{"id":"CVE-2021-40690","aliases":["CLSA-2024-1733184025","DEBIAN-CVE-2021-40690","DLA-2767-1","DSA-5010-1","EUVD-2021-2083","GHSA-j8wc-gxx9-82hx","RHSA-2021:5149","RHSA-2021:5150","RHSA-2021:5151","RHSA-2022:0151","RHSA-2022:0152","RHSA-2025:4226","UBUNTU-CVE-2021-40690","USN-5525-1","openSUSE-SU-2024:11693-1"],"status":"published","title":"Bypass of the secureValidation property","description":"All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the \"secureValidation\" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.07441,"percentile":0.94502,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2021-09-19T00:00:00Z","modified":"2026-10-24T10:30:52Z","fixes":[{"ecosystem":"Maven","package":"org.apache.santuario:xmlsec","fixed_in":["2.2.3","2.1.7"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"libxml-security-java","fixed_in":["2.1.7-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libxml-security-java","fixed_in":["2.1.7-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxml-security-java","fixed_in":["2.1.7-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"libxml-security-java","fixed_in":["1.5.8-2+deb9u1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"libxml-security-java","fixed_in":["2.0.10-2+deb10u1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"libxml-security-java","fixed_in":["2.0.10-2+deb11u1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libxml-security-java","fixed_in":["2.0.10-2~18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libxml-security-java","fixed_in":["2.0.10-2+deb11u1build0.20.04.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.apache.santuario:xmlsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.0"},{"fixed":"2.2.3"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.apache.santuario:xmlsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.7"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.santuario:xmlsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.10"},{"fixed":"2.0.10.tuxcare"}]}],"versions":["2.0.10"],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"libxml-security-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.7-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libxml-security-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.7-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libxml-security-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.7-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"libxml-security-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.8-2+deb9u1"}]}],"versions":["1.5.8-2"]},{"source":"osv","ecosystem":"Debian:10","package":"libxml-security-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.10-2+deb10u1"}]}],"versions":["2.0.10-2"]},{"source":"osv","ecosystem":"Debian:11","package":"libxml-security-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.10-2+deb11u1"}]}],"versions":["2.0.10-2"]},{"source":"osv","ecosystem":"Maven","package":"org.apache.santuario:xmlsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.0"},{"fixed":"2.2.3"}]}],"versions":["2.2.0","2.2.1","2.2.2"]},{"source":"osv","ecosystem":"Maven","package":"org.apache.santuario:xmlsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.7"}]}],"versions":["1.4.0","1.4.1","1.4.2","1.4.3","1.4.4","1.4.5","1.4.6","1.4.7","1.4.8","1.5.0","1.5.1","1.5.2","1.5.3","1.5.4","1.5.5","1.5.6","1.5.7","1.5.8","2.0.0","2.0.0-beta","2.0.0-rc1","2.0.1","2.0.10","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.0.8","2.0.9","2.1.0","2.1.1","2.1.2","2.1.3","2.1.4","2.1.5","2.1.6"]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-1.redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-1.redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-1.redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-1.redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jakarta-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3-3.redhat_00007.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.43-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-eap6.4-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-eap7.2-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-eap7.3-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly12.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly13.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly14.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly15.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly16.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly17.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly18.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-jsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.2-1.redhat_00002.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-atom-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-client-microprofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-jackson-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-jackson2-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-jaxb-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-jaxrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-jettison-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-jose-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-jsapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-json-binding-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-json-p-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-multipart-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-rxjava2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-validator-provider-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-resteasy-yaml-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.41-1.SP1_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.10-2.GA_redhat_00003.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.15-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.15-1.Final_redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.10-2.GA_redhat_00003.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.10-2.GA_redhat_00003.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wss4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-1.redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wss4j-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-1.redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wss4j-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-1.redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wss4j-ws-security-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-1.redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wss4j-ws-security-dom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-1.redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wss4j-ws-security-policy-stax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-1.redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-wss4j-ws-security-stax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-1.redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el6","package":"eap7-xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-1.redhat_00001.1.el6eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-1.redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-1.redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-1.redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-1.redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jakarta-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3-3.redhat_00007.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.43-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-eap6.4-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-eap7.2-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-eap7.3-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly12.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly13.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly14.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly15.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly16.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly17.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly18.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-jsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.2-1.redhat_00002.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-atom-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-client-microprofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-jackson-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-jackson2-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-jaxb-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-jaxrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-jettison-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-jose-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-jsapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-json-binding-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-json-p-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-multipart-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-rxjava2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-validator-provider-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-resteasy-yaml-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.41-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.10-2.GA_redhat_00003.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.15-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.15-1.Final_redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.10-2.GA_redhat_00003.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.10-2.GA_redhat_00003.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.10-2.GA_redhat_00003.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.10-2.GA_redhat_00003.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wss4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-1.redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wss4j-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-1.redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wss4j-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-1.redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wss4j-ws-security-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-1.redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wss4j-ws-security-dom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-1.redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wss4j-ws-security-policy-stax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-1.redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-wss4j-ws-security-stax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-1.redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el7","package":"eap7-xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-1.redhat_00001.1.el7eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-1.redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-1.redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-1.redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-1.redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jakarta-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3-3.redhat_00007.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.43-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-eap6.4-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-eap7.2-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-eap7.3-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly12.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly13.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly14.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly15.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly16.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly17.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly18.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-10.Final_redhat_00011.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-jsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.2-1.redhat_00002.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-atom-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-client-microprofile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-jackson-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-jackson2-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-jaxb-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-jaxrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-jettison-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-jose-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-jsapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-json-binding-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-json-p-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-multipart-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-rxjava2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-validator-provider-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-resteasy-yaml-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.41-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.10-2.GA_redhat_00003.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.15-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.15-1.Final_redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.10-2.GA_redhat_00003.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.10-2.GA_redhat_00003.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wss4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-1.redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wss4j-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-1.redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wss4j-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-1.redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wss4j-ws-security-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-1.redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wss4j-ws-security-dom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-1.redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wss4j-ws-security-policy-stax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-1.redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-wss4j-ws-security-stax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.7-1.redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.3::el8","package":"eap7-xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-1.redhat_00001.1.el8eap"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.5::el7","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.0.4-1.redhat_00001.1.el7sso"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.5::el7","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.0.4-1.redhat_00001.1.el7sso"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.5::el8","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.0.4-1.redhat_00001.1.el8sso"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.5::el8","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.0.4-1.redhat_00001.1.el8sso"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-artemis-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-artemis-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-artemis-native-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.Final_redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-jsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.2-1.redhat_00002.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.18-14.SP13_redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.10-2.GA_redhat_00002.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.10-2.GA_redhat_00002.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-woodstox-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.3-2.redhat_00002.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.10-2.redhat_00002.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libxml-security-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5.6-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libxml-security-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.10-2~18.04.1"}]}],"versions":["1.5.8-2","2.0.10-2~18.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libxml-security-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.10-2+deb11u1build0.20.04.1"}]}],"versions":["2.0.10-2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libxml-security-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.10-2~18.04.1"}]}],"versions":["1.5.8-2","2.0.10-2~18.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libxml-security-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.10-2+deb11u1build0.20.04.1"}]}],"versions":["2.0.10-2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.7-1.1"}]}],"bundled":2}],"products":[{"vendor":"apache","product":"cxf"},{"vendor":"apache","product":"santuario_xml_security_for_java"},{"vendor":"apache","product":"tomee"},{"vendor":"apache software foundation","product":"apache santuario"},{"vendor":"debian","product":"debian_linux"},{"vendor":"oracle","product":"agile_product_lifecycle_management"},{"vendor":"oracle","product":"commerce_guided_search"},{"vendor":"oracle","product":"commerce_platform"},{"vendor":"oracle","product":"communications_diameter_intelligence_hub"},{"vendor":"oracle","product":"communications_messaging_server"},{"vendor":"oracle","product":"flexcube_private_banking"},{"vendor":"oracle","product":"outside_in_technology"},{"vendor":"oracle","product":"peoplesoft_enterprise_peopletools"},{"vendor":"oracle","product":"retail_bulk_data_integration"},{"vendor":"oracle","product":"retail_financial_integration"},{"vendor":"oracle","product":"retail_integration_bus"},{"vendor":"oracle","product":"retail_merchandising_system"},{"vendor":"oracle","product":"retail_service_backbone"},{"vendor":"oracle","product":"weblogic_server"}],"references":[{"url":"https://lists.apache.org/thread.html/r8848751b6a5dd78cc9e99d627e74fecfaffdfa1bb615dce827aad633%40%3Cdev.santuario.apache.org%3E","tags":["x_transferred","Issue Tracking","Mailing List","Patch","Third Party Advisory","fix","web","article","report"]},{"url":"https://lists.apache.org/thread.html/rbdac116aef912b563da54f4c152222c0754e32fb2f785519ac5e059f%40%3Ccommits.tomee.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/re294cfc61f509512874ea514d8d64fd276253d54ac378ffa7a4880c8%40%3Ccommits.tomee.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r8a5c0ce9014bd07303aec1e5eed55951704878016465d3dae00e0c28%40%3Ccommits.tomee.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r9c100d53c84d54cf71975e3f0cfcc2856a8846554a04c99390156ce4%40%3Ccommits.tomee.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r3b3f5ba9b0de8c9c125077b71af06026d344a709a8ba67db81ee9faa%40%3Ccommits.tomee.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/raf352f95c19c0c4051af3180752cb69acbea88d0d066ab176c6170e8%40%3Cuser.poi.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/09/msg00015.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.apache.org/thread.html/r401ecb7274794f040cd757b259ebe3e8c463ae74f7961209ccad3c59%40%3Cissues.cxf.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rbbbac0759b12472abd0c278d32b5e0867bb21934df8e14e5e641597c%40%3Ccommits.tomee.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"https://www.debian.org/security/2021/dsa-5010","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","tags":["x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://security.netapp.com/advisory/ntap-20230818-0002/","tags":["x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-40690","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/rbdac116aef912b563da54f4c152222c0754e32fb2f785519ac5e059f@%3Ccommits.tomee.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r3b3f5ba9b0de8c9c125077b71af06026d344a709a8ba67db81ee9faa@%3Ccommits.tomee.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r8a5c0ce9014bd07303aec1e5eed55951704878016465d3dae00e0c28@%3Ccommits.tomee.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r9c100d53c84d54cf71975e3f0cfcc2856a8846554a04c99390156ce4@%3Ccommits.tomee.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/raf352f95c19c0c4051af3180752cb69acbea88d0d066ab176c6170e8@%3Cuser.poi.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/re294cfc61f509512874ea514d8d64fd276253d54ac378ffa7a4880c8@%3Ccommits.tomee.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r401ecb7274794f040cd757b259ebe3e8c463ae74f7961209ccad3c59@%3Cissues.cxf.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rbbbac0759b12472abd0c278d32b5e0867bb21934df8e14e5e641597c@%3Ccommits.tomee.apache.org%3E","tags":["web"]},{"url":"https://github.com/advisories/GHSA-j8wc-gxx9-82hx"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-40690","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230818-0002","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2021:5149","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.3/","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1935927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1977362","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1991305","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995259","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2011190","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-22143","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-22314","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-22332","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-22343","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-22363","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-22490","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-22501","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-22523","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-22734","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_5149.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3629","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3629","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3629","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3642","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3642","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3642","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3717","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3717","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3717","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-20289","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20289","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20289","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-37714","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-37714","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37714","tags":["advisory"]},{"url":"https://github.com/jhy/jsoup/security/advisories/GHSA-m72m-mhq2-9p6c","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-40690","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-40690","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:5150","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-22144","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_5150.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:5151","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-22145","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_5151.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0151","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_single_sign-on/7.5/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2007512","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2033602","tags":["report"]},{"url":"https://issues.redhat.com/browse/CIAM-1616","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0151.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3827","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3827","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3827","tags":["advisory"]},{"url":"https://github.com/keycloak/keycloak/security/advisories/GHSA-4pc7-vqv5-5r3v","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4133","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4133","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4133","tags":["advisory"]},{"url":"https://github.com/keycloak/keycloak/issues/9247","tags":["article"]},{"url":"https://github.com/keycloak/keycloak/security/advisories/GHSA-83x4-9cwr-5487","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0152","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/CIAM-1615","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0152.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4226","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1/html-single/installation_guide/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1991299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2010378","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2063601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073890","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2080850","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2095862","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126789","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2134291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2174246","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2185662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209689","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2264928","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-29286","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4226.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3690","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3690","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3690","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3859","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3859","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3859","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0084","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0084","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0084","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1319","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1319","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1319","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2053","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2053","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23913","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23913","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23913","tags":["advisory"]},{"url":"https://lists.apache.org/thread/fjynj57rd99s814rdn5hzvmx8lz403q2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24785","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24785","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24785","tags":["advisory"]},{"url":"https://github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25647","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25647","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25647","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25857","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25857","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25857","tags":["advisory"]},{"url":"https://bitbucket.org/snakeyaml/snakeyaml/issues/525","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40149","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40149","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40149","tags":["advisory"]},{"url":"https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40152","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40152","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40152","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-3f7h-mf4q-vrm4","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-1108","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-1108","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1108","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-m4mm-pg93-fv78","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-1973","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-1973","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1973","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3223","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3223","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3223","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-1635","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-1635","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1635","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-40690","tags":["report"]},{"url":"https://santuario.apache.org/secadv.data/CVE-2021-40690.txt.asc","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5525-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-40690","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-40690","title":"Bypass of the secureValidation property","description":"All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the \"secureValidation\" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.","status":"published","published":"2021-09-19T00:00:00Z","modified":"2026-10-08T21:24:19.865Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:33:01.495293Z"}],"euvd":[{"id":"EUVD-2021-2083","description":"All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the \"secureValidation\" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.","status":"published","published":"2021-09-19T00:00:00Z","modified":"2026-10-08T21:24:19Z","updated_at":"2026-11-02T17:27:25.942984Z"}],"ghsa":[{"id":"GHSA-j8wc-gxx9-82hx","title":"Exposure of Sensitive Information to an Unauthorized Actor in Apache Santuario","description":"All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the \"secureValidation\" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.","status":"published","published":"2021-09-20T23:18:41Z","modified":"2023-08-18T15:45:40Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:37:00.074932Z"}],"nvd":[{"id":"CVE-2021-40690","description":"All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the \"secureValidation\" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.","status":"published","published":"2021-09-19T18:15:07.223Z","modified":"2026-10-08T22:17:12.253Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:06:58.933037Z"}],"osv":[{"id":"CVE-2021-40690","description":"All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the \"secureValidation\" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.","status":"published","published":"2021-09-19T18:15:07.223Z","modified":"2026-10-24T10:30:52.871812572Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:21.249056Z"},{"id":"DEBIAN-CVE-2021-40690","description":"All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the \"secureValidation\" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.","status":"published","published":"2021-09-19T18:15:07.223Z","modified":"2026-10-09T09:47:27.124717881Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"GHSA-j8wc-gxx9-82hx","title":"Exposure of Sensitive Information to an Unauthorized Actor in Apache Santuario","description":"All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the \"secureValidation\" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.","status":"published","published":"2021-09-20T23:18:41Z","modified":"2026-09-10T03:49:16.111702098Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:46:50.336262Z"},{"id":"RHSA-2021:5149","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.10 security update on RHEL 6","status":"published","published":"2024-09-20T15:05:21Z","modified":"2026-10-13T10:02:40Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2021:5150","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.10 security update on RHEL 7","status":"published","published":"2024-09-20T15:05:42Z","modified":"2026-10-13T10:02:41Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2021:5151","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.10 security update on RHEL 8","status":"published","published":"2024-09-20T15:05:49Z","modified":"2026-10-13T10:02:42Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0151","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.5.1 security update on RHEL 7","status":"published","published":"2024-09-16T06:58:05Z","modified":"2026-10-13T10:02:46Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0152","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.5.1 security update on RHEL 8","status":"published","published":"2024-09-16T06:57:57Z","modified":"2026-10-13T10:02:47Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2025:4226","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.10 on RHEL 7 security update","status":"published","published":"2025-04-28T10:03:38Z","modified":"2026-10-14T10:10:21Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"UBUNTU-CVE-2021-40690","description":"All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the \"secureValidation\" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.","status":"published","published":"2021-09-19T18:15:00Z","modified":"2026-02-04T03:34:28.960872Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:29.220315Z"},{"id":"CLSA-2024-1733184025","title":"TuxCare security update for org.apache.santuario:xmlsec (3 CVEs)","description":"TuxCare rebuilt org.apache.santuario:xmlsec to address 3 CVEs. Fixed in 2.0.10.tuxcare.","status":"published","published":"2026-08-04T14:52:03Z","modified":"2026-10-15T09:45:04.110035432Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"DLA-2767-1","title":"libxml-security-java - security update","status":"published","published":"2021-09-27T00:00:00Z","modified":"2026-03-09T01:18:48.965577Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5010-1","title":"libxml-security-java - security update","status":"published","published":"2021-11-15T00:00:00Z","modified":"2026-03-09T02:09:01.505778Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"openSUSE-SU-2024:11693-1","title":"xml-security-2.1.7-1.1 on GA media","description":"These are all security issues fixed in the xml-security-2.1.7-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:05:59.181598Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"USN-5525-1","title":"libxml-security-java vulnerability","description":"It was discovered that Apache XML Security for Java incorrectly passed a\nconfiguration property when creating specific key elements. This allows an\nattacker to abuse an XPath Transform to extract sensitive information.\n","status":"published","published":"2022-07-20T10:47:58Z","modified":"2026-04-27T18:52:04.718432Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}