Every CVE Search/ Get API key

CVE-2020-13956

Cross-site scripting in Apache HttpClient

5.3 MediumFix available

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
None

Exploit likelihood

9.03%Down 8.6 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 5.3

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

Record
CVE-2020-13956
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Weakness
CWE-20
Updated
2026-11-02
CVE List 5.3

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

Record
CVE-2020-13956
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-20
Updated
2026-11-02
EUVDEUVD-2021-1284 5.3

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

Record
EUVD-2021-1284
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-7r82-7xv7-xcpj 5.3

Cross-site scripting in Apache HttpClient

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

Record
GHSA-7r82-7xv7-xcpj
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-79
Updated
2026-11-02
OSV 5.3

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

Record
CVE-2020-13956
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2020-13956 5.3

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

Record
DEBIAN-CVE-2020-13956
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
Show 39 moreShow less
OSVGHSA-7r82-7xv7-xcpj 5.3

Cross-site scripting in Apache HttpClient

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

Record
GHSA-7r82-7xv7-xcpj
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-79
Updated
2026-11-02
OSVRHLW-2026-7b188d550bf6bfc3 5.3

Lightwell Security Advisory: httpclient 4.5.6.rhlw-00001

Red Hat Lightwell has released org.apache.httpcomponents:httpclient 4.5.6.rhlw-00001 with a backported security fix.

CVE-2020-13956: Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

This patched artifact is a drop-in replacement for org.apache.httpcomponents:httpclient 4.5.6 from Maven Central.

Record
RHLW-2026-7b188d550bf6bfc3
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRHLW-2026-e6d7b954cd8149d6 5.3

Lightwell Security Advisory: httpclient 4.5.12.rhlw-00001

Red Hat Lightwell has released org.apache.httpcomponents:httpclient 4.5.12.rhlw-00001 with a backported security fix.

CVE-2020-13956: Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

This patched artifact is a drop-in replacement for org.apache.httpcomponents:httpclient 4.5.12 from Maven Central.

Record
RHLW-2026-e6d7b954cd8149d6
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRHSA-2021:0246 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.5 security update

Record
RHSA-2021:0246
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2021:0247 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.5 security update

Record
RHSA-2021:0247
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2021:0248 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.5 security update

Record
RHSA-2021:0248
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:0722 5.3

Red Hat Security Advisory: rh-maven36-httpcomponents-client security update

Record
RHSA-2022:0722
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRHSA-2022:1860 5.3

Red Hat Security Advisory: maven:3.6 security and enhancement update

Record
RHSA-2022:1860
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRHSA-2022:1861 5.3

Red Hat Security Advisory: maven:3.5 security update

Record
RHSA-2022:1861
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRLSA-2022:1860 5.3

Moderate: maven:3.6 security and enhancement update

Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information.

Security Fix(es):

  • apache-httpclient: incorrect handling of malformed authority component in request URIs (CVE-2020-13956)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section.

Record
RLSA-2022:1860
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRLSA-2022:1861 5.3

Moderate: maven:3.5 security update

Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information.

Security Fix(es):

  • apache-httpclient: incorrect handling of malformed authority component in request URIs (CVE-2020-13956)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section.

Record
RLSA-2022:1861
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2020-13956 5.3

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

Record
UBUNTU-CVE-2020-13956
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVALSA-2022:1860 No score

Moderate: maven:3.6 security and enhancement update

Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information.

Security Fix(es):

  • apache-httpclient: incorrect handling of malformed authority component in request URIs (CVE-2020-13956)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2022:1860
Updated
2026-11-02
OSVALSA-2022:1861 No score

Moderate: maven:3.5 security update

Maven is a software project management and comprehension tool. Based on the concept of a project object model (POM), Maven can manage a project's build, reporting and documentation from a central piece of information.

Security Fix(es):

  • apache-httpclient: incorrect handling of malformed authority component in request URIs (CVE-2020-13956)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2022:1861
Updated
2026-11-02
OSVCLSA-2025-1765325275 No score

TuxCare security update for org.apache.httpcomponents:httpclient (1 CVE)

TuxCare rebuilt org.apache.httpcomponents:httpclient to address 1 CVE. Fixed in 4.5.2-tuxcare.1.

Record
CLSA-2025-1765325275
Updated
2026-11-02
OSVCLSA-2026-1784682871 No score

TuxCare security update for org.apache.httpcomponents:httpclient (1 CVE)

TuxCare rebuilt org.apache.httpcomponents:httpclient to address 1 CVE. Fixed in 4.5.8-tuxcare.1.

Record
CLSA-2026-1784682871
Updated
2026-11-02
OSVCLSA-2026-1785291356 No score

TuxCare security update for org.apache.httpcomponents:httpclient (1 CVE)

TuxCare rebuilt org.apache.httpcomponents:httpclient to address 1 CVE. Fixed in 4.5.9-tuxcare.1.

Record
CLSA-2026-1785291356
Updated
2026-11-02
OSVCLSA-2026-1785291357 No score

TuxCare security update for org.apache.httpcomponents:httpclient (1 CVE)

TuxCare rebuilt org.apache.httpcomponents:httpclient to address 1 CVE. Fixed in 4.5.6-tuxcare.1.

Record
CLSA-2026-1785291357
Updated
2026-11-02
OSVCLSA-2026-1785291358 No score

TuxCare security update for org.apache.httpcomponents:httpclient (1 CVE)

TuxCare rebuilt org.apache.httpcomponents:httpclient to address 1 CVE. Fixed in 4.5.10-tuxcare.1.

Record
CLSA-2026-1785291358
Updated
2026-11-02
OSVCLSA-2026-1786354766 No score

TuxCare security update for org.apache.httpcomponents:httpclient (1 CVE)

TuxCare rebuilt org.apache.httpcomponents:httpclient to address 1 CVE. Fixed in 4.2-tuxcare.1.

Record
CLSA-2026-1786354766
Updated
2026-11-02
OSVCLSA-2026-1786947088 No score

TuxCare security update for org.apache.httpcomponents:httpclient (1 CVE)

TuxCare rebuilt org.apache.httpcomponents:httpclient to address 1 CVE. Fixed in 4.2.6-tuxcare.1.

Record
CLSA-2026-1786947088
Updated
2026-11-02
OSVCLSA-2026-1789379188 No score

TuxCare security update for org.apache.httpcomponents:httpclient (1 CVE)

TuxCare rebuilt org.apache.httpcomponents:httpclient to address 1 CVE. Fixed in 4.0.1-tuxcare.1.

Record
CLSA-2026-1789379188
Updated
2026-11-02
OSVCLSA-2026-1789379710 No score

TuxCare security update for org.apache.httpcomponents:httpclient (1 CVE)

TuxCare rebuilt org.apache.httpcomponents:httpclient to address 1 CVE. Fixed in 4.5.12-tuxcare.1.

Record
CLSA-2026-1789379710
Updated
2026-11-02
OSVCLSA-2026-1789400657 No score

TuxCare security update for org.apache.httpcomponents:httpclient (1 CVE)

TuxCare rebuilt org.apache.httpcomponents:httpclient to address 1 CVE. Fixed in 4.5-tuxcare.1.

Record
CLSA-2026-1789400657
Updated
2026-11-02
OSVCLSA-2026-1789471072 No score

TuxCare security update for org.apache.httpcomponents:httpclient (1 CVE)

TuxCare rebuilt org.apache.httpcomponents:httpclient to address 1 CVE. Fixed in 4.2.1-tuxcare.1.

Record
CLSA-2026-1789471072
Updated
2026-11-02
OSVCLSA-2026-1789556475 No score

TuxCare security update for org.apache.httpcomponents:httpclient (1 CVE)

TuxCare rebuilt org.apache.httpcomponents:httpclient to address 1 CVE. Fixed in 4.5.1-tuxcare.1.

Record
CLSA-2026-1789556475
Updated
2026-11-02
OSVCLSA-2026-1791898812 No score

TuxCare security update for org.apache.httpcomponents:httpclient (1 CVE)

TuxCare rebuilt org.apache.httpcomponents:httpclient to address 1 CVE. Fixed in 4.4-tuxcare.1.

Record
CLSA-2026-1791898812
Updated
2026-11-02
OSVCLSA-2026-1791960465 No score

TuxCare security update for org.apache.httpcomponents:httpclient (3 CVEs)

TuxCare rebuilt org.apache.httpcomponents:httpclient to address 3 CVEs. Fixed in 4.1.2-tuxcare.1.

Record
CLSA-2026-1791960465
Updated
2026-11-02
OSVCLSA-2026-1792743930 No score

TuxCare security update for org.apache.httpcomponents:httpclient (3 CVEs)

TuxCare rebuilt org.apache.httpcomponents:httpclient to address 3 CVEs. Fixed in 4.2.2-tuxcare.1.

Record
CLSA-2026-1792743930
Updated
2026-11-02
OSVCLSA-2026-1792744544 No score

TuxCare security update for org.apache.httpcomponents:httpclient (1 CVE)

TuxCare rebuilt org.apache.httpcomponents:httpclient to address 1 CVE. Fixed in 4.5.4-tuxcare.1.

Record
CLSA-2026-1792744544
Updated
2026-11-02
OSVCLSA-2026-1792744871 No score

TuxCare security update for org.apache.httpcomponents:httpclient (1 CVE)

TuxCare rebuilt org.apache.httpcomponents:httpclient to address 1 CVE. Fixed in 4.5.5-tuxcare.1.

Record
CLSA-2026-1792744871
Updated
2026-11-02
OSVCLSA-2026-1792745336 No score

TuxCare security update for org.apache.httpcomponents:httpclient (1 CVE)

TuxCare rebuilt org.apache.httpcomponents:httpclient to address 1 CVE. Fixed in 4.4.1-tuxcare.1.

Record
CLSA-2026-1792745336
Updated
2026-11-02
OSVCLSA-2026-1793886120 No score

TuxCare security update for org.apache.httpcomponents:httpclient (4 CVEs)

TuxCare rebuilt org.apache.httpcomponents:httpclient to address 4 CVEs. Fixed in 4.2.5-tuxcare.1.

Record
CLSA-2026-1793886120
Updated
2026-11-06
OSVCLSA-2026-1793886295 No score

TuxCare security update for org.apache.httpcomponents:httpclient (5 CVEs)

TuxCare rebuilt org.apache.httpcomponents:httpclient to address 5 CVEs. Fixed in 4.1.3-tuxcare.1.

Record
CLSA-2026-1793886295
Updated
2026-11-06
OSVMGASA-2021-0314 No score

Updated httpcomponents-client packages fix a security vulnerability

Priyank Nigam discovered that HttpComponents Client could misinterpret malformed authority component in a request URI and pick the wrong target host for request execution (CVE-2020-13956).

Record
MGASA-2021-0314
Updated
2026-11-02
OSVopenSUSE-SU-2024:10687-1 No score

clojure-1.10.3.855-1.2 on GA media

These are all security issues fixed in the clojure-1.10.3.855-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10687-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14478-1 No score

httpcomponents-client-4.5.14-1.1 on GA media

These are all security issues fixed in the httpcomponents-client-4.5.14-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14478-1
Updated
2026-11-02
OSVSUSE-SU-2024:4036-1 No score

Security update for httpcomponents-client, httpcomponents-core

This update for httpcomponents-client, httpcomponents-core fixes the following issues:

httpcomponents-client:

  • Update to version 4.5.14
    • HTTPCLIENT-2206: Corrected resource de-allocation by fluent response objects.
    • HTTPCLIENT-2174: URIBuilder to return a new empty list instead of unmodifiable Collections#emptyList.
    • Don't retry requests in case of NoRouteToHostException.
    • HTTPCLIENT-2144: RequestBuilder fails to correctly copy charset of requests with form url-encoded body.
    • PR #269: 4.5.x use array fill and more.
      • Use Arrays.fill().
      • Remove redundant modifiers.
      • Use Collections.addAll() and Collection.addAll() APIs instead of loops.
      • Remove redundant returns.
      • No need to explicitly declare an array when calling a vararg method.
      • Remote extra semicolons (;).
      • Use a 'L' instead of 'l' to make long literals more readable.
    • PublicSuffixListParser.parseByType(Reader) allocates but does not use a 256 char StringBuilder.
    • Incorrect handling of malformed authority component by URIUtils#extractHost (bsc#1177488, CVE-2020-13956).
    • Avoid updating Content-Length header in a 304 response.
    • Bug fix: BasicExpiresHandler is annotated as immutable but is not (#239)
    • HTTPCLIENT-2076: Fixed NPE in LaxExpiresHandler.

httpcomponents-core:

  • Upgraded to version 4.4.14
    • PR #231: 4.4.x Use better map apis and more.
      • Remove redundant modifiers.
      • Use Collections.addAll() API instead of loops.
      • Remove redundant returns.
      • No need to explicitly declare an array when calling a vararg method.
      • Remote extra semicolons (;).
    • Bug fix: Non-blocking TLSv1.3 connections can end up in an infinite event spin when closed concurrently by the local and the remote endpoints.
    • HTTPCORE-647: Non-blocking connection terminated due to 'java.io.IOException: Broken pipe' can enter an infinite loop flushing buffered output data.
    • PR #201, HTTPCORE-634: Fix race condition in AbstractConnPool that can cause internal state corruption when persistent connections are manually removed from the pool.
Record
SUSE-SU-2024:4036-1
Updated
2026-11-02
OSVUSN-5239-1 No score

httpcomponents-client vulnerability

It was discovered that HttpClient mishandled certain input. An attacker could use this vulnerability to cause a crash or possibly execute arbitrary code.

Record
USN-5239-1
Updated
2026-11-02

Affected products

Show 6 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
org.apache.httpcomponents:httpclient
Maven
 before 4.5.13
4.5.13
org.apache.httpcomponents:httpclient
Maven
 5.0.0 up to 5.0.3
5.0.3
aopalliance
AlmaLinux:8
 before 1.0-20.module_el8.6.0+2786+d7c38b21
1.0-20.module_el8.6.0+2786+d7c38b21
apache-commons-cli
AlmaLinux:8
 before 1.4-7.module_el8.6.0+2786+d7c38b21
1.4-7.module_el8.6.0+2786+d7c38b21
apache-commons-codec
AlmaLinux:8
 before 1.13-3.module_el8.6.0+2786+d7c38b21
1.13-3.module_el8.6.0+2786+d7c38b21
apache-commons-io
AlmaLinux:8
 before 1:2.6-6.module_el8.6.0+2786+d7c38b21
1:2.6-6.module_el8.6.0+2786+d7c38b21
apache-commons-lang3
AlmaLinux:8
 before 3.9-4.module_el8.6.0+2786+d7c38b21
3.9-4.module_el8.6.0+2786+d7c38b21
atinject
AlmaLinux:8
 before 1-31.20100611svn86.module_el8.6.0+2786+d7c38b21
1-31.20100611svn86.module_el8.6.0+2786+d7c38b21
cdi-api
AlmaLinux:8
 before 2.0.1-3.module_el8.6.0+2786+d7c38b21
2.0.1-3.module_el8.6.0+2786+d7c38b21
geronimo-annotation
AlmaLinux:8
 before 1.0-26.module_el8.6.0+2786+d7c38b21
1.0-26.module_el8.6.0+2786+d7c38b21
Show 290 moreShow less
Affected packages
PackageAffectedFixed
google-guice
AlmaLinux:8
 before 4.2.2-4.module_el8.6.0+2786+d7c38b21
4.2.2-4.module_el8.6.0+2786+d7c38b21
guava
AlmaLinux:8
 before 28.1-3.module_el8.6.0+2786+d7c38b21
28.1-3.module_el8.6.0+2786+d7c38b21
httpcomponents-client
AlmaLinux:8
 before 4.5.10-4.module_el8.6.0+2786+d7c38b21
4.5.10-4.module_el8.6.0+2786+d7c38b21
httpcomponents-core
AlmaLinux:8
 before 4.4.12-3.module_el8.6.0+2786+d7c38b21
4.4.12-3.module_el8.6.0+2786+d7c38b21
jansi
AlmaLinux:8
 before 1.18-4.module_el8.6.0+2786+d7c38b21
1.18-4.module_el8.6.0+2786+d7c38b21
jcl-over-slf4j
AlmaLinux:8
 before 1.7.28-3.module_el8.6.0+2786+d7c38b21
1.7.28-3.module_el8.6.0+2786+d7c38b21
jsoup
AlmaLinux:8
 before 1.12.1-3.module_el8.6.0+2786+d7c38b21
1.12.1-3.module_el8.6.0+2786+d7c38b21
jsr-305
AlmaLinux:8
 before 0-0.25.20130910svn.module_el8.6.0+2786+d7c38b21
0-0.25.20130910svn.module_el8.6.0+2786+d7c38b21
maven
AlmaLinux:8
 before 1:3.6.2-7.module_el8.6.0+2786+d7c38b21
1:3.6.2-7.module_el8.6.0+2786+d7c38b21
maven-lib
AlmaLinux:8
 before 1:3.6.2-7.module_el8.6.0+2786+d7c38b21
1:3.6.2-7.module_el8.6.0+2786+d7c38b21
maven-openjdk11
AlmaLinux:8
 before 1:3.6.2-7.module_el8.6.0+2786+d7c38b21
1:3.6.2-7.module_el8.6.0+2786+d7c38b21
maven-openjdk17
AlmaLinux:8
 before 1:3.6.2-7.module_el8.6.0+2786+d7c38b21
1:3.6.2-7.module_el8.6.0+2786+d7c38b21
maven-openjdk8
AlmaLinux:8
 before 1:3.6.2-7.module_el8.6.0+2786+d7c38b21
1:3.6.2-7.module_el8.6.0+2786+d7c38b21
maven-resolver
AlmaLinux:8
 before 1.4.1-3.module_el8.6.0+2786+d7c38b21
1.4.1-3.module_el8.6.0+2786+d7c38b21
maven-shared-utils
AlmaLinux:8
 before 3.2.1-0.4.module_el8.6.0+2786+d7c38b21
3.2.1-0.4.module_el8.6.0+2786+d7c38b21
maven-wagon
AlmaLinux:8
 before 3.3.4-2.module_el8.6.0+2786+d7c38b21
3.3.4-2.module_el8.6.0+2786+d7c38b21
plexus-cipher
AlmaLinux:8
 before 1.7-17.module_el8.6.0+2786+d7c38b21
1.7-17.module_el8.6.0+2786+d7c38b21
plexus-classworlds
AlmaLinux:8
 before 2.6.0-4.module_el8.6.0+2786+d7c38b21
2.6.0-4.module_el8.6.0+2786+d7c38b21
plexus-containers-component-annotations
AlmaLinux:8
 before 2.1.0-2.module_el8.6.0+2786+d7c38b21
2.1.0-2.module_el8.6.0+2786+d7c38b21
plexus-interpolation
AlmaLinux:8
 before 1.26-3.module_el8.6.0+2786+d7c38b21
1.26-3.module_el8.6.0+2786+d7c38b21
plexus-sec-dispatcher
AlmaLinux:8
 before 1.4-29.module_el8.6.0+2786+d7c38b21
1.4-29.module_el8.6.0+2786+d7c38b21
plexus-utils
AlmaLinux:8
 before 3.3.0-3.module_el8.6.0+2786+d7c38b21
3.3.0-3.module_el8.6.0+2786+d7c38b21
sisu
AlmaLinux:8
 before 0.3.4-2.module_el8.6.0+2786+d7c38b21
0.3.4-2.module_el8.6.0+2786+d7c38b21
slf4j
AlmaLinux:8
 before 1.7.28-3.module_el8.6.0+2786+d7c38b21
1.7.28-3.module_el8.6.0+2786+d7c38b21
aopalliance
AlmaLinux:8
 before 1.0-17.module_el8.6.0+2752+f1f3449e
1.0-17.module_el8.6.0+2752+f1f3449e
apache-commons-cli
AlmaLinux:8
 before 1.4-4.module_el8.6.0+2752+f1f3449e
1.4-4.module_el8.6.0+2752+f1f3449e
apache-commons-codec
AlmaLinux:8
 before 1.11-3.module_el8.6.0+2752+f1f3449e
1.11-3.module_el8.6.0+2752+f1f3449e
apache-commons-io
AlmaLinux:8
 before 1:2.6-3.module_el8.6.0+2752+f1f3449e
1:2.6-3.module_el8.6.0+2752+f1f3449e
apache-commons-lang3
AlmaLinux:8
 before 3.7-3.module_el8.6.0+2752+f1f3449e
3.7-3.module_el8.6.0+2752+f1f3449e
apache-commons-logging
AlmaLinux:8
 before 1.2-13.module_el8.6.0+2752+f1f3449e
1.2-13.module_el8.6.0+2752+f1f3449e
atinject
AlmaLinux:8
 before 1-28.20100611svn86.module_el8.6.0+2752+f1f3449e
1-28.20100611svn86.module_el8.6.0+2752+f1f3449e
cdi-api
AlmaLinux:8
 before 1.2-8.module_el8.6.0+2752+f1f3449e
1.2-8.module_el8.6.0+2752+f1f3449e
geronimo-annotation
AlmaLinux:8
 before 1.0-23.module_el8.6.0+2752+f1f3449e
1.0-23.module_el8.6.0+2752+f1f3449e
glassfish-el-api
AlmaLinux:8
 before 3.0.1-0.7.b08.module_el8.6.0+2752+f1f3449e
3.0.1-0.7.b08.module_el8.6.0+2752+f1f3449e
google-guice
AlmaLinux:8
 before 4.1-11.module_el8.6.0+2752+f1f3449e
4.1-11.module_el8.6.0+2752+f1f3449e
guava20
AlmaLinux:8
 before 20.0-8.module_el8.6.0+2752+f1f3449e
20.0-8.module_el8.6.0+2752+f1f3449e
hawtjni-runtime
AlmaLinux:8
 before 1.16-2.module_el8.6.0+2752+f1f3449e
1.16-2.module_el8.6.0+2752+f1f3449e
httpcomponents-client
AlmaLinux:8
 before 4.5.5-5.module_el8.6.0+2752+f1f3449e
4.5.5-5.module_el8.6.0+2752+f1f3449e
httpcomponents-core
AlmaLinux:8
 before 4.4.10-3.module_el8.6.0+2752+f1f3449e
4.4.10-3.module_el8.6.0+2752+f1f3449e
jansi
AlmaLinux:8
 before 1.17.1-1.module_el8.6.0+2752+f1f3449e
1.17.1-1.module_el8.6.0+2752+f1f3449e
jansi
AlmaLinux:8
 before 1.17.1-1.module_el8.0.0+6044+f3cbc35d
1.17.1-1.module_el8.0.0+6044+f3cbc35d
jansi
AlmaLinux:8
 before 1.17.1-1.module_el8.4.0+2250+516cbbff
1.17.1-1.module_el8.4.0+2250+516cbbff
jansi-native
AlmaLinux:8
 before 1.7-7.module_el8.6.0+2752+f1f3449e
1.7-7.module_el8.6.0+2752+f1f3449e
jboss-interceptors-1.2-api
AlmaLinux:8
 before 1.0.0-8.module_el8.6.0+2752+f1f3449e
1.0.0-8.module_el8.6.0+2752+f1f3449e
jcl-over-slf4j
AlmaLinux:8
 before 1.7.25-4.module_el8.6.0+2752+f1f3449e
1.7.25-4.module_el8.6.0+2752+f1f3449e
jsoup
AlmaLinux:8
 before 1.11.3-3.module_el8.6.0+2752+f1f3449e
1.11.3-3.module_el8.6.0+2752+f1f3449e
maven
AlmaLinux:8
 before 1:3.5.4-5.module_el8.6.0+2752+f1f3449e
1:3.5.4-5.module_el8.6.0+2752+f1f3449e
maven-lib
AlmaLinux:8
 before 1:3.5.4-5.module_el8.6.0+2752+f1f3449e
1:3.5.4-5.module_el8.6.0+2752+f1f3449e
maven-resolver-api
AlmaLinux:8
 before 1:1.1.1-2.module_el8.6.0+2752+f1f3449e
1:1.1.1-2.module_el8.6.0+2752+f1f3449e
maven-resolver-connector-basic
AlmaLinux:8
 before 1:1.1.1-2.module_el8.6.0+2752+f1f3449e
1:1.1.1-2.module_el8.6.0+2752+f1f3449e
maven-resolver-impl
AlmaLinux:8
 before 1:1.1.1-2.module_el8.6.0+2752+f1f3449e
1:1.1.1-2.module_el8.6.0+2752+f1f3449e
maven-resolver-spi
AlmaLinux:8
 before 1:1.1.1-2.module_el8.6.0+2752+f1f3449e
1:1.1.1-2.module_el8.6.0+2752+f1f3449e
maven-resolver-transport-wagon
AlmaLinux:8
 before 1:1.1.1-2.module_el8.6.0+2752+f1f3449e
1:1.1.1-2.module_el8.6.0+2752+f1f3449e
maven-resolver-util
AlmaLinux:8
 before 1:1.1.1-2.module_el8.6.0+2752+f1f3449e
1:1.1.1-2.module_el8.6.0+2752+f1f3449e
maven-shared-utils
AlmaLinux:8
 before 3.2.1-0.1.module_el8.6.0+2752+f1f3449e
3.2.1-0.1.module_el8.6.0+2752+f1f3449e
maven-wagon-file
AlmaLinux:8
 before 3.1.0-1.module_el8.6.0+2752+f1f3449e
3.1.0-1.module_el8.6.0+2752+f1f3449e
maven-wagon-http
AlmaLinux:8
 before 3.1.0-1.module_el8.6.0+2752+f1f3449e
3.1.0-1.module_el8.6.0+2752+f1f3449e
maven-wagon-http-shared
AlmaLinux:8
 before 3.1.0-1.module_el8.6.0+2752+f1f3449e
3.1.0-1.module_el8.6.0+2752+f1f3449e
maven-wagon-provider-api
AlmaLinux:8
 before 3.1.0-1.module_el8.6.0+2752+f1f3449e
3.1.0-1.module_el8.6.0+2752+f1f3449e
plexus-cipher
AlmaLinux:8
 before 1.7-14.module_el8.6.0+2752+f1f3449e
1.7-14.module_el8.6.0+2752+f1f3449e
plexus-classworlds
AlmaLinux:8
 before 2.5.2-9.module_el8.6.0+2752+f1f3449e
2.5.2-9.module_el8.6.0+2752+f1f3449e
plexus-containers-component-annotations
AlmaLinux:8
 before 1.7.1-8.module_el8.6.0+2752+f1f3449e
1.7.1-8.module_el8.6.0+2752+f1f3449e
plexus-interpolation
AlmaLinux:8
 before 1.22-9.module_el8.6.0+2752+f1f3449e
1.22-9.module_el8.6.0+2752+f1f3449e
plexus-sec-dispatcher
AlmaLinux:8
 before 1.4-26.module_el8.6.0+2752+f1f3449e
1.4-26.module_el8.6.0+2752+f1f3449e
plexus-utils
AlmaLinux:8
 before 3.1.0-3.module_el8.6.0+2752+f1f3449e
3.1.0-3.module_el8.6.0+2752+f1f3449e
sisu-inject
AlmaLinux:8
 before 1:0.3.3-6.module_el8.6.0+2752+f1f3449e
1:0.3.3-6.module_el8.6.0+2752+f1f3449e
sisu-plexus
AlmaLinux:8
 before 1:0.3.3-6.module_el8.6.0+2752+f1f3449e
1:0.3.3-6.module_el8.6.0+2752+f1f3449e
slf4j
AlmaLinux:8
 before 1.7.25-4.module_el8.6.0+2752+f1f3449e
1.7.25-4.module_el8.6.0+2752+f1f3449e
slf4j
AlmaLinux:8
 before 1.7.25-4.module_el8.5.0+2577+9e95fe00
1.7.25-4.module_el8.5.0+2577+9e95fe00
org.apache.httpcomponents:httpclient
TuxCare:Maven
 4.5.2 up to 4.5.2-tuxcare.1
4.5.2-tuxcare.1
org.apache.httpcomponents:httpclient
TuxCare:Maven
 4.5.8 up to 4.5.8-tuxcare.1
4.5.8-tuxcare.1
org.apache.httpcomponents:httpclient
TuxCare:Maven
 4.5.9 up to 4.5.9-tuxcare.1
4.5.9-tuxcare.1
org.apache.httpcomponents:httpclient
TuxCare:Maven
 4.5.6 up to 4.5.6-tuxcare.1
4.5.6-tuxcare.1
org.apache.httpcomponents:httpclient
TuxCare:Maven
 4.5.10 up to 4.5.10-tuxcare.1
4.5.10-tuxcare.1
org.apache.httpcomponents:httpclient
TuxCare:Maven
 4.2 up to 4.2-tuxcare.1
4.2-tuxcare.1
org.apache.httpcomponents:httpclient
TuxCare:Maven
 4.2.6 up to 4.2.6-tuxcare.1
4.2.6-tuxcare.1
org.apache.httpcomponents:httpclient
TuxCare:Maven
 4.0.1 up to 4.0.1-tuxcare.1
4.0.1-tuxcare.1
org.apache.httpcomponents:httpclient
TuxCare:Maven
 4.5.12 up to 4.5.12-tuxcare.1
4.5.12-tuxcare.1
org.apache.httpcomponents:httpclient
TuxCare:Maven
 4.5 up to 4.5-tuxcare.1
4.5-tuxcare.1
org.apache.httpcomponents:httpclient
TuxCare:Maven
 4.2.1 up to 4.2.1-tuxcare.1
4.2.1-tuxcare.1
org.apache.httpcomponents:httpclient
TuxCare:Maven
 4.5.1 up to 4.5.1-tuxcare.1
4.5.1-tuxcare.1
org.apache.httpcomponents:httpclient
TuxCare:Maven
 4.4 up to 4.4-tuxcare.1
4.4-tuxcare.1
org.apache.httpcomponents:httpclient
TuxCare:Maven
From an advisory covering 3 CVEs
 4.1.2 up to 4.1.2-tuxcare.1
4.1.2-tuxcare.1
org.apache.httpcomponents:httpclient
TuxCare:Maven
From an advisory covering 3 CVEs
 4.2.2 up to 4.2.2-tuxcare.1
4.2.2-tuxcare.1
org.apache.httpcomponents:httpclient
TuxCare:Maven
 4.5.4 up to 4.5.4-tuxcare.1
4.5.4-tuxcare.1
org.apache.httpcomponents:httpclient
TuxCare:Maven
 4.5.5 up to 4.5.5-tuxcare.1
4.5.5-tuxcare.1
org.apache.httpcomponents:httpclient
TuxCare:Maven
 4.4.1 up to 4.4.1-tuxcare.1
4.4.1-tuxcare.1
org.apache.httpcomponents:httpclient
TuxCare:Maven
From an advisory covering 4 CVEs
 4.2.5 up to 4.2.5-tuxcare.1
4.2.5-tuxcare.1
org.apache.httpcomponents:httpclient
TuxCare:Maven
From an advisory covering 5 CVEs
 4.1.3 up to 4.1.3-tuxcare.1
4.1.3-tuxcare.1
httpcomponents-client
Debian:12
 before 4.5.13-1
4.5.13-1
httpcomponents-client
Debian:13
 before 4.5.13-1
4.5.13-1
httpcomponents-client
Debian:14
 before 4.5.13-1
4.5.13-1
httpcomponents-client
Debian:9
 before 4.5.2-2+deb9u1, plus listed versions
4.5.2-2
4.5.2-2+deb9u1
httpcomponents-client
Debian:10
 before 4.5.7-1+deb10u1, plus listed versions
4.5.7-1
4.5.7-1+deb10u1
org.apache.httpcomponents:httpclient
Maven
 before 4.5.13, plus listed versions
4.04.0-alpha14.0-alpha24.0-alpha34.0-alpha4
Show 45 moreShow less
4.0-beta14.0-beta24.0.14.0.24.0.34.14.1-alpha14.1-alpha24.1-beta14.1.14.1.24.1.34.24.2-alpha14.2-beta14.2.14.2.24.2.34.2.44.2.54.2.64.34.3-alpha14.3-beta14.3-beta24.3.14.3.24.3.34.3.44.3.54.3.64.44.4-alpha14.4-beta14.4.14.54.5.14.5.104.5.114.5.124.5.24.5.34.5.44.5.54.5.6
4.5.13
httpcomponents-client
Mageia:7
 before 4.5.5-1.1.mga7
4.5.5-1.1.mga7
org.apache.httpcomponents:httpclient
Red Hat Lightwell:Maven
 before 4.5.6.rhlw-00001, plus listed versions
4.04.0-alpha14.0-alpha24.0-alpha34.0-alpha4
Show 42 moreShow less
4.0-beta14.0-beta24.0.14.0.24.0.34.14.1-alpha14.1-alpha24.1-beta14.1.14.1.24.1.34.24.2-alpha14.2-beta14.2.14.2.24.2.34.2.44.2.54.2.64.34.3-alpha14.3-beta14.3-beta24.3.14.3.24.3.34.3.44.3.54.3.64.44.4-alpha14.4-beta14.4.14.54.5.14.5.24.5.34.5.44.5.54.5.6
4.5.6.rhlw-00001
org.apache.httpcomponents:httpclient
Red Hat Lightwell:Maven
 4.5.12 up to 4.5.12.rhlw-00001
4.5.12.rhlw-00001
eap7-activemq-artemis
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:2.9.0-7.redhat_00017.1.el6eap
0:2.9.0-7.redhat_00017.1.el6eap
eap7-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:2.9.0-7.redhat_00017.1.el6eap
0:2.9.0-7.redhat_00017.1.el6eap
eap7-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:2.9.0-7.redhat_00017.1.el6eap
0:2.9.0-7.redhat_00017.1.el6eap
eap7-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:2.9.0-7.redhat_00017.1.el6eap
0:2.9.0-7.redhat_00017.1.el6eap
eap7-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:2.9.0-7.redhat_00017.1.el6eap
0:2.9.0-7.redhat_00017.1.el6eap
eap7-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:2.9.0-7.redhat_00017.1.el6eap
0:2.9.0-7.redhat_00017.1.el6eap
eap7-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:2.9.0-7.redhat_00017.1.el6eap
0:2.9.0-7.redhat_00017.1.el6eap
eap7-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:2.9.0-7.redhat_00017.1.el6eap
0:2.9.0-7.redhat_00017.1.el6eap
eap7-activemq-artemis-jms-client
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:2.9.0-7.redhat_00017.1.el6eap
0:2.9.0-7.redhat_00017.1.el6eap
eap7-activemq-artemis-jms-server
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:2.9.0-7.redhat_00017.1.el6eap
0:2.9.0-7.redhat_00017.1.el6eap
eap7-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:2.9.0-7.redhat_00017.1.el6eap
0:2.9.0-7.redhat_00017.1.el6eap
eap7-activemq-artemis-ra
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:2.9.0-7.redhat_00017.1.el6eap
0:2.9.0-7.redhat_00017.1.el6eap
eap7-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:2.9.0-7.redhat_00017.1.el6eap
0:2.9.0-7.redhat_00017.1.el6eap
eap7-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:2.9.0-7.redhat_00017.1.el6eap
0:2.9.0-7.redhat_00017.1.el6eap
eap7-activemq-artemis-service-extensions
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:2.9.0-7.redhat_00017.1.el6eap
0:2.9.0-7.redhat_00017.1.el6eap
eap7-activemq-artemis-tools
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:2.9.0-7.redhat_00017.1.el6eap
0:2.9.0-7.redhat_00017.1.el6eap
eap7-glassfish-jsf
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:2.3.9-12.SP13_redhat_00001.1.el6eap
0:2.3.9-12.SP13_redhat_00001.1.el6eap
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:3.2.12-1.Final_redhat_00001.1.el6eap
0:3.2.12-1.Final_redhat_00001.1.el6eap
eap7-hibernate
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:5.3.20-1.Final_redhat_00001.1.el6eap
0:5.3.20-1.Final_redhat_00001.1.el6eap
eap7-hibernate-core
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:5.3.20-1.Final_redhat_00001.1.el6eap
0:5.3.20-1.Final_redhat_00001.1.el6eap
eap7-hibernate-entitymanager
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:5.3.20-1.Final_redhat_00001.1.el6eap
0:5.3.20-1.Final_redhat_00001.1.el6eap
eap7-hibernate-envers
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:5.3.20-1.Final_redhat_00001.1.el6eap
0:5.3.20-1.Final_redhat_00001.1.el6eap
eap7-hibernate-java8
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:5.3.20-1.Final_redhat_00001.1.el6eap
0:5.3.20-1.Final_redhat_00001.1.el6eap
eap7-httpcomponents-client
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:4.5.13-1.redhat_00001.1.el6eap
0:4.5.13-1.redhat_00001.1.el6eap
eap7-jboss-ejb-client
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:4.0.37-1.Final_redhat_00001.1.el6eap
0:4.0.37-1.Final_redhat_00001.1.el6eap
eap7-jboss-genericjms
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:2.0.8-1.Final_redhat_00001.1.el6eap
0:2.0.8-1.Final_redhat_00001.1.el6eap
eap7-jboss-modules
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.11.0-1.Final_redhat_00001.1.el6eap
0:1.11.0-1.Final_redhat_00001.1.el6eap
eap7-jboss-remoting
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:5.0.20-1.Final_redhat_00001.1.el6eap
0:5.0.20-1.Final_redhat_00001.1.el6eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.7.2-4.Final_redhat_00005.1.el6eap
0:1.7.2-4.Final_redhat_00005.1.el6eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.7.2-4.Final_redhat_00005.1.el6eap
0:1.7.2-4.Final_redhat_00005.1.el6eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.7.2-4.Final_redhat_00005.1.el6eap
0:1.7.2-4.Final_redhat_00005.1.el6eap
eap7-jboss-server-migration-eap6.4
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.7.2-4.Final_redhat_00005.1.el6eap
0:1.7.2-4.Final_redhat_00005.1.el6eap
eap7-jboss-server-migration-eap6.4-to-eap7.3
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.7.2-4.Final_redhat_00005.1.el6eap
0:1.7.2-4.Final_redhat_00005.1.el6eap
eap7-jboss-server-migration-eap7.0
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.7.2-4.Final_redhat_00005.1.el6eap
0:1.7.2-4.Final_redhat_00005.1.el6eap
eap7-jboss-server-migration-eap7.1
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.7.2-4.Final_redhat_00005.1.el6eap
0:1.7.2-4.Final_redhat_00005.1.el6eap
eap7-jboss-server-migration-eap7.2
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.7.2-4.Final_redhat_00005.1.el6eap
0:1.7.2-4.Final_redhat_00005.1.el6eap
eap7-jboss-server-migration-eap7.2-to-eap7.3
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.7.2-4.Final_redhat_00005.1.el6eap
0:1.7.2-4.Final_redhat_00005.1.el6eap
eap7-jboss-server-migration-eap7.3-server
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.7.2-4.Final_redhat_00005.1.el6eap
0:1.7.2-4.Final_redhat_00005.1.el6eap
eap7-jboss-server-migration-wildfly10.0
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.7.2-4.Final_redhat_00005.1.el6eap
0:1.7.2-4.Final_redhat_00005.1.el6eap
eap7-jboss-server-migration-wildfly10.1
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.7.2-4.Final_redhat_00005.1.el6eap
0:1.7.2-4.Final_redhat_00005.1.el6eap
eap7-jboss-server-migration-wildfly11.0
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.7.2-4.Final_redhat_00005.1.el6eap
0:1.7.2-4.Final_redhat_00005.1.el6eap
eap7-jboss-server-migration-wildfly12.0
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.7.2-4.Final_redhat_00005.1.el6eap
0:1.7.2-4.Final_redhat_00005.1.el6eap
eap7-jboss-server-migration-wildfly13.0-server
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.7.2-4.Final_redhat_00005.1.el6eap
0:1.7.2-4.Final_redhat_00005.1.el6eap
eap7-jboss-server-migration-wildfly14.0-server
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.7.2-4.Final_redhat_00005.1.el6eap
0:1.7.2-4.Final_redhat_00005.1.el6eap
eap7-jboss-server-migration-wildfly15.0-server
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.7.2-4.Final_redhat_00005.1.el6eap
0:1.7.2-4.Final_redhat_00005.1.el6eap
eap7-jboss-server-migration-wildfly16.0-server
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.7.2-4.Final_redhat_00005.1.el6eap
0:1.7.2-4.Final_redhat_00005.1.el6eap
eap7-jboss-server-migration-wildfly17.0-server
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.7.2-4.Final_redhat_00005.1.el6eap
0:1.7.2-4.Final_redhat_00005.1.el6eap
eap7-jboss-server-migration-wildfly18.0-server
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.7.2-4.Final_redhat_00005.1.el6eap
0:1.7.2-4.Final_redhat_00005.1.el6eap
eap7-jboss-server-migration-wildfly8.2
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.7.2-4.Final_redhat_00005.1.el6eap
0:1.7.2-4.Final_redhat_00005.1.el6eap
eap7-jboss-server-migration-wildfly9.0
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.7.2-4.Final_redhat_00005.1.el6eap
0:1.7.2-4.Final_redhat_00005.1.el6eap
eap7-jboss-xnio-base
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:3.7.12-1.Final_redhat_00001.1.el6eap
0:3.7.12-1.Final_redhat_00001.1.el6eap
eap7-narayana
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:5.9.10-1.Final_redhat_00001.1.el6eap
0:5.9.10-1.Final_redhat_00001.1.el6eap
eap7-narayana-compensations
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:5.9.10-1.Final_redhat_00001.1.el6eap
0:5.9.10-1.Final_redhat_00001.1.el6eap
eap7-narayana-jbosstxbridge
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:5.9.10-1.Final_redhat_00001.1.el6eap
0:5.9.10-1.Final_redhat_00001.1.el6eap
eap7-narayana-jbossxts
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:5.9.10-1.Final_redhat_00001.1.el6eap
0:5.9.10-1.Final_redhat_00001.1.el6eap
eap7-narayana-jts-idlj
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:5.9.10-1.Final_redhat_00001.1.el6eap
0:5.9.10-1.Final_redhat_00001.1.el6eap
eap7-narayana-jts-integration
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:5.9.10-1.Final_redhat_00001.1.el6eap
0:5.9.10-1.Final_redhat_00001.1.el6eap
eap7-narayana-restat-api
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:5.9.10-1.Final_redhat_00001.1.el6eap
0:5.9.10-1.Final_redhat_00001.1.el6eap
eap7-narayana-restat-bridge
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:5.9.10-1.Final_redhat_00001.1.el6eap
0:5.9.10-1.Final_redhat_00001.1.el6eap
eap7-narayana-restat-integration
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:5.9.10-1.Final_redhat_00001.1.el6eap
0:5.9.10-1.Final_redhat_00001.1.el6eap
eap7-narayana-restat-util
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:5.9.10-1.Final_redhat_00001.1.el6eap
0:5.9.10-1.Final_redhat_00001.1.el6eap
eap7-narayana-txframework
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:5.9.10-1.Final_redhat_00001.1.el6eap
0:5.9.10-1.Final_redhat_00001.1.el6eap
eap7-opentracing-interceptors
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:0.0.4.1-2.redhat_00002.1.el6eap
0:0.0.4.1-2.redhat_00002.1.el6eap
eap7-resteasy
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:3.11.3-1.Final_redhat_00001.1.el6eap
0:3.11.3-1.Final_redhat_00001.1.el6eap
eap7-resteasy-atom-provider
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:3.11.3-1.Final_redhat_00001.1.el6eap
0:3.11.3-1.Final_redhat_00001.1.el6eap
eap7-resteasy-cdi
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:3.11.3-1.Final_redhat_00001.1.el6eap
0:3.11.3-1.Final_redhat_00001.1.el6eap
eap7-resteasy-client
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:3.11.3-1.Final_redhat_00001.1.el6eap
0:3.11.3-1.Final_redhat_00001.1.el6eap
eap7-resteasy-client-microprofile
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:3.11.3-1.Final_redhat_00001.1.el6eap
0:3.11.3-1.Final_redhat_00001.1.el6eap
eap7-resteasy-crypto
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:3.11.3-1.Final_redhat_00001.1.el6eap
0:3.11.3-1.Final_redhat_00001.1.el6eap
eap7-resteasy-jackson-provider
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:3.11.3-1.Final_redhat_00001.1.el6eap
0:3.11.3-1.Final_redhat_00001.1.el6eap
eap7-resteasy-jackson2-provider
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:3.11.3-1.Final_redhat_00001.1.el6eap
0:3.11.3-1.Final_redhat_00001.1.el6eap
eap7-resteasy-jaxb-provider
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:3.11.3-1.Final_redhat_00001.1.el6eap
0:3.11.3-1.Final_redhat_00001.1.el6eap
eap7-resteasy-jaxrs
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:3.11.3-1.Final_redhat_00001.1.el6eap
0:3.11.3-1.Final_redhat_00001.1.el6eap
eap7-resteasy-jettison-provider
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:3.11.3-1.Final_redhat_00001.1.el6eap
0:3.11.3-1.Final_redhat_00001.1.el6eap
eap7-resteasy-jose-jwt
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:3.11.3-1.Final_redhat_00001.1.el6eap
0:3.11.3-1.Final_redhat_00001.1.el6eap
eap7-resteasy-jsapi
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:3.11.3-1.Final_redhat_00001.1.el6eap
0:3.11.3-1.Final_redhat_00001.1.el6eap
eap7-resteasy-json-binding-provider
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:3.11.3-1.Final_redhat_00001.1.el6eap
0:3.11.3-1.Final_redhat_00001.1.el6eap
eap7-resteasy-json-p-provider
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:3.11.3-1.Final_redhat_00001.1.el6eap
0:3.11.3-1.Final_redhat_00001.1.el6eap
eap7-resteasy-multipart-provider
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:3.11.3-1.Final_redhat_00001.1.el6eap
0:3.11.3-1.Final_redhat_00001.1.el6eap
eap7-resteasy-rxjava2
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:3.11.3-1.Final_redhat_00001.1.el6eap
0:3.11.3-1.Final_redhat_00001.1.el6eap
eap7-resteasy-spring
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:3.11.3-1.Final_redhat_00001.1.el6eap
0:3.11.3-1.Final_redhat_00001.1.el6eap
eap7-resteasy-validator-provider-11
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:3.11.3-1.Final_redhat_00001.1.el6eap
0:3.11.3-1.Final_redhat_00001.1.el6eap
eap7-resteasy-yaml-provider
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:3.11.3-1.Final_redhat_00001.1.el6eap
0:3.11.3-1.Final_redhat_00001.1.el6eap
eap7-undertow
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:2.0.33-1.SP2_redhat_00001.1.el6eap
0:2.0.33-1.SP2_redhat_00001.1.el6eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:7.3.5-2.GA_redhat_00001.1.el6eap
0:7.3.5-2.GA_redhat_00001.1.el6eap
eap7-wildfly-discovery
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.2.1-1.Final_redhat_00001.1.el6eap
0:1.2.1-1.Final_redhat_00001.1.el6eap
eap7-wildfly-discovery-client
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.2.1-1.Final_redhat_00001.1.el6eap
0:1.2.1-1.Final_redhat_00001.1.el6eap
eap7-wildfly-elytron
Red Hat:jboss_enterprise_application_platform:7.3::el6
From an advisory covering 6 CVEs
 before 0:1.10.10-1.Final_redhat_00001.1.el6eap
0:1.10.10-1.Final_redhat_00001.1.el6eap
aopalliance
Rocky Linux:8
 before 0:1.0-20.module+el8.6.0+844+4401f2ed
0:1.0-20.module+el8.6.0+844+4401f2ed
aopalliance
Rocky Linux:8
 before 0:1.0-20.module+el8.3.0+134+f7791fe0
0:1.0-20.module+el8.3.0+134+f7791fe0
apache-commons-cli
Rocky Linux:8
 before 0:1.4-7.module+el8.6.0+844+4401f2ed
0:1.4-7.module+el8.6.0+844+4401f2ed
apache-commons-cli
Rocky Linux:8
 before 0:1.4-7.module+el8.3.0+134+f7791fe0
0:1.4-7.module+el8.3.0+134+f7791fe0
apache-commons-codec
Rocky Linux:8
 before 0:1.13-3.module+el8.6.0+844+4401f2ed
0:1.13-3.module+el8.6.0+844+4401f2ed
apache-commons-codec
Rocky Linux:8
 before 0:1.13-3.module+el8.3.0+134+f7791fe0
0:1.13-3.module+el8.3.0+134+f7791fe0
apache-commons-io
Rocky Linux:8
 before 1:2.6-6.module+el8.6.0+844+4401f2ed
1:2.6-6.module+el8.6.0+844+4401f2ed
apache-commons-io
Rocky Linux:8
 before 1:2.6-6.module+el8.3.0+134+f7791fe0
1:2.6-6.module+el8.3.0+134+f7791fe0
apache-commons-lang3
Rocky Linux:8
 before 0:3.9-4.module+el8.6.0+844+4401f2ed
0:3.9-4.module+el8.6.0+844+4401f2ed
apache-commons-lang3
Rocky Linux:8
 before 0:3.9-4.module+el8.3.0+134+f7791fe0
0:3.9-4.module+el8.3.0+134+f7791fe0
atinject
Rocky Linux:8
 before 0:1-31.20100611svn86.module+el8.6.0+844+4401f2ed
0:1-31.20100611svn86.module+el8.6.0+844+4401f2ed
atinject
Rocky Linux:8
 before 0:1-31.20100611svn86.module+el8.3.0+134+f7791fe0
0:1-31.20100611svn86.module+el8.3.0+134+f7791fe0
cdi-api
Rocky Linux:8
 before 0:2.0.1-3.module+el8.6.0+844+4401f2ed
0:2.0.1-3.module+el8.6.0+844+4401f2ed
cdi-api
Rocky Linux:8
 before 0:2.0.1-3.module+el8.3.0+134+f7791fe0
0:2.0.1-3.module+el8.3.0+134+f7791fe0
geronimo-annotation
Rocky Linux:8
 before 0:1.0-26.module+el8.6.0+844+4401f2ed
0:1.0-26.module+el8.6.0+844+4401f2ed
geronimo-annotation
Rocky Linux:8
 before 0:1.0-26.module+el8.3.0+134+f7791fe0
0:1.0-26.module+el8.3.0+134+f7791fe0
google-guice
Rocky Linux:8
 before 0:4.2.2-4.module+el8.6.0+844+4401f2ed
0:4.2.2-4.module+el8.6.0+844+4401f2ed
google-guice
Rocky Linux:8
 before 0:4.2.2-4.module+el8.3.0+134+f7791fe0
0:4.2.2-4.module+el8.3.0+134+f7791fe0
guava
Rocky Linux:8
 before 0:28.1-3.module+el8.6.0+844+4401f2ed
0:28.1-3.module+el8.6.0+844+4401f2ed
guava
Rocky Linux:8
 before 0:28.1-3.module+el8.3.0+134+f7791fe0
0:28.1-3.module+el8.3.0+134+f7791fe0
httpcomponents-client
Rocky Linux:8
 before 0:4.5.10-4.module+el8.6.0+844+4401f2ed
0:4.5.10-4.module+el8.6.0+844+4401f2ed
httpcomponents-core
Rocky Linux:8
 before 0:4.4.12-3.module+el8.6.0+844+4401f2ed
0:4.4.12-3.module+el8.6.0+844+4401f2ed
httpcomponents-core
Rocky Linux:8
 before 0:4.4.12-3.module+el8.3.0+134+f7791fe0
0:4.4.12-3.module+el8.3.0+134+f7791fe0
jansi
Rocky Linux:8
 before 0:1.18-4.module+el8.6.0+844+4401f2ed
0:1.18-4.module+el8.6.0+844+4401f2ed
jansi
Rocky Linux:8
 before 0:1.18-4.module+el8.3.0+134+f7791fe0
0:1.18-4.module+el8.3.0+134+f7791fe0
jsoup
Rocky Linux:8
 before 0:1.12.1-3.module+el8.6.0+844+4401f2ed
0:1.12.1-3.module+el8.6.0+844+4401f2ed
jsoup
Rocky Linux:8
 before 0:1.12.1-3.module+el8.3.0+134+f7791fe0
0:1.12.1-3.module+el8.3.0+134+f7791fe0
jsr-305
Rocky Linux:8
 before 0:0-0.25.20130910svn.module+el8.6.0+844+4401f2ed
0:0-0.25.20130910svn.module+el8.6.0+844+4401f2ed
jsr-305
Rocky Linux:8
 before 0:0-0.25.20130910svn.module+el8.3.0+134+f7791fe0
0:0-0.25.20130910svn.module+el8.3.0+134+f7791fe0
maven
Rocky Linux:8
 before 1:3.6.2-7.module+el8.6.0+976+839b99e9
1:3.6.2-7.module+el8.6.0+976+839b99e9
maven
Rocky Linux:8
 before 1:3.6.2-7.module+el8.6.0+844+4401f2ed
1:3.6.2-7.module+el8.6.0+844+4401f2ed
maven-resolver
Rocky Linux:8
 before 0:1.4.1-3.module+el8.6.0+844+4401f2ed
0:1.4.1-3.module+el8.6.0+844+4401f2ed
maven-resolver
Rocky Linux:8
 before 0:1.4.1-3.module+el8.3.0+134+f7791fe0
0:1.4.1-3.module+el8.3.0+134+f7791fe0
maven-shared-utils
Rocky Linux:8
 before 0:3.2.1-0.4.module+el8.3.0+134+f7791fe0
0:3.2.1-0.4.module+el8.3.0+134+f7791fe0
maven-shared-utils
Rocky Linux:8
 before 0:3.2.1-0.4.module+el8.6.0+844+4401f2ed
0:3.2.1-0.4.module+el8.6.0+844+4401f2ed
maven-wagon
Rocky Linux:8
 before 0:3.3.4-2.module+el8.6.0+844+4401f2ed
0:3.3.4-2.module+el8.6.0+844+4401f2ed
maven-wagon
Rocky Linux:8
 before 0:3.3.4-2.module+el8.3.0+134+f7791fe0
0:3.3.4-2.module+el8.3.0+134+f7791fe0
plexus-cipher
Rocky Linux:8
 before 0:1.7-17.module+el8.6.0+844+4401f2ed
0:1.7-17.module+el8.6.0+844+4401f2ed
plexus-cipher
Rocky Linux:8
 before 0:1.7-17.module+el8.3.0+134+f7791fe0
0:1.7-17.module+el8.3.0+134+f7791fe0
plexus-classworlds
Rocky Linux:8
 before 0:2.6.0-4.module+el8.6.0+844+4401f2ed
0:2.6.0-4.module+el8.6.0+844+4401f2ed
plexus-classworlds
Rocky Linux:8
 before 0:2.6.0-4.module+el8.3.0+134+f7791fe0
0:2.6.0-4.module+el8.3.0+134+f7791fe0
plexus-containers
Rocky Linux:8
 before 0:2.1.0-2.module+el8.6.0+844+4401f2ed
0:2.1.0-2.module+el8.6.0+844+4401f2ed
plexus-containers
Rocky Linux:8
 before 0:2.1.0-2.module+el8.3.0+134+f7791fe0
0:2.1.0-2.module+el8.3.0+134+f7791fe0
plexus-interpolation
Rocky Linux:8
 before 0:1.26-3.module+el8.6.0+844+4401f2ed
0:1.26-3.module+el8.6.0+844+4401f2ed
plexus-interpolation
Rocky Linux:8
 before 0:1.26-3.module+el8.3.0+134+f7791fe0
0:1.26-3.module+el8.3.0+134+f7791fe0
plexus-sec-dispatcher
Rocky Linux:8
 before 0:1.4-29.module+el8.6.0+844+4401f2ed
0:1.4-29.module+el8.6.0+844+4401f2ed
plexus-sec-dispatcher
Rocky Linux:8
 before 0:1.4-29.module+el8.3.0+134+f7791fe0
0:1.4-29.module+el8.3.0+134+f7791fe0
plexus-utils
Rocky Linux:8
 before 0:3.3.0-3.module+el8.6.0+844+4401f2ed
0:3.3.0-3.module+el8.6.0+844+4401f2ed
plexus-utils
Rocky Linux:8
 before 0:3.3.0-3.module+el8.3.0+134+f7791fe0
0:3.3.0-3.module+el8.3.0+134+f7791fe0
sisu
Rocky Linux:8
 before 0:0.3.4-2.module+el8.6.0+844+4401f2ed
0:0.3.4-2.module+el8.6.0+844+4401f2ed
sisu
Rocky Linux:8
 before 0:0.3.4-2.module+el8.3.0+134+f7791fe0
0:0.3.4-2.module+el8.3.0+134+f7791fe0
slf4j
Rocky Linux:8
 before 0:1.7.28-3.module+el8.6.0+844+4401f2ed
0:1.7.28-3.module+el8.6.0+844+4401f2ed
slf4j
Rocky Linux:8
 before 0:1.7.28-3.module+el8.3.0+134+f7791fe0
0:1.7.28-3.module+el8.3.0+134+f7791fe0
aopalliance
Rocky Linux:8
 before 0:1.0-17.module+el8.6.0+843+5a13dac3
0:1.0-17.module+el8.6.0+843+5a13dac3
aopalliance
Rocky Linux:8
 before 0:1.0-17.module+el8.3.0+74+855e3f5d
0:1.0-17.module+el8.3.0+74+855e3f5d
aopalliance
Rocky Linux:8
 before 0:1.0-17.module+el8.3.0+133+b8b54b58
0:1.0-17.module+el8.3.0+133+b8b54b58
apache-commons-cli
Rocky Linux:8
 before 0:1.4-4.module+el8.6.0+843+5a13dac3
0:1.4-4.module+el8.6.0+843+5a13dac3
apache-commons-cli
Rocky Linux:8
 before 0:1.4-4.module+el8.3.0+74+855e3f5d
0:1.4-4.module+el8.3.0+74+855e3f5d
apache-commons-cli
Rocky Linux:8
 before 0:1.4-4.module+el8.3.0+133+b8b54b58
0:1.4-4.module+el8.3.0+133+b8b54b58
apache-commons-codec
Rocky Linux:8
 before 0:1.11-3.module+el8.6.0+843+5a13dac3
0:1.11-3.module+el8.6.0+843+5a13dac3
apache-commons-codec
Rocky Linux:8
 before 0:1.11-3.module+el8.3.0+74+855e3f5d
0:1.11-3.module+el8.3.0+74+855e3f5d
apache-commons-codec
Rocky Linux:8
 before 0:1.11-3.module+el8.3.0+133+b8b54b58
0:1.11-3.module+el8.3.0+133+b8b54b58
apache-commons-io
Rocky Linux:8
 before 1:2.6-3.module+el8.6.0+843+5a13dac3
1:2.6-3.module+el8.6.0+843+5a13dac3
apache-commons-io
Rocky Linux:8
 before 1:2.6-3.module+el8.3.0+74+855e3f5d
1:2.6-3.module+el8.3.0+74+855e3f5d
apache-commons-io
Rocky Linux:8
 before 1:2.6-3.module+el8.3.0+133+b8b54b58
1:2.6-3.module+el8.3.0+133+b8b54b58
apache-commons-lang3
Rocky Linux:8
 before 0:3.7-3.module+el8.6.0+843+5a13dac3
0:3.7-3.module+el8.6.0+843+5a13dac3
apache-commons-lang3
Rocky Linux:8
 before 0:3.7-3.module+el8.3.0+74+855e3f5d
0:3.7-3.module+el8.3.0+74+855e3f5d
apache-commons-lang3
Rocky Linux:8
 before 0:3.7-3.module+el8.3.0+133+b8b54b58
0:3.7-3.module+el8.3.0+133+b8b54b58
apache-commons-logging
Rocky Linux:8
 before 0:1.2-13.module+el8.3.0+133+b8b54b58
0:1.2-13.module+el8.3.0+133+b8b54b58
apache-commons-logging
Rocky Linux:8
 before 0:1.2-13.module+el8.3.0+74+855e3f5d
0:1.2-13.module+el8.3.0+74+855e3f5d
atinject
Rocky Linux:8
 before 0:1-28.20100611svn86.module+el8.6.0+843+5a13dac3
0:1-28.20100611svn86.module+el8.6.0+843+5a13dac3
atinject
Rocky Linux:8
 before 0:1-28.20100611svn86.module+el8.3.0+74+855e3f5d
0:1-28.20100611svn86.module+el8.3.0+74+855e3f5d
atinject
Rocky Linux:8
 before 0:1-28.20100611svn86.module+el8.3.0+133+b8b54b58
0:1-28.20100611svn86.module+el8.3.0+133+b8b54b58
cdi-api
Rocky Linux:8
 before 0:1.2-8.module+el8.6.0+843+5a13dac3
0:1.2-8.module+el8.6.0+843+5a13dac3
cdi-api
Rocky Linux:8
 before 0:1.2-8.module+el8.3.0+74+855e3f5d
0:1.2-8.module+el8.3.0+74+855e3f5d
cdi-api
Rocky Linux:8
 before 0:1.2-8.module+el8.3.0+133+b8b54b58
0:1.2-8.module+el8.3.0+133+b8b54b58
geronimo-annotation
Rocky Linux:8
 before 0:1.0-23.module+el8.6.0+843+5a13dac3
0:1.0-23.module+el8.6.0+843+5a13dac3
geronimo-annotation
Rocky Linux:8
 before 0:1.0-23.module+el8.3.0+74+855e3f5d
0:1.0-23.module+el8.3.0+74+855e3f5d
geronimo-annotation
Rocky Linux:8
 before 0:1.0-23.module+el8.3.0+133+b8b54b58
0:1.0-23.module+el8.3.0+133+b8b54b58
glassfish-el
Rocky Linux:8
 before 0:3.0.1-0.7.b08.module+el8.6.0+975+c0ed2db8
0:3.0.1-0.7.b08.module+el8.6.0+975+c0ed2db8
glassfish-el
Rocky Linux:8
 before 0:3.0.1-0.7.b08.module+el8.3.0+74+855e3f5d
0:3.0.1-0.7.b08.module+el8.3.0+74+855e3f5d
glassfish-el
Rocky Linux:8
 before 0:3.0.1-0.7.b08.module+el8.3.0+133+b8b54b58
0:3.0.1-0.7.b08.module+el8.3.0+133+b8b54b58
glassfish-el
Rocky Linux:8
 before 0:3.0.1-0.7.b08.module+el8.6.0+843+5a13dac3
0:3.0.1-0.7.b08.module+el8.6.0+843+5a13dac3
google-guice
Rocky Linux:8
 before 0:4.1-11.module+el8.6.0+843+5a13dac3
0:4.1-11.module+el8.6.0+843+5a13dac3
google-guice
Rocky Linux:8
 before 0:4.1-11.module+el8.3.0+74+855e3f5d
0:4.1-11.module+el8.3.0+74+855e3f5d
google-guice
Rocky Linux:8
 before 0:4.1-11.module+el8.3.0+133+b8b54b58
0:4.1-11.module+el8.3.0+133+b8b54b58
guava20
Rocky Linux:8
 before 0:20.0-8.module+el8.3.0+133+b8b54b58
0:20.0-8.module+el8.3.0+133+b8b54b58
guava20
Rocky Linux:8
 before 0:20.0-8.module+el8.3.0+74+855e3f5d
0:20.0-8.module+el8.3.0+74+855e3f5d
httpcomponents-client
SUSE:Linux Enterprise Module for Development Tools 15 SP5
 before 4.5.14-150200.3.9.1
4.5.14-150200.3.9.1
httpcomponents-core
SUSE:Linux Enterprise Module for Development Tools 15 SP5
 before 4.4.14-150200.3.9.1
4.4.14-150200.3.9.1
httpcomponents-client
SUSE:Linux Enterprise Module for Development Tools 15 SP6
 before 4.5.14-150200.3.9.1
4.5.14-150200.3.9.1
httpcomponents-core
SUSE:Linux Enterprise Module for Development Tools 15 SP6
 before 4.4.14-150200.3.9.1
4.4.14-150200.3.9.1
httpcomponents-client
SUSE:Manager Server Module 4.3
 before 4.5.14-150200.3.9.1
4.5.14-150200.3.9.1
httpcomponents-core
SUSE:Manager Server Module 4.3
 before 4.4.14-150200.3.9.1
4.4.14-150200.3.9.1
httpcomponents-client
openSUSE:Leap 15.5
 before 4.5.14-150200.3.9.1
4.5.14-150200.3.9.1
httpcomponents-core
openSUSE:Leap 15.5
 before 4.4.14-150200.3.9.1
4.4.14-150200.3.9.1
httpcomponents-client
openSUSE:Leap 15.6
 before 4.5.14-150200.3.9.1
4.5.14-150200.3.9.1
httpcomponents-core
openSUSE:Leap 15.6
 before 4.4.14-150200.3.9.1
4.4.14-150200.3.9.1
httpcomponents-client
Ubuntu:Pro:14.04:LTS
 before 4.3.3-1ubuntu0.1+esm2, plus listed versions
4.2.5-24.3.2-14.3.3-14.3.3-1ubuntu0.14.3.3-1ubuntu0.1+esm1
4.3.3-1ubuntu0.1+esm2
httpcomponents-client
Ubuntu:Pro:16.04:LTS
 before 4.5.1-1ubuntu0.1~esm1, plus listed versions
4.4.1-14.5.1-1
4.5.1-1ubuntu0.1~esm1
httpcomponents-client
Ubuntu:Pro:18.04:LTS
 before 4.5.5-1ubuntu0.1~esm1, plus listed versions
4.5.3-14.5.4-14.5.5-1
4.5.5-1ubuntu0.1~esm1
httpcomponents-client
Ubuntu:Pro:20.04:LTS
 before 4.5.11-1ubuntu0.1~esm1, plus listed versions
4.5.9-14.5.10-24.5.11-1
4.5.11-1ubuntu0.1~esm1
clojure
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 1.10.3.855-1.2
1.10.3.855-1.2
httpcomponents-client
openSUSE:Tumbleweed
 before 4.5.14-1.1
4.5.14-1.1

History

History
RecordedChangedSources
affected, aliasesOSV
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-13956 is a medium vulnerability (CVSS 5.3) in Apache Httpclient, published October 10, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.03%, the 95th percentile. Fixed in org.apache.httpcomponents:httpclient 4.5.13.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 338 package rows, 3 versions and 3 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open