32706 |
apache-commons-loggingAlmaLinux:8 |
before 1.2-13.module_el8.0.0+6004+2fc32706 | 1.2-13.module_el8.0.0+6004+2fc32706 |
apache-commons-logging-javadocAlmaLinux:8 |
before 1.2-13.module_el8.0.0+6004+2fc32706 | 1.2-13.module_el8.0.0+6004+2fc32706 |
apache-commons-netAlmaLinux:8 |
before 3.6-3.module_el8.0.0+6004+2fc32706 | 3.6-3.module_el8.0.0+6004+2fc32706 |
apache-commons-net-javadocAlmaLinux:8 |
before 3.6-3.module_el8.0.0+6004+2fc32706 | 3.6-3.module_el8.0.0+6004+2fc32706 |
apache-commons-parentAlmaLinux:8 |
before 43-2.module_el8.0.0+6004+2fc32706 | 43-2.module_el8.0.0+6004+2fc32706 |
apache-ivyAlmaLinux:8 |
before 2.4.0-14.module_el8.0.0+6004+2fc32706 | 2.4.0-14.module_el8.0.0+6004+2fc32706 |
apache-ivy-javadocAlmaLinux:8 |
before 2.4.0-14.module_el8.0.0+6004+2fc32706 | 2.4.0-14.module_el8.0.0+6004+2fc32706 |
apache-parentAlmaLinux:8 |
before 19-2.module_el8.0.0+6004+2fc32706 | 19-2.module_el8.0.0+6004+2fc32706 |
apache-resource-bundlesAlmaLinux:8 |
before 2-20.module_el8.0.0+6004+2fc32706 | 2-20.module_el8.0.0+6004+2fc32706 |
aqute-bndAlmaLinux:8 |
before 3.5.0-4.module_el8.0.0+6004+2fc32706 | 3.5.0-4.module_el8.0.0+6004+2fc32706 |
aqute-bnd-javadocAlmaLinux:8 |
before 3.5.0-4.module_el8.0.0+6004+2fc32706 | 3.5.0-4.module_el8.0.0+6004+2fc32706 |
aqute-bndlibAlmaLinux:8 |
before 3.5.0-4.module_el8.0.0+6004+2fc32706 | 3.5.0-4.module_el8.0.0+6004+2fc32706 |
assertj-coreAlmaLinux:8 |
before 3.8.0-2.module_el8.0.0+6004+2fc32706 | 3.8.0-2.module_el8.0.0+6004+2fc32706 |
assertj-core-javadocAlmaLinux:8 |
before 3.8.0-2.module_el8.0.0+6004+2fc32706 | 3.8.0-2.module_el8.0.0+6004+2fc32706 |
atinjectAlmaLinux:8 |
before 1-28.20100611svn86.module_el8.0.0+6004+2fc32706 | 1-28.20100611svn86.module_el8.0.0+6004+2fc32706 |
atinject-javadocAlmaLinux:8 |
before 1-28.20100611svn86.module_el8.0.0+6004+2fc32706 | 1-28.20100611svn86.module_el8.0.0+6004+2fc32706 |
atinject-tckAlmaLinux:8 |
before 1-28.20100611svn86.module_el8.0.0+6004+2fc32706 | 1-28.20100611svn86.module_el8.0.0+6004+2fc32706 |
bcelAlmaLinux:8 |
before 6.2-2.module_el8.0.0+6004+2fc32706 | 6.2-2.module_el8.0.0+6004+2fc32706 |
bcel-javadocAlmaLinux:8 |
before 6.2-2.module_el8.0.0+6004+2fc32706 | 6.2-2.module_el8.0.0+6004+2fc32706 |
beust-jcommanderAlmaLinux:8 |
before 1.71-5.module_el8.0.0+6004+2fc32706 | 1.71-5.module_el8.0.0+6004+2fc32706 |
beust-jcommander-javadocAlmaLinux:8 |
before 1.71-5.module_el8.0.0+6004+2fc32706 | 1.71-5.module_el8.0.0+6004+2fc32706 |
bnd-maven-pluginAlmaLinux:8 |
before 3.5.0-4.module_el8.0.0+6004+2fc32706 | 3.5.0-4.module_el8.0.0+6004+2fc32706 |
bsfAlmaLinux:8 |
before 2.4.0-30.module_el8.0.0+6004+2fc32706 | 2.4.0-30.module_el8.0.0+6004+2fc32706 |
bsf-javadocAlmaLinux:8 |
before 2.4.0-30.module_el8.0.0+6004+2fc32706 | 2.4.0-30.module_el8.0.0+6004+2fc32706 |
bshAlmaLinux:8 |
before 2.0-13.b6.module_el8.0.0+6004+2fc32706 | 2.0-13.b6.module_el8.0.0+6004+2fc32706 |
bsh-javadocAlmaLinux:8 |
before 2.0-13.b6.module_el8.0.0+6004+2fc32706 | 2.0-13.b6.module_el8.0.0+6004+2fc32706 |
bsh-manualAlmaLinux:8 |
before 2.0-13.b6.module_el8.0.0+6004+2fc32706 | 2.0-13.b6.module_el8.0.0+6004+2fc32706 |
byaccjAlmaLinux:8 |
before 1.15-17.module_el8.0.0+6004+2fc32706 | 1.15-17.module_el8.0.0+6004+2fc32706 |
byaccjAlmaLinux:8 |
before 1.15-17.module_el8.6.0+3182+f8468cf8 | 1.15-17.module_el8.6.0+3182+f8468cf8 |
byaccjAlmaLinux:8 |
before 1.15-17.module_el8.5.0+197+0c7f4e0a | 1.15-17.module_el8.5.0+197+0c7f4e0a |
cal10nAlmaLinux:8 |
before 0.8.1-7.module_el8.0.0+6004+2fc32706 | 0.8.1-7.module_el8.0.0+6004+2fc32706 |
cal10n-javadocAlmaLinux:8 |
before 0.8.1-7.module_el8.0.0+6004+2fc32706 | 0.8.1-7.module_el8.0.0+6004+2fc32706 |
cdi-apiAlmaLinux:8 |
before 1.2-8.module_el8.0.0+6004+2fc32706 | 1.2-8.module_el8.0.0+6004+2fc32706 |
cdi-api-javadocAlmaLinux:8 |
before 1.2-8.module_el8.0.0+6004+2fc32706 | 1.2-8.module_el8.0.0+6004+2fc32706 |
cglibAlmaLinux:8 |
before 3.2.4-7.module_el8.0.0+6004+2fc32706 | 3.2.4-7.module_el8.0.0+6004+2fc32706 |
cglib-javadocAlmaLinux:8 |
before 3.2.4-7.module_el8.0.0+6004+2fc32706 | 3.2.4-7.module_el8.0.0+6004+2fc32706 |
easymockAlmaLinux:8 |
before 3.5-4.module_el8.0.0+6004+2fc32706 | 3.5-4.module_el8.0.0+6004+2fc32706 |
easymock-javadocAlmaLinux:8 |
before 3.5-4.module_el8.0.0+6004+2fc32706 | 3.5-4.module_el8.0.0+6004+2fc32706 |
exec-maven-pluginAlmaLinux:8 |
before 1.6.0-3.module_el8.0.0+6004+2fc32706 | 1.6.0-3.module_el8.0.0+6004+2fc32706 |
commons-beanutils:commons-beanutilsTuxCare:Maven |
1.8.3 up to 1.8.3-tuxcare.1 | 1.8.3-tuxcare.1 |
commons-beanutils:commons-beanutilsTuxCare:Maven |
1.6 up to 1.6-tuxcare.2, plus listed versions 1.6-tuxcare.1 |
1.6-tuxcare.2 |
commons-beanutils:commons-beanutilsTuxCare:Maven |
1.9.3 up to 1.9.3-tuxcare.1 | 1.9.3-tuxcare.1 |
commons-beanutilsDebian:12 |
before 1.9.4-1 | 1.9.4-1 |
commons-beanutilsDebian:13 |
before 1.9.4-1 | 1.9.4-1 |
commons-beanutilsDebian:14 |
before 1.9.4-1 | 1.9.4-1 |
commons-beanutilsDebian:8 |
before 1.9.2-1+deb8u1, plus listed versions 1.9.2-1 |
1.9.2-1+deb8u1 |
commons-beanutils:commons-beanutilsMaven |
before 1.9.4, plus listed versions 1.01.21.31.41.4.1 Show 13 moreShow less1.51.61.6.11.7.01.8.01.8.0-BETA1.8.11.8.21.8.31.9.01.9.11.9.21.9.3 |
1.9.4 |
apache-commons-beanutilsMageia:7 |
before 1.9.4-1.mga7 | 1.9.4-1.mga7 |
apache-commons-collectionsMageia:7 |
before 3.2.2-7.1.mga7 | 3.2.2-7.1.mga7 |
foremanRed Hat:satellite_capsule:6.6::el7 |
before 0:1.22.0.36-1.el7sat | 0:1.22.0.36-1.el7sat |
foreman-debugRed Hat:satellite_capsule:6.6::el7 |
before 0:1.22.0.36-1.el7sat | 0:1.22.0.36-1.el7sat |
foreman-installerRed Hat:satellite_capsule:6.6::el7 |
before 1:1.22.0.17-1.el7sat | 1:1.22.0.17-1.el7sat |
foreman-installer-katelloRed Hat:satellite_capsule:6.6::el7 |
before 1:1.22.0.17-1.el7sat | 1:1.22.0.17-1.el7sat |
foreman-proxy-contentRed Hat:satellite_capsule:6.6::el7 |
before 0:3.12.0-3.el7sat | 0:3.12.0-3.el7sat |
katelloRed Hat:satellite_capsule:6.6::el7 |
before 0:3.12.0-3.el7sat | 0:3.12.0-3.el7sat |
katello-commonRed Hat:satellite_capsule:6.6::el7 |
before 0:3.12.0-3.el7sat | 0:3.12.0-3.el7sat |
katello-debugRed Hat:satellite_capsule:6.6::el7 |
before 0:3.12.0-3.el7sat | 0:3.12.0-3.el7sat |
katello-serviceRed Hat:satellite_capsule:6.6::el7 |
before 0:3.12.0-3.el7sat | 0:3.12.0-3.el7sat |
redhat-access-insights-puppetRed Hat:satellite_capsule:6.6::el7 |
before 0:1.0.1-1.el7sat | 0:1.0.1-1.el7sat |
satelliteRed Hat:satellite_capsule:6.6::el7 |
before 0:6.6.2-1.el7sat | 0:6.6.2-1.el7sat |
satellite-capsuleRed Hat:satellite_capsule:6.6::el7 |
before 0:6.6.2-1.el7sat | 0:6.6.2-1.el7sat |
satellite-commonRed Hat:satellite_capsule:6.6::el7 |
before 0:6.6.2-1.el7sat | 0:6.6.2-1.el7sat |
satellite-debug-toolsRed Hat:satellite_capsule:6.6::el7 |
before 0:6.6.2-1.el7sat | 0:6.6.2-1.el7sat |
candlepinRed Hat:satellite:6.6::el7 |
before 0:2.6.13-1.el7sat | 0:2.6.13-1.el7sat |
candlepin-selinuxRed Hat:satellite:6.6::el7 |
before 0:2.6.13-1.el7sat | 0:2.6.13-1.el7sat |
foremanRed Hat:satellite:6.6::el7 |
before 0:1.22.0.36-1.el7sat | 0:1.22.0.36-1.el7sat |
foreman-cliRed Hat:satellite:6.6::el7 |
before 0:1.22.0.36-1.el7sat | 0:1.22.0.36-1.el7sat |
foreman-debugRed Hat:satellite:6.6::el7 |
before 0:1.22.0.36-1.el7sat | 0:1.22.0.36-1.el7sat |
foreman-ec2Red Hat:satellite:6.6::el7 |
before 0:1.22.0.36-1.el7sat | 0:1.22.0.36-1.el7sat |
foreman-gceRed Hat:satellite:6.6::el7 |
before 0:1.22.0.36-1.el7sat | 0:1.22.0.36-1.el7sat |
foreman-installerRed Hat:satellite:6.6::el7 |
before 1:1.22.0.17-1.el7sat | 1:1.22.0.17-1.el7sat |
foreman-installer-katelloRed Hat:satellite:6.6::el7 |
before 1:1.22.0.17-1.el7sat | 1:1.22.0.17-1.el7sat |
foreman-journaldRed Hat:satellite:6.6::el7 |
before 0:1.22.0.36-1.el7sat | 0:1.22.0.36-1.el7sat |
foreman-libvirtRed Hat:satellite:6.6::el7 |
before 0:1.22.0.36-1.el7sat | 0:1.22.0.36-1.el7sat |
foreman-openstackRed Hat:satellite:6.6::el7 |
before 0:1.22.0.36-1.el7sat | 0:1.22.0.36-1.el7sat |
foreman-ovirtRed Hat:satellite:6.6::el7 |
before 0:1.22.0.36-1.el7sat | 0:1.22.0.36-1.el7sat |
foreman-postgresqlRed Hat:satellite:6.6::el7 |
before 0:1.22.0.36-1.el7sat | 0:1.22.0.36-1.el7sat |
foreman-proxy-contentRed Hat:satellite:6.6::el7 |
before 0:3.12.0-3.el7sat | 0:3.12.0-3.el7sat |
foreman-rackspaceRed Hat:satellite:6.6::el7 |
before 0:1.22.0.36-1.el7sat | 0:1.22.0.36-1.el7sat |
foreman-telemetryRed Hat:satellite:6.6::el7 |
before 0:1.22.0.36-1.el7sat | 0:1.22.0.36-1.el7sat |
foreman-vmwareRed Hat:satellite:6.6::el7 |
before 0:1.22.0.36-1.el7sat | 0:1.22.0.36-1.el7sat |
katelloRed Hat:satellite:6.6::el7 |
before 0:3.12.0-3.el7sat | 0:3.12.0-3.el7sat |
katello-commonRed Hat:satellite:6.6::el7 |
before 0:3.12.0-3.el7sat | 0:3.12.0-3.el7sat |
katello-debugRed Hat:satellite:6.6::el7 |
before 0:3.12.0-3.el7sat | 0:3.12.0-3.el7sat |
katello-serviceRed Hat:satellite:6.6::el7 |
before 0:3.12.0-3.el7sat | 0:3.12.0-3.el7sat |
redhat-access-insights-puppetRed Hat:satellite:6.6::el7 |
before 0:1.0.1-1.el7sat | 0:1.0.1-1.el7sat |
satelliteRed Hat:satellite:6.6::el7 |
before 0:6.6.2-1.el7sat | 0:6.6.2-1.el7sat |
satellite-capsuleRed Hat:satellite:6.6::el7 |
before 0:6.6.2-1.el7sat | 0:6.6.2-1.el7sat |
satellite-cliRed Hat:satellite:6.6::el7 |
before 0:6.6.2-1.el7sat | 0:6.6.2-1.el7sat |
satellite-commonRed Hat:satellite:6.6::el7 |
before 0:6.6.2-1.el7sat | 0:6.6.2-1.el7sat |
satellite-debug-toolsRed Hat:satellite:6.6::el7 |
before 0:6.6.2-1.el7sat | 0:6.6.2-1.el7sat |
tfm-rubygem-foreman_ansibleRed Hat:satellite:6.6::el7 |
before 0:3.0.7.2-2.el7sat | 0:3.0.7.2-2.el7sat |
tfm-rubygem-katelloRed Hat:satellite:6.6::el7 |
before 0:3.12.0.37-1.el7sat | 0:3.12.0.37-1.el7sat |
tfm-rubygem-runcibleRed Hat:satellite:6.6::el7 |
before 0:2.12.1-1.el7sat | 0:2.12.1-1.el7sat |
rh-maven35-apache-commons-beanutilsRed Hat:rhel_software_collections:3::el7 |
before 0:1.9.3-2.3.el7 | 0:1.9.3-2.3.el7 |
rh-maven35-apache-commons-beanutils-javadocRed Hat:rhel_software_collections:3::el7 |
before 0:1.9.3-2.3.el7 | 0:1.9.3-2.3.el7 |
rh-java-common-apache-commons-beanutilsRed Hat:rhel_software_collections:3::el6 |
before 0:1.8.3-14.14.el6 | 0:1.8.3-14.14.el6 |
rh-java-common-apache-commons-beanutils-javadocRed Hat:rhel_software_collections:3::el6 |
before 0:1.8.3-14.14.el6 | 0:1.8.3-14.14.el6 |
rh-java-common-apache-commons-beanutilsRed Hat:rhel_software_collections:3::el7 |
before 0:1.8.3-14.15.el7 | 0:1.8.3-14.15.el7 |
rh-java-common-apache-commons-beanutils-javadocRed Hat:rhel_software_collections:3::el7 |
before 0:1.8.3-14.15.el7 | 0:1.8.3-14.15.el7 |
apache-commons-beanutilsRed Hat:enterprise_linux:7::client |
before 0:1.8.3-15.el7_7 | 0:1.8.3-15.el7_7 |
apache-commons-beanutils-javadocRed Hat:enterprise_linux:7::client |
before 0:1.8.3-15.el7_7 | 0:1.8.3-15.el7_7 |
apache-commons-beanutilsRed Hat:enterprise_linux:7::computenode |
before 0:1.8.3-15.el7_7 | 0:1.8.3-15.el7_7 |
apache-commons-beanutils-javadocRed Hat:enterprise_linux:7::computenode |
before 0:1.8.3-15.el7_7 | 0:1.8.3-15.el7_7 |
apache-commons-beanutilsRed Hat:enterprise_linux:7::server |
before 0:1.8.3-15.el7_7 | 0:1.8.3-15.el7_7 |
apache-commons-beanutils-javadocRed Hat:enterprise_linux:7::server |
before 0:1.8.3-15.el7_7 | 0:1.8.3-15.el7_7 |
apache-commons-beanutilsRed Hat:enterprise_linux:7::workstation |
before 0:1.8.3-15.el7_7 | 0:1.8.3-15.el7_7 |
apache-commons-beanutils-javadocRed Hat:enterprise_linux:7::workstation |
before 0:1.8.3-15.el7_7 | 0:1.8.3-15.el7_7 |
eap7-activemq-artemisRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:2.9.0-2.redhat_00009.1.el6eap | 0:2.9.0-2.redhat_00009.1.el6eap |
eap7-activemq-artemis-cliRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:2.9.0-2.redhat_00009.1.el6eap | 0:2.9.0-2.redhat_00009.1.el6eap |
eap7-activemq-artemis-commonsRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:2.9.0-2.redhat_00009.1.el6eap | 0:2.9.0-2.redhat_00009.1.el6eap |
eap7-activemq-artemis-core-clientRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:2.9.0-2.redhat_00009.1.el6eap | 0:2.9.0-2.redhat_00009.1.el6eap |
eap7-activemq-artemis-dtoRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:2.9.0-2.redhat_00009.1.el6eap | 0:2.9.0-2.redhat_00009.1.el6eap |
eap7-activemq-artemis-hornetq-protocolRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:2.9.0-2.redhat_00009.1.el6eap | 0:2.9.0-2.redhat_00009.1.el6eap |
eap7-activemq-artemis-hqclient-protocolRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:2.9.0-2.redhat_00009.1.el6eap | 0:2.9.0-2.redhat_00009.1.el6eap |
eap7-activemq-artemis-jdbc-storeRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:2.9.0-2.redhat_00009.1.el6eap | 0:2.9.0-2.redhat_00009.1.el6eap |
eap7-activemq-artemis-jms-clientRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:2.9.0-2.redhat_00009.1.el6eap | 0:2.9.0-2.redhat_00009.1.el6eap |
eap7-activemq-artemis-jms-serverRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:2.9.0-2.redhat_00009.1.el6eap | 0:2.9.0-2.redhat_00009.1.el6eap |
eap7-activemq-artemis-journalRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:2.9.0-2.redhat_00009.1.el6eap | 0:2.9.0-2.redhat_00009.1.el6eap |
eap7-activemq-artemis-raRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:2.9.0-2.redhat_00009.1.el6eap | 0:2.9.0-2.redhat_00009.1.el6eap |
eap7-activemq-artemis-selectorRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:2.9.0-2.redhat_00009.1.el6eap | 0:2.9.0-2.redhat_00009.1.el6eap |
eap7-activemq-artemis-serverRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:2.9.0-2.redhat_00009.1.el6eap | 0:2.9.0-2.redhat_00009.1.el6eap |
eap7-activemq-artemis-service-extensionsRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:2.9.0-2.redhat_00009.1.el6eap | 0:2.9.0-2.redhat_00009.1.el6eap |
eap7-activemq-artemis-toolsRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:2.9.0-2.redhat_00009.1.el6eap | 0:2.9.0-2.redhat_00009.1.el6eap |
eap7-apache-commons-beanutilsRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:1.9.4-1.redhat_00002.1.el6eap | 0:1.9.4-1.redhat_00002.1.el6eap |
eap7-codemodelRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:2.3.3-4.b02_redhat_00001.1.el6eap | 0:2.3.3-4.b02_redhat_00001.1.el6eap |
eap7-glassfish-elRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:3.0.1-4.b08_redhat_00003.1.el6eap | 0:3.0.1-4.b08_redhat_00003.1.el6eap |
eap7-glassfish-el-implRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:3.0.1-4.b08_redhat_00003.1.el6eap | 0:3.0.1-4.b08_redhat_00003.1.el6eap |
eap7-glassfish-jaxbRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:2.3.3-4.b02_redhat_00001.1.el6eap | 0:2.3.3-4.b02_redhat_00001.1.el6eap |
eap7-glassfish-jsfRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:2.3.5-7.SP3_redhat_00005.1.el6eap | 0:2.3.5-7.SP3_redhat_00005.1.el6eap |
eap7-hal-consoleRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:3.0.20-1.Final_redhat_00001.1.el6eap | 0:3.0.20-1.Final_redhat_00001.1.el6eap |
eap7-hibernateRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:5.3.15-1.Final_redhat_00001.1.el6eap | 0:5.3.15-1.Final_redhat_00001.1.el6eap |
eap7-hibernate-coreRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:5.3.15-1.Final_redhat_00001.1.el6eap | 0:5.3.15-1.Final_redhat_00001.1.el6eap |
eap7-hibernate-entitymanagerRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:5.3.15-1.Final_redhat_00001.1.el6eap | 0:5.3.15-1.Final_redhat_00001.1.el6eap |
eap7-hibernate-enversRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:5.3.15-1.Final_redhat_00001.1.el6eap | 0:5.3.15-1.Final_redhat_00001.1.el6eap |
eap7-hibernate-java8Red Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:5.3.15-1.Final_redhat_00001.1.el6eap | 0:5.3.15-1.Final_redhat_00001.1.el6eap |
eap7-infinispanRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:9.3.8-1.Final_redhat_00001.1.el6eap | 0:9.3.8-1.Final_redhat_00001.1.el6eap |
eap7-infinispan-cachestore-jdbcRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:9.3.8-1.Final_redhat_00001.1.el6eap | 0:9.3.8-1.Final_redhat_00001.1.el6eap |
eap7-infinispan-cachestore-remoteRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:9.3.8-1.Final_redhat_00001.1.el6eap | 0:9.3.8-1.Final_redhat_00001.1.el6eap |
eap7-infinispan-client-hotrodRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:9.3.8-1.Final_redhat_00001.1.el6eap | 0:9.3.8-1.Final_redhat_00001.1.el6eap |
eap7-infinispan-commonsRed Hat:jboss_enterprise_application_platform:7.2::el6 |
before 0:9.3.8-1.Final_redhat_00001.1.el6eap | 0:9.3.8-1.Final_redhat_00001.1.el6eap |
antRocky Linux:8 |
before 0:1.10.5-1.module+el8.3.0+74+855e3f5d | 0:1.10.5-1.module+el8.3.0+74+855e3f5d |
antRocky Linux:8 |
before 0:1.10.5-1.module+el8.10.0+2003+8aeac9cb | 0:1.10.5-1.module+el8.10.0+2003+8aeac9cb |
ant-contribRocky Linux:8 |
before 0:1.0-0.32.b3.module+el8.3.0+74+855e3f5d | 0:1.0-0.32.b3.module+el8.3.0+74+855e3f5d |
antlrRocky Linux:8 |
before 0:2.7.7-56.module+el8.3.0+74+855e3f5d | 0:2.7.7-56.module+el8.3.0+74+855e3f5d |
aopallianceRocky Linux:8 |
before 0:1.0-17.module+el8.6.0+843+5a13dac3 | 0:1.0-17.module+el8.6.0+843+5a13dac3 |
aopallianceRocky Linux:8 |
before 0:1.0-17.module+el8.10.0+2003+8aeac9cb | 0:1.0-17.module+el8.10.0+2003+8aeac9cb |
aopallianceRocky Linux:8 |
before 0:1.0-17.module+el8.3.0+74+855e3f5d | 0:1.0-17.module+el8.3.0+74+855e3f5d |
apache-commons-beanutilsRocky Linux:8 |
before 0:1.9.3-5.module+el8.10.0+2003+8aeac9cb | 0:1.9.3-5.module+el8.10.0+2003+8aeac9cb |
apache-commons-cliRocky Linux:8 |
before 0:1.4-4.module+el8.6.0+843+5a13dac3 | 0:1.4-4.module+el8.6.0+843+5a13dac3 |
apache-commons-cliRocky Linux:8 |
before 0:1.4-4.module+el8.10.0+2003+8aeac9cb | 0:1.4-4.module+el8.10.0+2003+8aeac9cb |
apache-commons-cliRocky Linux:8 |
before 0:1.4-4.module+el8.3.0+74+855e3f5d | 0:1.4-4.module+el8.3.0+74+855e3f5d |
apache-commons-codecRocky Linux:8 |
before 0:1.11-3.module+el8.6.0+843+5a13dac3 | 0:1.11-3.module+el8.6.0+843+5a13dac3 |
apache-commons-codecRocky Linux:8 |
before 0:1.11-3.module+el8.10.0+2003+8aeac9cb | 0:1.11-3.module+el8.10.0+2003+8aeac9cb |
apache-commons-codecRocky Linux:8 |
before 0:1.11-3.module+el8.3.0+74+855e3f5d | 0:1.11-3.module+el8.3.0+74+855e3f5d |
apache-commons-collectionsRocky Linux:8 |
before 0:3.2.2-10.module+el8.10.0+1763+c7c02164 | 0:3.2.2-10.module+el8.10.0+1763+c7c02164 |
apache-commons-collectionsRocky Linux:8 |
before 0:3.2.2-10.module+el8.3.0+74+855e3f5d | 0:3.2.2-10.module+el8.3.0+74+855e3f5d |
apache-commons-compressRocky Linux:8 |
before 0:1.18-1.module+el8.3.0+74+855e3f5d | 0:1.18-1.module+el8.3.0+74+855e3f5d |
apache-commons-compressRocky Linux:8 |
before 0:1.18-1.module+el8.10.0+2003+8aeac9cb | 0:1.18-1.module+el8.10.0+2003+8aeac9cb |
apache-commons-execRocky Linux:8 |
before 0:1.3-8.module+el8.3.0+74+855e3f5d | 0:1.3-8.module+el8.3.0+74+855e3f5d |
apache-commons-ioRocky Linux:8 |
before 1:2.6-3.module+el8.6.0+843+5a13dac3 | 1:2.6-3.module+el8.6.0+843+5a13dac3 |
apache-commons-ioRocky Linux:8 |
before 1:2.6-3.module+el8.3.0+74+855e3f5d | 1:2.6-3.module+el8.3.0+74+855e3f5d |
apache-commons-ioRocky Linux:8 |
before 1:2.6-3.module+el8.10.0+2003+8aeac9cb | 1:2.6-3.module+el8.10.0+2003+8aeac9cb |
apache-commons-jxpathRocky Linux:8 |
before 0:1.3-29.module+el8.3.0+74+855e3f5d | 0:1.3-29.module+el8.3.0+74+855e3f5d |
apache-commons-jxpathRocky Linux:8 |
before 0:1.3-29.module+el8.10.0+2003+8aeac9cb | 0:1.3-29.module+el8.10.0+2003+8aeac9cb |
apache-commons-langRocky Linux:8 |
before 0:2.6-21.module+el8.10.0+1763+c7c02164 | 0:2.6-21.module+el8.10.0+1763+c7c02164 |
apache-commons-langRocky Linux:8 |
before 0:2.6-21.module+el8.3.0+74+855e3f5d | 0:2.6-21.module+el8.3.0+74+855e3f5d |
apache-commons-lang3Rocky Linux:8 |
before 0:3.7-3.module+el8.6.0+843+5a13dac3 | 0:3.7-3.module+el8.6.0+843+5a13dac3 |
apache-commons-lang3Rocky Linux:8 |
before 0:3.7-3.module+el8.10.0+2003+8aeac9cb | 0:3.7-3.module+el8.10.0+2003+8aeac9cb |
apache-commons-lang3Rocky Linux:8 |
before 0:3.7-3.module+el8.3.0+74+855e3f5d | 0:3.7-3.module+el8.3.0+74+855e3f5d |
apache-commons-loggingRocky Linux:8 |
before 0:1.2-13.module+el8.3.0+133+b8b54b58 | 0:1.2-13.module+el8.3.0+133+b8b54b58 |
apache-commons-loggingRocky Linux:8 |
before 0:1.2-13.module+el8.3.0+74+855e3f5d | 0:1.2-13.module+el8.3.0+74+855e3f5d |
apache-commons-netRocky Linux:8 |
before 0:3.6-3.module+el8.10.0+1763+c7c02164 | 0:3.6-3.module+el8.10.0+1763+c7c02164 |
apache-commons-netRocky Linux:8 |
before 0:3.6-3.module+el8.3.0+74+855e3f5d | 0:3.6-3.module+el8.3.0+74+855e3f5d |
apache-commons-parentRocky Linux:8 |
before 0:43-2.module+el8.3.0+74+855e3f5d | 0:43-2.module+el8.3.0+74+855e3f5d |
apache-ivyRocky Linux:8 |
before 0:2.4.0-14.module+el8.3.0+74+855e3f5d | 0:2.4.0-14.module+el8.3.0+74+855e3f5d |
apache-parentRocky Linux:8 |
before 0:19-2.module+el8.10.0+2003+8aeac9cb | 0:19-2.module+el8.10.0+2003+8aeac9cb |
apache-parentRocky Linux:8 |
before 0:19-2.module+el8.3.0+74+855e3f5d | 0:19-2.module+el8.3.0+74+855e3f5d |
apache-resource-bundlesRocky Linux:8 |
before 0:2-20.module+el8.3.0+74+855e3f5d | 0:2-20.module+el8.3.0+74+855e3f5d |
aqute-bndRocky Linux:8 |
before 0:3.5.0-4.module+el8.3.0+74+855e3f5d | 0:3.5.0-4.module+el8.3.0+74+855e3f5d |
assertj-coreRocky Linux:8 |
before 0:3.8.0-2.module+el8.3.0+74+855e3f5d | 0:3.8.0-2.module+el8.3.0+74+855e3f5d |
atinjectRocky Linux:8 |
before 0:1-28.20100611svn86.module+el8.6.0+843+5a13dac3 | 0:1-28.20100611svn86.module+el8.6.0+843+5a13dac3 |
atinjectRocky Linux:8 |
before 0:1-28.20100611svn86.module+el8.10.0+2003+8aeac9cb | 0:1-28.20100611svn86.module+el8.10.0+2003+8aeac9cb |
atinjectRocky Linux:8 |
before 0:1-28.20100611svn86.module+el8.3.0+74+855e3f5d | 0:1-28.20100611svn86.module+el8.3.0+74+855e3f5d |
bcelRocky Linux:8 |
before 0:6.2-2.module+el8.3.0+74+855e3f5d | 0:6.2-2.module+el8.3.0+74+855e3f5d |
beust-jcommanderRocky Linux:8 |
before 0:1.71-5.module+el8.3.0+74+855e3f5d | 0:1.71-5.module+el8.3.0+74+855e3f5d |
bsfRocky Linux:8 |
before 0:2.4.0-30.module+el8.3.0+74+855e3f5d | 0:2.4.0-30.module+el8.3.0+74+855e3f5d |
bshRocky Linux:8 |
before 0:2.0-13.b6.module+el8.3.0+74+855e3f5d | 0:2.0-13.b6.module+el8.3.0+74+855e3f5d |
byaccjRocky Linux:8 |
before 0:1.15-17.module+el8.10.0+2003+8aeac9cb | 0:1.15-17.module+el8.10.0+2003+8aeac9cb |
byaccjRocky Linux:8 |
before 0:1.15-17.module+el8.3.0+74+855e3f5d | 0:1.15-17.module+el8.3.0+74+855e3f5d |
cal10nRocky Linux:8 |
before 0:0.8.1-7.module+el8.3.0+74+855e3f5d | 0:0.8.1-7.module+el8.3.0+74+855e3f5d |
cdi-apiRocky Linux:8 |
before 0:1.2-8.module+el8.6.0+843+5a13dac3 | 0:1.2-8.module+el8.6.0+843+5a13dac3 |
cdi-apiRocky Linux:8 |
before 0:1.2-8.module+el8.10.0+2003+8aeac9cb | 0:1.2-8.module+el8.10.0+2003+8aeac9cb |
cdi-apiRocky Linux:8 |
before 0:1.2-8.module+el8.3.0+74+855e3f5d | 0:1.2-8.module+el8.3.0+74+855e3f5d |
cglibRocky Linux:8 |
before 0:3.2.4-7.module+el8.3.0+74+855e3f5d | 0:3.2.4-7.module+el8.3.0+74+855e3f5d |
easymockRocky Linux:8 |
before 0:3.5-4.module+el8.3.0+74+855e3f5d | 0:3.5-4.module+el8.3.0+74+855e3f5d |
exec-maven-pluginRocky Linux:8 |
before 0:1.6.0-3.module+el8.3.0+74+855e3f5d | 0:1.6.0-3.module+el8.3.0+74+855e3f5d |
felix-osgi-compendiumRocky Linux:8 |
before 0:1.4.0-26.module+el8.3.0+74+855e3f5d | 0:1.4.0-26.module+el8.3.0+74+855e3f5d |
felix-osgi-coreRocky Linux:8 |
before 0:1.4.0-23.module+el8.3.0+74+855e3f5d | 0:1.4.0-23.module+el8.3.0+74+855e3f5d |
felix-osgi-foundationRocky Linux:8 |
before 0:1.2.0-23.module+el8.3.0+74+855e3f5d | 0:1.2.0-23.module+el8.3.0+74+855e3f5d |
hawtjniRocky Linux:8 |
before 0:1.16-2.module+el8.3.0+133+b8b54b58 | 0:1.16-2.module+el8.3.0+133+b8b54b58 |
hawtjniRocky Linux:8 |
before 0:1.16-2.module+el8.3.0+74+855e3f5d | 0:1.16-2.module+el8.3.0+74+855e3f5d |
felix-parentRocky Linux:8 |
before 0:4-5.module+el8.3.0+74+855e3f5d | 0:4-5.module+el8.3.0+74+855e3f5d |
felix-utilsRocky Linux:8 |
before 0:1.10.4-2.module+el8.3.0+74+855e3f5d | 0:1.10.4-2.module+el8.3.0+74+855e3f5d |
forge-parentRocky Linux:8 |
before 0:38-11.module+el8.3.0+74+855e3f5d | 0:38-11.module+el8.3.0+74+855e3f5d |
fusesource-pomRocky Linux:8 |
before 0:1.11-3.module+el8.3.0+74+855e3f5d | 0:1.11-3.module+el8.3.0+74+855e3f5d |
geronimo-annotationRocky Linux:8 |
before 0:1.0-23.module+el8.6.0+843+5a13dac3 | 0:1.0-23.module+el8.6.0+843+5a13dac3 |
geronimo-annotationRocky Linux:8 |
before 0:1.0-23.module+el8.10.0+2003+8aeac9cb | 0:1.0-23.module+el8.10.0+2003+8aeac9cb |
geronimo-annotationRocky Linux:8 |
before 0:1.0-23.module+el8.3.0+74+855e3f5d | 0:1.0-23.module+el8.3.0+74+855e3f5d |
geronimo-jmsRocky Linux:8 |
before 0:1.1.1-25.module+el8.3.0+74+855e3f5d | 0:1.1.1-25.module+el8.3.0+74+855e3f5d |
geronimo-jpaRocky Linux:8 |
before 0:1.1.1-21.module+el8.3.0+74+855e3f5d | 0:1.1.1-21.module+el8.3.0+74+855e3f5d |
geronimo-parent-pomsRocky Linux:8 |
before 0:1.6-25.module+el8.3.0+74+855e3f5d | 0:1.6-25.module+el8.3.0+74+855e3f5d |
glassfish-annotation-apiRocky Linux:8 |
before 0:1.2-13.module+el8.3.0+74+855e3f5d | 0:1.2-13.module+el8.3.0+74+855e3f5d |
glassfish-annotation-apiRocky Linux:8 |
before 0:1.2-13.module+el8.10.0+2003+8aeac9cb | 0:1.2-13.module+el8.10.0+2003+8aeac9cb |
glassfish-elRocky Linux:8 |
before 0:3.0.1-0.7.b08.module+el8.6.0+975+c0ed2db8 | 0:3.0.1-0.7.b08.module+el8.6.0+975+c0ed2db8 |
glassfish-elRocky Linux:8 |
before 0:3.0.1-0.7.b08.module+el8.3.0+74+855e3f5d | 0:3.0.1-0.7.b08.module+el8.3.0+74+855e3f5d |
glassfish-elRocky Linux:8 |
before 0:3.0.1-0.7.b08.module+el8.10.0+2003+8aeac9cb | 0:3.0.1-0.7.b08.module+el8.10.0+2003+8aeac9cb |
glassfish-jsp-apiRocky Linux:8 |
before 0:2.3.2-0.9.b01.module+el8.10.0+2003+8aeac9cb | 0:2.3.2-0.9.b01.module+el8.10.0+2003+8aeac9cb |
glassfish-jsp-apiRocky Linux:8 |
before 0:2.3.2-0.9.b01.module+el8.3.0+74+855e3f5d | 0:2.3.2-0.9.b01.module+el8.3.0+74+855e3f5d |
glassfish-legalRocky Linux:8 |
before 0:1.1-11.module+el8.3.0+74+855e3f5d | 0:1.1-11.module+el8.3.0+74+855e3f5d |
glassfish-master-pomRocky Linux:8 |
before 0:8-11.module+el8.3.0+74+855e3f5d | 0:8-11.module+el8.3.0+74+855e3f5d |
glassfish-servlet-apiRocky Linux:8 |
before 0:3.1.0-14.module+el8.10.0+2003+8aeac9cb | 0:3.1.0-14.module+el8.10.0+2003+8aeac9cb |
glassfish-servlet-apiRocky Linux:8 |
before 0:3.1.0-14.module+el8.3.0+74+855e3f5d | 0:3.1.0-14.module+el8.3.0+74+855e3f5d |
google-guiceRocky Linux:8 |
before 0:4.1-11.module+el8.6.0+843+5a13dac3 | 0:4.1-11.module+el8.6.0+843+5a13dac3 |
google-guiceRocky Linux:8 |
before 0:4.1-11.module+el8.3.0+74+855e3f5d | 0:4.1-11.module+el8.3.0+74+855e3f5d |
google-guiceRocky Linux:8 |
before 0:4.1-11.module+el8.10.0+2003+8aeac9cb | 0:4.1-11.module+el8.10.0+2003+8aeac9cb |
guava20Rocky Linux:8 |
before 0:20.0-8.module+el8.3.0+133+b8b54b58 | 0:20.0-8.module+el8.3.0+133+b8b54b58 |
guava20Rocky Linux:8 |
before 0:20.0-8.module+el8.3.0+74+855e3f5d | 0:20.0-8.module+el8.3.0+74+855e3f5d |
hamcrestRocky Linux:8 |
before 0:1.3-23.module+el8.10.0+2003+8aeac9cb | 0:1.3-23.module+el8.10.0+2003+8aeac9cb |
hamcrestRocky Linux:8 |
before 0:1.3-23.module+el8.3.0+74+855e3f5d | 0:1.3-23.module+el8.3.0+74+855e3f5d |
httpcomponents-clientRocky Linux:8 |
before 0:4.5.5-4.module+el8.10.0+2003+8aeac9cb | 0:4.5.5-4.module+el8.10.0+2003+8aeac9cb |
httpcomponents-clientRocky Linux:8 |
before 0:4.5.5-4.module+el8.3.0+74+855e3f5d | 0:4.5.5-4.module+el8.3.0+74+855e3f5d |
httpcomponents-coreRocky Linux:8 |
before 0:4.4.10-4.module+el8.10.0+2003+8aeac9cb | 0:4.4.10-4.module+el8.10.0+2003+8aeac9cb |
commons-beanutils:commons-beanutilsRoot:Maven |
before 1.8.3-aikido.1 | 1.8.3-aikido.11.6-aikido.21.7.0-aikido.21.8.3-aikido.21.9.4-aikido.2 |
io.root.commons-beanutils:commons-beanutilsRoot:Maven |
before 1.6-root.io.1 | 1.6-root.io.11.8.3-root.io.11.7.0-root.io.11.6-root.io.21.7.0-root.io.21.8.3-root.io.21.9.4-root.io.11.9.4-root.io.2 |
apache-commons-beanutilsSUSE:Linux Enterprise Server 12 SP4 |
before 1.9.2-3.3.1 | 1.9.2-3.3.1 |
apache-commons-beanutilsSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 1.9.2-3.3.1 | 1.9.2-3.3.1 |
apache-commons-beanutilsSUSE:Linux Enterprise Module for Web and Scripting 15 |
before 1.9.2-4.3.1 | 1.9.2-4.3.1 |
apache-commons-beanutilsSUSE:Linux Enterprise Module for Web and Scripting 15 SP1 |
before 1.9.2-4.3.1 | 1.9.2-4.3.1 |
commons-beanutilsUbuntu:Pro:14.04:LTS |
before 1.9.1-1ubuntu0.1~esm1, plus listed versions 1.8.3-41.9.0-11.9.1-1 |
1.9.1-1ubuntu0.1~esm1 |
commons-beanutilsUbuntu:Pro:16.04:LTS |
before 1.9.2-3ubuntu0.1~esm1, plus listed versions 1.9.2-11.9.2-21.9.2-3 |
1.9.2-3ubuntu0.1~esm1 |
commons-beanutilsUbuntu:Pro:18.04:LTS |
before 1.9.3-1ubuntu0.1~esm1, plus listed versions 1.9.3-1 |
1.9.3-1ubuntu0.1~esm1 |
commons-beanutilsUbuntu:Pro:16.04:LTS |
before 1.9.2-3ubuntu0.1~esm2, plus listed versions 1.9.2-11.9.2-21.9.2-31.9.2-3ubuntu0.1~esm1 |
1.9.2-3ubuntu0.1~esm2 |
apache-commons-beanutilsopenSUSE:Leap 15.0 |
before 1.9.2-lp151.3.3.1 | 1.9.2-lp151.3.3.1 |
apache-commons-beanutilsopenSUSE:Leap 15.1 |
before 1.9.2-lp151.3.3.1 | 1.9.2-lp151.3.3.1 |
apache-commons-beanutilsopenSUSE:Tumbleweed |
before 1.9.4-3.7 | 1.9.4-3.7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-10086 is a high vulnerability (CVSS 7.3) in Apache Commons Beanutils, published August 20, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 29.1%, the 98th percentile. Fixed in commons-beanutils:commons-beanutils 1.9.4.
References
mail-archives.apache.org/mod_mbox/www-announce/201908.mbox/%3cC628798F-315D-4428-8CB1-4ED1ECC958E4%40apache.org%3e
lists.debian.org/debian-lts-announce/2019/08/msg00030.html
lists.apache.org/thread.html/3d1ed1a1596c08c4d5fea97b36c651ce167b773f1afc75251ce7a125%40%3Ccommits.tinkerpop.apache.org%3E
lists.opensuse.org/opensuse-security-announce/2019-09/msg00007.html
Show 194 moreShow less
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4APPGLBWMFAS4WHNLR4LIJ65DJGPV7TF
access.redhat.com/errata/RHSA-2019:4317
oracle.com/security-alerts/cpuapr2020.html
nvd.nist.gov/vuln/detail/CVE-2019-10086
github.com/advisories/GHSA-6phf-73q6-gh87
bugzilla.redhat.com/1767483
errata.almalinux.org/8/ALSA-2025-9318.html
security-tracker.debian.org/tracker/CVE-2019-10086
advisories.mageia.org/MGASA-2019-0399.html
bugs.mageia.org/show_bug.cgi?id=25765
security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_0496.json
cve.org/CVERecord?id=CVE-2019-10086
commons.apache.org/proper/commons-beanutils/javadocs/v1.9.4/RELEASE-NOTES.txt
issues.redhat.com/browse/JBEAP-16051
netty.io/news/2019/12/18/4-1-44-Final.html
openwall.com/lists/oss-security/2019/04/14/1
docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1
kb.cert.org/vuls/id/605641
nodejs.org/en/blog/vulnerability/aug-2019-security-releases
nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities
groups.google.com/forum
mail-archive.com/[email protected]/msg06408.html
meterpreter.org/cve-2020-1938-apache-tomcat-ajp-connector-remote-code-execution-vulnerability-alert
cnvd.org.cn/webinfo/show/5415
tenable.com/blog/cve-2020-1938-ghostcat-apache-tomcat-ajp-file-readinclusion-vulnerability-cnvd-2020-10487
errata.rockylinux.org/RLSA-2025:9318
suse.com/support/update/announcement/2019/suse-su-20192244-1
bugzilla.suse.com/1146657
ubuntu.com/security/CVE-2019-10086
issues.apache.org/jira/browse/BEANUTILS-520
launchpad.net/bugs/2161582
This page doesn't list everything
Left out here: 1,152 package rows and 479 references. The JSON record has them. Also not on the record: 1,126 package claims. ID and package lookups still check them.