{"id":"CVE-2023-2976","aliases":["AZL-27173","AZL-43696","CLSA-2024-1726444801","CLSA-2024-1733097629","CLSA-2025-1752019363","CLSA-2025-1765411681","CLSA-2026-1773015253","CLSA-2026-1773188139","CLSA-2026-1774398096","CLSA-2026-1774484488","CLSA-2026-1778633133","CLSA-2026-1790084175","CLSA-2026-1790132153","CLSA-2026-1792656622","CLSA-2026-1792656687","CLSA-2026-1792656922","CLSA-2026-1792656983","CLSA-2026-1793719794","CLSA-2026-1793720148","CLSA-2026-1793728595","CLSA-2026-1793864180","CLSA-2026-1794156173","DEBIAN-CVE-2023-2976","EUVD-2023-1730","GHSA-7g45-4rm6-3mm3","MGASA-2024-0159","OESA-2023-1411","OESA-2023-1412","RHSA-2023:7637","RHSA-2023:7638","RHSA-2023:7639","RHSA-2024:0777","RHSA-2024:0778","RHSA-2024:0798","RHSA-2024:0799","RHSA-2024:0800","ROOT-APP-MAVEN-CVE-2023-2976","SUSE-SU-2023:3090-1","SUSE-SU-2024:1138-1","UBUNTU-CVE-2023-2976","openSUSE-SU-2024:13001-1"],"status":"published","title":"Use of temporary directory for file creation in `FileBackedOutputStream` in Guava","description":"Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class.\n\nEven though the security vulnerability is fixed in version 32.0.0, we recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00248,"percentile":0.16148,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-379","CWE-552"],"published":"2023-06-14T17:36:40Z","modified":"2026-11-08T19:30:02Z","fixes":[{"ecosystem":"Maven","package":"com.google.guava:guava","fixed_in":["32.0.0-android"],"sources":["ghsa","osv"]},{"ecosystem":"Azure Linux:2","package":"guava","fixed_in":["25.0-8"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"com.google.guava:guava","fixed_in":["18.0-tuxcare.1","25.1-jre-tuxcare.1","16.0.1-tuxcare.1","19.0-rc3-tuxcare.1","31.0.1-android-tuxcare.1","31.1-android-tuxcare.1","28.1-android-tuxcare.1","22.0-tuxcare.1","12.0.1-tuxcare.2","10.0.1-tuxcare.2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"guava-libraries","fixed_in":["32.0.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"guava-libraries","fixed_in":["32.0.1-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"guava20","fixed_in":["20.0-11.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"guava20","fixed_in":["20.0-11.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"guava20","fixed_in":["20.0-11.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"guava20","fixed_in":["20.0-11.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"guava20","fixed_in":["20.0-11.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"guava","fixed_in":["25.0-6.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"guava","fixed_in":["25.0-6.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"guava","fixed_in":["25.0-6.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"guava","fixed_in":["25.0-6.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"guava","fixed_in":["25.0-6.oe2203sp2"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"com.google.guava:guava","fixed_in":["28.2-jre-aikido.3","28.2-jre-aikido.4","31.1-android-aikido.1","21.0-aikido.1","30.1.1-jre-aikido.1","21.0-aikido.2","30.1-jre-aikido.1","31.0.1-jre-aikido.1","30.1.1-jre-aikido.2","31.1-android-aikido.2","31.0.1-jre-aikido.2","30.1-jre-aikido.2"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.root.com.google.guava:guava","fixed_in":["28.2-jre-root.io.1","28.2-jre-root.io.2","28.2-jre-root.io.3","28.2-jre-root.io.4","31.1-android-root.io.1","21.0-root.io.1","30.1.1-jre-root.io.1","21.0-root.io.2","30.1-jre-root.io.1","31.0.1-jre-root.io.1","30.1.1-jre-root.io.2","31.1-android-root.io.2","31.0.1-jre-root.io.2","30.1-jre-root.io.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"guava","fixed_in":["32.0.1-1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0"},{"fixed":"32.0.0-android"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0-8"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"guava20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"20.0-5"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"30.1-jre"},{"fixed":"30.1-jre.tuxcare"}]}],"versions":["30.1-jre","30.1-jre-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20.0"},{"fixed":"20.0.tuxcare"}]}],"versions":["20.0"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"31.1-jre"},{"fixed":"31.1-jre.tuxcare.1"}]}],"versions":["31.1-jre"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.1-android"},{"fixed":"25.1-android-tuxcare.1"}]}],"versions":["25.1-android"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27.1-android"},{"fixed":"27.1-android-tuxcare.1"}]}],"versions":["27.1-android"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"27.1-jre"},{"fixed":"27.1-jre-tuxcare.1"}]}],"versions":["27.1-jre"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"18.0"},{"fixed":"18.0-tuxcare.1"}]}],"versions":["18.0"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.1-jre"},{"fixed":"25.1-jre-tuxcare.1"}]}],"versions":["25.1-jre"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16.0.1"},{"fixed":"16.0.1-tuxcare.1"}]}],"versions":["16.0.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.0"},{"fixed":"19.0-tuxcare.1"}]}],"versions":["19.0"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"19.0-rc3"},{"fixed":"19.0-rc3-tuxcare.1"}]}],"versions":["19.0-rc3"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"31.0.1-android"},{"fixed":"31.0.1-android-tuxcare.1"}]}],"versions":["31.0.1-android"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"31.1-android"},{"fixed":"31.1-android-tuxcare.1"}]}],"versions":["31.1-android"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.0.1"},{"fixed":"14.0.1-tuxcare.1"}]}],"versions":["14.0.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"28.1-android"},{"fixed":"28.1-android-tuxcare.1"}]}],"versions":["28.1-android"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"31.0.1-jre"},{"fixed":"31.0.1-jre-tuxcare.1"}]}],"versions":["31.0.1-jre"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"30.1.1-jre"},{"fixed":"30.1.1-jre-tuxcare.1"}]}],"versions":["30.1.1-jre"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"22.0"},{"fixed":"22.0-tuxcare.1"}]}],"versions":["22.0"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12.0.1"},{"fixed":"12.0.1-tuxcare.2"}]}],"versions":["12.0.1","12.0.1-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.1"},{"fixed":"10.0.1-tuxcare.2"}]}],"versions":["10.0.1","10.0.1-tuxcare.1"]},{"source":"osv","ecosystem":"Debian:12","package":"guava-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["31.1-1","32.0.1-1","33.7.1-1"]},{"source":"osv","ecosystem":"Debian:13","package":"guava-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32.0.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"guava-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32.0.1-1"}]}]},{"source":"osv","ecosystem":"Maven","package":"com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0"},{"fixed":"32.0.0-android"}]}],"versions":["10.0","10.0-rc1","10.0-rc2","10.0-rc3","10.0.1","11.0","11.0-rc1","11.0.1","11.0.2","12.0","12.0-rc1","12.0-rc2","12.0.1","13.0","13.0-rc1","13.0-rc2","13.0.1","14.0","14.0-rc1","14.0-rc2","14.0-rc3","14.0.1","15.0","15.0-rc1","16.0","16.0-rc1","16.0.1","17.0","17.0-rc1","17.0-rc2","18.0","18.0-rc1","18.0-rc2","19.0","19.0-rc1","19.0-rc2","19.0-rc3","20.0","20.0-rc1","21.0","21.0-rc1","21.0-rc2","22.0","22.0-android","22.0-rc1","22.0-rc1-android","23.0","23.0-android","23.0-rc1","23.0-rc1-android","23.1-android","23.1-jre","23.2-android","23.2-jre","23.3-android","23.3-jre","23.4-android","23.4-jre","23.5-android","23.5-jre","23.6-android","23.6-jre","23.6.1-android","23.6.1-jre","24.0-android","24.0-jre","24.1-android","24.1-jre","24.1.1-android","24.1.1-jre","25.0-android","25.0-jre","25.1-android","25.1-jre","26.0-android","26.0-jre","27.0-android","27.0-jre","27.0.1-android","27.0.1-jre","27.1-android","27.1-jre","28.0-android","28.0-jre","28.1-android","28.1-jre","28.2-android","28.2-jre","29.0-android","29.0-jre","30.0-android","30.0-jre","30.1-android","30.1-jre","30.1.1-android","30.1.1-jre","31.0-android","31.0-jre","31.0.1-android","31.0.1-jre","31.1-android","31.1-jre"]},{"source":"osv","ecosystem":"Mageia:9","package":"guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32.0.1-1.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"guava20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.0-11.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"guava20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.0-11.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"guava20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.0-11.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"guava20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.0-11.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"guava20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.0-11.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0-6.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0-6.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0-6.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0-6.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0-6.oe2203sp2"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:32.1.1-2.jre_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-guava-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:32.1.1-2.jre_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.28-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.11-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-apache-sshd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-1.redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.3-1.redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.20-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-cachestore-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-cachestore-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-client-hotrod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-component-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-hibernate-cache-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-hibernate-cache-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-hibernate-cache-v53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jandex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.4-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-jsp-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.9-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jgroups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.23-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.16-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-yasson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.11-4.redhat_00002.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:32.1.1-2.jre_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-guava-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:32.1.1-2.jre_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.28-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.11-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-apache-sshd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-1.redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.3-1.redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.20-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-cachestore-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-cachestore-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-client-hotrod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-component-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-hibernate-cache-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-hibernate-cache-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-hibernate-cache-v53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jandex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.4-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-jsp-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.9-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jgroups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.23-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.16-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-yasson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.11-4.redhat_00002.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:32.1.1-2.jre_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-guava-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:32.1.1-2.jre_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.28-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.11-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-apache-sshd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-1.redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.3-1.redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.20-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-cachestore-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-cachestore-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-client-hotrod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-component-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-hibernate-cache-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-hibernate-cache-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-hibernate-cache-v53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jandex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.4-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-jsp-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.9-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jgroups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.23-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.16-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-yasson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.11-4.redhat_00002.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.14::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.1706516441-1.el8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.14::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.426.3.1706516352-3.el8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.12::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.1706515741-1.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.12::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.426.3.1706515686-3.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el7","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.12-1.redhat_00001.1.el7sso"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el7","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.12-1.redhat_00001.1.el7sso"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el8","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.12-1.redhat_00001.1.el8sso"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el8","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.12-1.redhat_00001.1.el8sso"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el9","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.12-1.redhat_00001.1.el9sso"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el9","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.12-1.redhat_00001.1.el9sso"}]}],"bundled":8},{"source":"osv","ecosystem":"Root:Maven","package":"com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.2-jre-aikido.3"},{"fixed":"28.2-jre-aikido.4"},{"fixed":"31.1-android-aikido.1"},{"fixed":"21.0-aikido.1"},{"fixed":"30.1.1-jre-aikido.1"},{"fixed":"21.0-aikido.2"},{"fixed":"30.1-jre-aikido.1"},{"fixed":"31.0.1-jre-aikido.1"},{"fixed":"30.1.1-jre-aikido.2"},{"fixed":"31.1-android-aikido.2"},{"fixed":"31.0.1-jre-aikido.2"},{"fixed":"30.1-jre-aikido.2"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.com.google.guava:guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"28.2-jre-root.io.1"},{"fixed":"28.2-jre-root.io.2"},{"fixed":"28.2-jre-root.io.3"},{"fixed":"28.2-jre-root.io.4"},{"fixed":"31.1-android-root.io.1"},{"fixed":"21.0-root.io.1"},{"fixed":"30.1.1-jre-root.io.1"},{"fixed":"21.0-root.io.2"},{"fixed":"30.1-jre-root.io.1"},{"fixed":"31.0.1-jre-root.io.1"},{"fixed":"30.1.1-jre-root.io.2"},{"fixed":"31.1-android-root.io.2"},{"fixed":"31.0.1-jre-root.io.2"},{"fixed":"30.1-jre-root.io.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32.0.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32.0.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32.0.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32.0.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32.0.1-150200.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32.0.1-150400.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"guava-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["14.0.1-1","15.0-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"guava-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["18.0-4ubuntu1","19.0-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"guava-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["19.0-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"guava-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["19.0-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"guava-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["29.0-6"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32.0.1-1.1"}]}]}],"products":[{"vendor":"google","product":"guava"}],"references":[{"url":"https://github.com/google/guava/issues/2575","tags":["x_transferred","Issue Tracking","Patch","Vendor Advisory","report","web"]},{"url":"https://security.netapp.com/advisory/ntap-20230818-0008/","tags":["x_transferred","advisory"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01006.html","tags":["x_transferred","advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20241108-0002/","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2976","tags":["web","advisory"]},{"url":"https://github.com/google/guava/issues/6532","tags":["web"]},{"url":"https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284","tags":["web"]},{"url":"https://github.com/google/guava/releases/tag/v32.0.0","tags":["web","report"]},{"url":"https://security.netapp.com/advisory/ntap-20230818-0008","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20241108-0002","tags":["web"]},{"url":"https://github.com/advisories/GHSA-7g45-4rm6-3mm3"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/2xxx/CVE-2023-2976.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-2976","tags":["advisory"]},{"url":"https://github.com/google/guava","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2024-0159.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33071","tags":["report"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1411","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1412","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7637","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2023-003","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2184751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215229","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236340","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236341","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242803","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-25004","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25085","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25086","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25378","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25380","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25419","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25451","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25457","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25541","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25547","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25576","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25594","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25627","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25657","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25685","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25700","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25716","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25726","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25772","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25779","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25803","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25838","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-26041","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7637.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-2976","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-2976","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4503","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4503","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4503","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5685","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241822","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5685","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5685","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-26048","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-26048","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26048","tags":["advisory"]},{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-qw69-rqj8-6qw8","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-26049","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-26049","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26049","tags":["advisory"]},{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-p26g-97m4-6q7c","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-35887","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-35887","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-35887","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39410","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39410","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39410","tags":["advisory"]},{"url":"https://issues.apache.org/jira/browse/AVRO-3819","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-44487","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-44487","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44487","tags":["advisory"]},{"url":"https://github.com/dotnet/announcements/issues/277","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2023-2102","tags":["advisory"]},{"url":"https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","tags":["article"]},{"url":"https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7638","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7638.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7639","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7639.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0777","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2066479","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126789","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170039","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222709","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232423","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2243296","tags":["report"]},{"url":"https://issues.redhat.com/browse/JKNS-271","tags":["article"]},{"url":"https://issues.redhat.com/browse/JKNS-289","tags":["article"]},{"url":"https://issues.redhat.com/browse/JKNS-337","tags":["article"]},{"url":"https://issues.redhat.com/browse/JKNS-344","tags":["article"]},{"url":"https://issues.redhat.com/browse/JKNS-345","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-11158","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-11253","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-11254","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-11446","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-1357","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-13869","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-14111","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-14609","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-15646","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-15902","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-1709","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-1942","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-2099","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-2184","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-2318","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-23438","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-27388","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-655","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-6579","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-6870","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-710","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-8377","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-8442","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPTOOLS-244","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0777.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25857","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25857","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25857","tags":["advisory"]},{"url":"https://bitbucket.org/snakeyaml/snakeyaml/issues/525","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-29599","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-29599","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29599","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42889","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42889","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42889","tags":["advisory"]},{"url":"https://blogs.apache.org/security/entry/cve-2022-42889","tags":["article"]},{"url":"https://lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om","tags":["article"]},{"url":"https://seclists.org/oss-sec/2022/q4/22","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-24422","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24422","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24422","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-3016","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25761","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25761","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25761","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-3032","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25762","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25762","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25762","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-3019","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-35116","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-35116","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-35116","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-37946","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-37946","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37946","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-2998","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-37947","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-37947","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37947","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-2999","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39325","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39325","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39325","tags":["advisory"]},{"url":"https://go.dev/issue/63417","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40336","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40336","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40336","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3106","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40337","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40337","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40337","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3105","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40338","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40338","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40338","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3109","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40339","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40339","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40339","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3090","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40341","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40341","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40341","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3116","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0778","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1856376","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1955739","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107376","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2177632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2177634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180530","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2227788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2260180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2260182","tags":["report"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-10976","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-11348","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-13652","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-13901","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-14113","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-14393","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-14642","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-15648","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-27391","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-3692","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-4819","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-4833","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-6632","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-6982","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-7016","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-7050","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-8420","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-8497","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPTOOLS-246","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0778.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7692","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7692","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7692","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-26291","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-26291","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-26291","tags":["advisory"]},{"url":"https://maven.apache.org/docs/3.8.1/release-notes.html#cve-2021-26291","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1962","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1962","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1962","tags":["advisory"]},{"url":"https://go.dev/issue/53616","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-20861","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-20861","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-20861","tags":["advisory"]},{"url":"https://spring.io/blog/2023/03/20/spring-framework-6-0-7-and-5-3-26-fix-cve-2023-20860-and-cve-2023-20861","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-20862","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-20862","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-20862","tags":["advisory"]},{"url":"https://spring.io/security/cve-2023-20862","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-27903","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-27903","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27903","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3058","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-27904","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-27904","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27904","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-2120","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40167","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40167","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40167","tags":["advisory"]},{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-hmr7-m48g-48f6","tags":["article"]},{"url":"https://www.rfc-editor.org/rfc/rfc9110#section-8.6","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23897","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23897","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23897","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/24/6","tags":["article"]},{"url":"https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3314","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23898","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23898","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23898","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3315","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0798","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2246070","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248423","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2251407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255027","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0798.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6134","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-6134","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6134","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6291","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-6291","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6291","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6484","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-6484","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6484","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-j628-q885-8gr5","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6927","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-6927","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6927","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-44483","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-44483","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44483","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/20/5","tags":["article"]},{"url":"https://lists.apache.org/thread/vmqbp9mfxtrf0kmbnnmbn3h9j6dr9q55","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0799","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0799.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0800","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0800.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233090-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179926","tags":["report"]},{"url":"https://bugzilla.suse.com/1212401","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2976","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241138-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-2976","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-2976","title":"Use of temporary directory for file creation in `FileBackedOutputStream` in Guava","description":"Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class.\n\nEven though the security vulnerability is fixed in version 32.0.0, we recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.","status":"published","published":"2023-06-14T17:36:40.64Z","modified":"2026-02-25T16:57:59.928Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T14:35:24.004321Z"}],"euvd":[{"id":"EUVD-2023-1730","description":"Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class.\n\nEven though the security vulnerability is fixed in version 32.0.0, we recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.","status":"published","published":"2023-06-14T17:36:40Z","modified":"2026-02-25T16:57:59Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:48:29.128374Z"}],"ghsa":[{"id":"GHSA-7g45-4rm6-3mm3","title":"Guava vulnerable to insecure use of temporary directory","description":"Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class.\n\nEven though the security vulnerability is fixed in version 32.0.0, maintainers recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.","status":"published","published":"2023-06-14T18:30:38Z","modified":"2025-11-04T16:44:28Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-379","CWE-552"],"updated_at":"2026-11-02T14:39:06.376137Z"}],"nvd":[{"id":"CVE-2023-2976","description":"Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class.\n\nEven though the security vulnerability is fixed in version 32.0.0, we recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.","status":"published","published":"2023-06-14T18:15:09.513Z","modified":"2026-06-17T05:53:55.49Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"primary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T14:08:06.335469Z"}],"osv":[{"id":"AZL-27173","title":"CVE-2023-2976 affecting package guava for versions less than 25.0-8","description":"Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class.\n\nEven though the security vulnerability is fixed in version 32.0.0, we recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.","status":"published","published":"2023-06-14T18:15:09Z","modified":"2026-04-21T04:24:05.867249Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"AZL-43696","title":"CVE-2023-2976 affecting package guava20 20.0-5","description":"Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class.\n\nEven though the security vulnerability is fixed in version 32.0.0, we recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.","status":"published","published":"2023-06-14T18:15:09Z","modified":"2026-04-21T04:31:06.729961Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"CVE-2023-2976","title":"Use of temporary directory for file creation in `FileBackedOutputStream` in Guava","description":"Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class.\n\nEven though the security vulnerability is fixed in version 32.0.0, we recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.","status":"published","published":"2023-06-14T17:36:40.64Z","modified":"2026-10-28T02:31:03.32490983Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:31.468318Z"},{"id":"DEBIAN-CVE-2023-2976","description":"Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class.  Even though the security vulnerability is fixed in version 32.0.0, we recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.","status":"published","published":"2023-06-14T18:15:09.513Z","modified":"2026-10-26T18:01:49.607676477Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:39.679062Z"},{"id":"GHSA-7g45-4rm6-3mm3","title":"Guava vulnerable to insecure use of temporary directory","description":"Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class.\n\nEven though the security vulnerability is fixed in version 32.0.0, maintainers recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.","status":"published","published":"2023-06-14T18:30:38Z","modified":"2026-09-10T03:49:53.859811124Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-379","CWE-552"],"updated_at":"2026-11-02T15:46:41.002603Z"},{"id":"OESA-2023-1411","title":"guava20 security update","description":"Guava is a set of core libraries that includes new collection types ,immutable collections, a graph library, and utilities for concurrency, I/O, hashing, primitives, strings, and more.\n\nSecurity Fix(es):\n\nUse of Java\u0026apos;s default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class.\n\nEven though the security vulnerability is fixed in version 32.0.0, we recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.\n\n(CVE-2023-2976)","status":"published","published":"2023-07-08T11:05:52Z","modified":"2026-08-18T01:17:45.348426569Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1412","title":"guava security update","description":"Guava is a set of core Java libraries from Google that includes new collection types (such as multimap and multiset), immutable collections, a graph library, and utilities for concurrency, I/O, hashing, caching, primitives, strings, and more! It is widely used on most Java projects within Google, and widely used by many other companies as well.\n\nSecurity Fix(es):\n\nUse of Java\u0026apos;s default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class.\n\nEven though the security vulnerability is fixed in version 32.0.0, we recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.\n\n(CVE-2023-2976)","status":"published","published":"2023-07-08T11:05:52Z","modified":"2026-08-18T01:17:45.531644347Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"RHSA-2023:7637","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.14 on RHEL 7 security update","status":"published","published":"2024-09-30T15:48:00Z","modified":"2026-10-15T10:06:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2023:7638","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.14 on RHEL 8 security update","status":"published","published":"2024-09-30T15:47:51Z","modified":"2026-10-15T10:06:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2023:7639","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.14 on RHEL 9 security update","status":"published","published":"2024-09-30T15:47:40Z","modified":"2026-10-15T10:06:20Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0777","title":"Red Hat Security Advisory: jenkins and jenkins-2-plugins security update","status":"published","published":"2024-10-02T11:39:23Z","modified":"2026-10-20T10:02:30Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0778","title":"Red Hat Security Advisory: Jenkins and Jenkins-2-plugins security update","status":"published","published":"2024-09-30T15:05:06Z","modified":"2026-10-13T10:06:12Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0798","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.7 security update on RHEL 7","status":"published","published":"2024-09-30T10:15:54Z","modified":"2026-10-13T10:06:13Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0799","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.7 security update on RHEL 8","status":"published","published":"2024-09-30T10:16:03Z","modified":"2026-10-13T10:06:14Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0800","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.7 security update on RHEL 9","status":"published","published":"2024-09-30T10:16:32Z","modified":"2026-10-13T10:06:15Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"ROOT-APP-MAVEN-CVE-2023-2976","title":"CVE-2023-2976 in com.google.guava:guava - Patched by Root","description":"Root has patched CVE-2023-2976 in the com.google.guava:guava package for Root:Maven. Multiple fixed versions available.","status":"published","published":"2026-10-04T08:17:19Z","modified":"2026-10-04T09:15:03.223080913Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:27.066589Z"},{"id":"UBUNTU-CVE-2023-2976","description":"Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class. Even though the security vulnerability is fixed in version 32.0.0, we recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.","status":"published","published":"2023-06-14T18:15:00Z","modified":"2026-02-28T05:43:28.362299Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T16:54:20.997471Z"},{"id":"CLSA-2024-1726444801","title":"TuxCare security update for com.google.guava:guava (2 CVEs)","description":"TuxCare rebuilt com.google.guava:guava to address 2 CVEs. Fixed in 30.1-jre.tuxcare.","status":"published","published":"2026-08-04T14:45:08Z","modified":"2026-11-02T19:45:07.291270148Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2024-1733097629","title":"TuxCare security update for com.google.guava:guava (3 CVEs)","description":"TuxCare rebuilt com.google.guava:guava to address 3 CVEs. Fixed in 20.0.tuxcare.","status":"published","published":"2026-08-04T14:52:03Z","modified":"2026-11-02T19:45:05.134336774Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1752019363","title":"TuxCare security update for com.google.guava:guava (2 CVEs)","description":"TuxCare rebuilt com.google.guava:guava to address 2 CVEs. Fixed in 31.1-jre.tuxcare.1.","status":"published","published":"2026-08-04T14:52:04Z","modified":"2026-11-02T19:45:09.105468801Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2025-1765411681","title":"TuxCare security update for com.google.guava:guava (2 CVEs)","description":"TuxCare rebuilt com.google.guava:guava to address 2 CVEs. Fixed in 25.1-android-tuxcare.1.","status":"published","published":"2026-08-04T14:52:06Z","modified":"2026-11-02T19:45:13.218230156Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1773015253","title":"TuxCare security update for com.google.guava:guava (2 CVEs)","description":"TuxCare rebuilt com.google.guava:guava to address 2 CVEs. Fixed in 27.1-android-tuxcare.1.","status":"published","published":"2026-08-04T14:52:11Z","modified":"2026-11-02T19:45:19.271421287Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1773188139","title":"TuxCare security update for com.google.guava:guava (2 CVEs)","description":"TuxCare rebuilt com.google.guava:guava to address 2 CVEs. Fixed in 27.1-jre-tuxcare.1.","status":"published","published":"2026-08-04T14:52:12Z","modified":"2026-11-02T19:45:19.22031947Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1774398096","title":"TuxCare security update for com.google.guava:guava (1 CVE)","description":"TuxCare rebuilt com.google.guava:guava to address 1 CVE. Fixed in 18.0-tuxcare.1.","status":"published","published":"2026-08-04T14:52:15Z","modified":"2026-11-02T19:45:17.576024578Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1774484488","title":"TuxCare security update for com.google.guava:guava (1 CVE)","description":"TuxCare rebuilt com.google.guava:guava to address 1 CVE. Fixed in 25.1-jre-tuxcare.1.","status":"published","published":"2026-08-04T14:52:15Z","modified":"2026-11-02T19:45:15.772290514Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1778633133","title":"TuxCare security update for com.google.guava:guava (1 CVE)","description":"TuxCare rebuilt com.google.guava:guava to address 1 CVE. Fixed in 16.0.1-tuxcare.1.","status":"published","published":"2026-08-04T14:52:31Z","modified":"2026-11-02T19:45:27.299032779Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1790084175","title":"TuxCare security update for com.google.guava:guava (3 CVEs)","description":"TuxCare rebuilt com.google.guava:guava to address 3 CVEs. Fixed in 19.0-tuxcare.1.","status":"published","published":"2026-09-22T13:36:15Z","modified":"2026-11-02T19:46:19.61414069Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790132153","title":"TuxCare security update for com.google.guava:guava (1 CVE)","description":"TuxCare rebuilt com.google.guava:guava to address 1 CVE. Fixed in 19.0-rc3-tuxcare.1.","status":"published","published":"2026-09-23T02:55:53Z","modified":"2026-11-02T19:46:21.72239464Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1792656622","title":"TuxCare security update for com.google.guava:guava (1 CVE)","description":"TuxCare rebuilt com.google.guava:guava to address 1 CVE. Fixed in 31.0.1-android-tuxcare.1.","status":"published","published":"2026-10-22T08:10:22Z","modified":"2026-11-02T19:46:30.651250893Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792656687","title":"TuxCare security update for com.google.guava:guava (1 CVE)","description":"TuxCare rebuilt com.google.guava:guava to address 1 CVE. Fixed in 31.1-android-tuxcare.1.","status":"published","published":"2026-10-22T08:11:27Z","modified":"2026-11-02T19:46:30.438710297Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792656922","title":"TuxCare security update for com.google.guava:guava (2 CVEs)","description":"TuxCare rebuilt com.google.guava:guava to address 2 CVEs. Fixed in 14.0.1-tuxcare.1.","status":"published","published":"2026-10-22T08:15:22Z","modified":"2026-11-02T19:46:30.623111903Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792656983","title":"TuxCare security update for com.google.guava:guava (1 CVE)","description":"TuxCare rebuilt com.google.guava:guava to address 1 CVE. Fixed in 28.1-android-tuxcare.1.","status":"published","published":"2026-10-22T08:16:23Z","modified":"2026-11-02T19:46:30.478418511Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1793719794","title":"TuxCare security update for com.google.guava:guava (2 CVEs)","description":"TuxCare rebuilt com.google.guava:guava to address 2 CVEs. Fixed in 31.0.1-jre-tuxcare.1.","status":"published","published":"2026-11-03T16:29:55Z","modified":"2026-11-03T19:30:06.658654611Z","updated_at":"2026-11-03T20:03:57.215693Z"},{"id":"CLSA-2026-1793720148","title":"TuxCare security update for com.google.guava:guava (2 CVEs)","description":"TuxCare rebuilt com.google.guava:guava to address 2 CVEs. Fixed in 30.1.1-jre-tuxcare.1.","status":"published","published":"2026-11-03T16:35:48Z","modified":"2026-11-03T19:30:06.362216037Z","updated_at":"2026-11-03T20:03:57.215693Z"},{"id":"CLSA-2026-1793728595","title":"TuxCare security update for com.google.guava:guava (1 CVE)","description":"TuxCare rebuilt com.google.guava:guava to address 1 CVE. Fixed in 22.0-tuxcare.1.","status":"published","published":"2026-11-03T18:56:36Z","modified":"2026-11-04T02:30:04.329608344Z","updated_at":"2026-11-04T02:55:01.518827Z"},{"id":"CLSA-2026-1793864180","title":"TuxCare security update for com.google.guava:guava (1 CVE)","description":"TuxCare rebuilt com.google.guava:guava to address 1 CVE. Fixed in 12.0.1-tuxcare.2.","status":"published","published":"2026-11-05T08:36:20Z","modified":"2026-11-05T13:15:02.298886911Z","updated_at":"2026-11-05T13:30:00.949926Z"},{"id":"CLSA-2026-1794156173","title":"TuxCare security update for com.google.guava:guava (1 CVE)","description":"TuxCare rebuilt com.google.guava:guava to address 1 CVE. Fixed in 10.0.1-tuxcare.2.","status":"published","published":"2026-11-08T17:42:54Z","modified":"2026-11-08T19:30:02.441455126Z","updated_at":"2026-11-08T19:39:23.584635Z"},{"id":"MGASA-2024-0159","title":"Updated guava packages fix security vulnerabilities","description":"A bug that could allow an attacker with access to the machine to\npotentially access data in a temporary directory created by the Guava.\n(CVE-2020-8908)\nPredictable temporary files and directories used in\nFileBackedOutputStream. (CVE-2023-2976)\n","status":"published","published":"2024-04-30T22:25:14Z","modified":"2026-04-16T04:44:34.656379798Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13001-1","title":"guava-32.0.1-1.1 on GA media","description":"These are all security issues fixed in the guava-32.0.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:23:03.949602Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"SUSE-SU-2023:3090-1","title":"Security update for guava","description":"This update for guava fixes the following issues:\n\nUpgrade to guava 32.0.1:\n\n- CVE-2020-8908: Fixed predictable temporary files and directories used in FileBackedOutputStream (bsc#1179926).\n- CVE-2023-2976: Fixed a temp directory creation vulnerability (bsc#1212401).\n","status":"published","published":"2023-08-01T08:24:30Z","modified":"2026-02-04T02:52:35.161064Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2024:1138-1","title":"Security update for guava","description":"This update for guava fixes the following issues:\n\n- Upgrade to guava from v30.1.1 to v32.0.1\n- CVE-2023-2976: Fixed Predictable temporary files and directories used in FileBackedOutputStream. (bsc#1212401)\n- CVE-2020-8908: Fixed a bug that could allow an attacker with access to the machine to potentially access data in a temporary directory created by the Guava. (bsc#1179926)\n","status":"published","published":"2024-04-08T09:31:11Z","modified":"2026-02-04T03:45:20.719884Z","updated_at":"2026-11-02T15:53:54.239786Z"}]}}