{"id":"CVE-2023-39410","aliases":["CLSA-2025-1765238872","CLSA-2026-1778633128","CLSA-2026-1778633130","CLSA-2026-1778719546","CLSA-2026-1792663402","CLSA-2026-1794253414","EUVD-2023-0049","GHSA-r7pg-v2c8-mfg3","GHSA-rhrv-645h-fjfh","OESA-2024-1809","OESA-2024-1915","OESA-2024-1916","OESA-2024-1917","OESA-2024-1918","PYSEC-2023-188","RHLW-2026-4051ab209e8865e6","RHLW-2026-41bd2185e6d22e15","RHSA-2023:7637","RHSA-2023:7638","RHSA-2023:7639","RHSA-2024:10207","RHSA-2024:10208","ROOT-APP-MAVEN-CVE-2023-39410"],"status":"published","title":"Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK","description":"When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.\n\nThis issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2.  Users should update to apache-avro version 1.11.3 which addresses this issue.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.02221,"percentile":0.82935,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20","CWE-502"],"published":"2023-09-29T16:23:34Z","modified":"2026-11-10T01:15:03Z","fixes":[{"ecosystem":"Maven","package":"org.apache.avro:avro","fixed_in":["1.11.3"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro","fixed_in":["1.10.2-tuxcare.1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"avro","fixed_in":["1.10.2-5.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"avro","fixed_in":["1.10.2-5.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"avro","fixed_in":["1.10.2-5.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"avro","fixed_in":["1.10.2-5.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"avro","fixed_in":["1.10.2-5.oe2403"],"sources":["osv"]},{"ecosystem":"PyPI","package":"avro","fixed_in":["1.11.3"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.root.org.apache.avro:avro","fixed_in":["1.9.2-root.io.2","1.9.2-root.io.3","1.11.0-root.io.1","1.11.3-root.io.1"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"org.apache.avro:avro","fixed_in":["1.9.2-aikido.3","1.11.0-aikido.1","1.11.3-aikido.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.3"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.1"}]}],"versions":["1.10.2"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-archetypes-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-ipc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-mapred","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-maven-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-service-archetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-thrift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-toplevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:trevni-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:trevni-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:trevni-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:trevni-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-archetypes-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-ipc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-mapred","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-maven-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-service-archetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-thrift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-toplevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:trevni-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:trevni-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:trevni-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:trevni-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.2"},{"fixed":"1.8.2-tuxcare.1"}]}],"versions":["1.8.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.2"},{"fixed":"1.9.2-tuxcare.1"}]}],"versions":["1.9.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.2"},{"fixed":"1.9.2-tuxcare.1"}]}],"versions":["1.9.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.11.1"},{"fixed":"1.11.1-tuxcare.1"}]}],"versions":["1.11.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.11.1"},{"fixed":"1.11.1-tuxcare.1"}]}],"versions":["1.11.1"],"bundled":3},{"source":"osv","ecosystem":"Maven","package":"org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.3"}]}],"versions":["1.10.0","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.4.0","1.4.1","1.5.0","1.5.1","1.5.2","1.5.3","1.5.4","1.6.0","1.6.1","1.6.2","1.6.3","1.7.0","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.8.0","1.8.1","1.8.2","1.9.0","1.9.1","1.9.2"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-5.oe2403"}]}]},{"source":"osv","ecosystem":"PyPI","package":"avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.3"}]}],"versions":["1.10.0","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.3.3","1.4.1","1.5.0","1.5.1","1.5.2","1.5.3","1.5.4","1.6.0","1.6.1","1.6.2","1.6.3","1.7.0","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.8.0","1.8.1","1.8.2","1.9.0","1.9.1","1.9.2"]},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"org.apache.avro:avro-android","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0.rhlw-00002"}]}],"versions":["1.11.0"],"bundled":2},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0.rhlw-00002"}]}],"versions":["1.10.0","1.10.1","1.10.2","1.11.0","1.4.0","1.4.1","1.5.0","1.5.1","1.5.2","1.5.3","1.5.4","1.6.0","1.6.1","1.6.2","1.6.3","1.7.0","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.8.0","1.8.1","1.8.2","1.9.0","1.9.1","1.9.2"],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:32.1.1-2.jre_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-guava-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:32.1.1-2.jre_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.28-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.11-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-apache-sshd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-1.redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.3-1.redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.20-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-cachestore-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-cachestore-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-client-hotrod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-component-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-hibernate-cache-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-hibernate-cache-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-infinispan-hibernate-cache-v53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jandex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.4-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-jsp-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.9-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jgroups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.23-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.16-1.Final_redhat_00001.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-yasson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.11-4.redhat_00002.1.el7eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:32.1.1-2.jre_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-guava-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:32.1.1-2.jre_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.28-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.11-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-apache-sshd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-1.redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.3-1.redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.20-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-cachestore-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-cachestore-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-client-hotrod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-component-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-hibernate-cache-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-hibernate-cache-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-infinispan-hibernate-cache-v53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jandex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.4-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-jsp-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.9-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jgroups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.23-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.16-1.Final_redhat_00001.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-yasson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.11-4.redhat_00002.1.el8eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:32.1.1-2.jre_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-guava-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:32.1.1-2.jre_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.28-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.14-5.GA_redhat_00002.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.11-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-17.redhat_00051.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-apache-sshd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-1.redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.3-1.redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.20-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.32-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-cachestore-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-cachestore-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-client-hotrod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-component-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-hibernate-cache-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-hibernate-cache-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-infinispan-hibernate-cache-v53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.18-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jandex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.4-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-jsp-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-33.Final_redhat_00032.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.9-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jgroups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.23-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.10-2.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.16-1.Final_redhat_00001.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-yasson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.11-4.redhat_00002.1.el9eap"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.6-8.redhat_00003.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.197-3.redhat_00004.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-annotations-api_1.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.15-1.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.15-1.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap6.4-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.2-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.3-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly12.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly13.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly14.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly15.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly16.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly17.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly18.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.13-1.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-log4j-jboss-logmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-2.Final_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.11-4.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.11-4.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.11-4.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.11-4.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.11-4.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wss4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wss4j-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wss4j-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wss4j-ws-security-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wss4j-ws-security-dom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wss4j-ws-security-policy-stax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wss4j-ws-security-stax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-38.redhat_00015.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.16-3.SP1_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.16-3.SP1_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.16-3.SP1_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.16-3.SP1_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.6-2.redhat_00003.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00005.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-bouncycastle-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00005.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-bouncycastle-pkix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00005.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-bouncycastle-prov","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00005.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.197-2.redhat_00005.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.11.6-1.SP1_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.15-1.Final_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.15-1.Final_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.10-1.Final_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.8-2.GA_redhat_00002.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.8-2.GA_redhat_00002.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-26.redhat_00015.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-root.io.2"},{"fixed":"1.9.2-root.io.3"},{"fixed":"1.11.0-root.io.1"},{"fixed":"1.11.3-root.io.1"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-aikido.3"},{"fixed":"1.11.0-aikido.1"},{"fixed":"1.11.3-aikido.1"}]}]}],"products":[{"vendor":"apache","product":"avro"},{"vendor":"apache software foundation","product":"apache avro java sdk"}],"references":[{"url":"https://lists.apache.org/thread/q142wj99cwdd0jo5lvdoxzoymlqyjdds","tags":["vendor-advisory","x_transferred","Mailing List","Vendor Advisory","advisory","web"]},{"url":"https://www.openwall.com/lists/oss-security/2023/09/29/6","tags":["x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","tags":["x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39410","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/29/6","tags":["web"]},{"url":"https://github.com/apache/avro/commit/a12a7e44ddbe060c3dc731863cad5c15f9267828","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/avro/PYSEC-2023-188.yaml","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006","tags":["web"]},{"url":"https://issues.apache.org/jira/browse/AVRO-3819","tags":["web","article"]},{"url":"https://github.com/advisories/GHSA-rhrv-645h-fjfh","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39410.json","tags":["advisory"]},{"url":"https://github.com/apache/avro","tags":["package"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1809","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/security-bulletins/detail?id=openEuler-SA-2024-1915","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/security-bulletins/detail?id=openEuler-SA-2024-1916","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/security-bulletins/detail?id=openEuler-SA-2024-1917","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/security-bulletins/detail?id=openEuler-SA-2024-1918","tags":["advisory"]},{"url":"https://repo.maven.apache.org/maven2","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47561.json","tags":["advisory"]},{"url":"https://lists.apache.org/thread/c2v7mhqnmq0jmbwxqq3r5jbj1xg43h5x","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47561","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-r7pg-v2c8-mfg3","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7637","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2023-003","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2184751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215229","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236340","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236341","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242803","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-25004","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25085","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25086","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25378","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25380","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25419","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25451","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25457","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25541","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25547","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25576","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25594","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25627","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25657","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25685","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25700","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25716","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25726","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25772","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25779","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25803","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25838","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-26041","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7637.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-2976","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-2976","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2976","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4503","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4503","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4503","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5685","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241822","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5685","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5685","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-26048","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-26048","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26048","tags":["advisory"]},{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-qw69-rqj8-6qw8","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-26049","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-26049","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26049","tags":["advisory"]},{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-p26g-97m4-6q7c","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-35887","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-35887","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-35887","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39410","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39410","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-44487","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-44487","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44487","tags":["advisory"]},{"url":"https://github.com/dotnet/announcements/issues/277","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2023-2102","tags":["advisory"]},{"url":"https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","tags":["article"]},{"url":"https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7638","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7638.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7639","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7639.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:10207","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2010378","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2031667","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2108554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2136141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155682","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182864","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213639","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270732","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2316116","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-23025","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10207.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3859","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3859","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3859","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4104","tags":["report"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2021-009","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4104","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4104","tags":["advisory"]},{"url":"https://github.com/apache/logging-log4j2/pull/608#issuecomment-990494126","tags":["article"]},{"url":"https://github.com/apache/logging-log4j2/pull/608#issuecomment-991723301","tags":["article"]},{"url":"https://lists.apache.org/thread/0x4zvtq92yggdgvwfgsftqrj4xx5w0nx","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2021/12/13/1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23221","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23221","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23221","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-45hx-wfhj-473x","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23305","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23305","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23305","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/18/4","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23307","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23307","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23307","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/18/5","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-34169","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-34169","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-34169","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41853","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41853","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41853","tags":["advisory"]},{"url":"http://hsqldb.org/doc/2.0/guide/sqlroutines-chapt.html#src_jrt_access_control","tags":["article"]},{"url":"https://github.com/advisories/GHSA-77xx-rxvh-q682","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-46364","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-46364","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46364","tags":["advisory"]},{"url":"https://cxf.apache.org/security-advisories.data/CVE-2022-46364.txt?version=1\u0026modificationDate=1670944472739\u0026api=v2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3171","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3171","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3171","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-26464","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-26464","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26464","tags":["advisory"]},{"url":"https://www.ibm.com/support/pages/security-bulletin-vulnerability-log4j-1216jar-affect-ibm-operations-analytics-log-analysis-cve-2023-26464","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-28752","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-28752","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-28752","tags":["advisory"]},{"url":"https://cxf.apache.org/security-advisories.data/CVE-2024-28752.txt","tags":["article"]},{"url":"https://github.com/advisories/GHSA-qmgx-j96g-4428","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-47561","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-47561","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:10208","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1/html-single/installation_guide/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1796225","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1912881","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-27708","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10208.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7238","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7238","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7238","tags":["advisory"]},{"url":"https://netty.io/news/2019/12/18/4-1-44-Final.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28052","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28052","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28052","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-39410","title":"Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK","description":"When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.\n\nThis issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2.  Users should update to apache-avro version 1.11.3 which addresses this issue.","status":"published","published":"2023-09-29T16:23:34.021Z","modified":"2025-02-13T17:03:03.075Z","cwes":["CWE-502"],"updated_at":"2026-11-02T14:35:33.138994Z"}],"euvd":[{"id":"EUVD-2023-0049","description":"When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.\n\nThis issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2.  Users should update to apache-avro version 1.11.3 which addresses this issue.","status":"published","published":"2023-09-29T16:23:34Z","modified":"2025-02-13T17:03:03Z","cvss":[{"version":"","score":0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"none"}],"updated_at":"2026-11-03T00:03:49.604577Z"}],"ghsa":[{"id":"GHSA-rhrv-645h-fjfh","title":"Apache Avro Java SDK vulnerable to Improper Input Validation","description":"When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.\n\nThis issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2.  Users should update to apache-avro version 1.11.3 which addresses this issue.","status":"published","published":"2023-09-29T18:30:22Z","modified":"2025-07-31T14:22:33Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20","CWE-502"],"updated_at":"2026-11-02T14:38:51.864708Z"}],"nvd":[{"id":"CVE-2023-39410","description":"When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.\n\nThis issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2.  Users should update to apache-avro version 1.11.3 which addresses this issue.","status":"published","published":"2023-09-29T17:15:46.923Z","modified":"2026-06-17T06:12:15.29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T14:08:35.022405Z"}],"osv":[{"id":"GHSA-rhrv-645h-fjfh","title":"Apache Avro Java SDK vulnerable to Improper Input Validation","description":"When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.\n\nThis issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2.  Users should update to apache-avro version 1.11.3 which addresses this issue.","status":"published","published":"2023-09-29T18:30:22Z","modified":"2026-09-10T03:50:03.249125764Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20","CWE-502"],"updated_at":"2026-11-02T15:46:55.877614Z"},{"id":"OESA-2024-1809","title":"avro security update","description":"Apache Avro is a data serialization system.\r\n\r\nSecurity Fix(es):\r\n\r\nWhen deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.\r\n\r\nThis issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2.  Users should update to apache-avro version 1.11.3 which addresses this issue.\r\n\r\n(CVE-2023-39410)","status":"published","published":"2024-07-05T11:07:16Z","modified":"2026-08-18T01:18:28.28713641Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1915","title":"avro security update","description":"Apache Avro is a data serialization system.\r\n\r\nSecurity Fix(es):\r\n\r\nWhen deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.\r\n\r\nThis issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2.  Users should update to apache-avro version 1.11.3 which addresses this issue.\r\n\r\n(CVE-2023-39410)","status":"published","published":"2024-08-02T11:07:22Z","modified":"2026-08-18T01:18:31.091853682Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"OESA-2024-1916","title":"avro security update","description":"Apache Avro is a data serialization system.\r\n\r\nSecurity Fix(es):\r\n\r\nWhen deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.\r\n\r\nThis issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2.  Users should update to apache-avro version 1.11.3 which addresses this issue.\r\n\r\n(CVE-2023-39410)","status":"published","published":"2024-08-02T11:07:22Z","modified":"2026-08-18T01:18:31.440622455Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"OESA-2024-1917","title":"avro security update","description":"Apache Avro is a data serialization system.\r\n\r\nSecurity Fix(es):\r\n\r\nWhen deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.\r\n\r\nThis issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2.  Users should update to apache-avro version 1.11.3 which addresses this issue.\r\n\r\n(CVE-2023-39410)","status":"published","published":"2024-08-02T11:07:22Z","modified":"2026-08-18T01:18:31.880538757Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"OESA-2024-1918","title":"avro security update","description":"Apache Avro is a data serialization system.\r\n\r\nSecurity Fix(es):\r\n\r\nWhen deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.\r\n\r\nThis issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2.  Users should update to apache-avro version 1.11.3 which addresses this issue.\r\n\r\n(CVE-2023-39410)","status":"published","published":"2024-08-02T11:07:23Z","modified":"2026-08-18T01:18:31.514688558Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"PYSEC-2023-188","description":"When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.\n\nThis issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2.  Users should update to apache-avro version 1.11.3 which addresses this issue.\n\n","status":"published","published":"2023-09-29T17:15:00Z","modified":"2023-11-08T04:13:13.843377Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:53.837392Z"},{"id":"RHLW-2026-4051ab209e8865e6","title":"Lightwell Security Advisory: avro-android 1.11.0.rhlw-00002","description":"Red Hat Lightwell has released org.apache.avro:avro-android 1.11.0.rhlw-00002 with backported fixes for CVE-2023-39410 and CVE-2024-47561.\n\nCVE-2023-39410: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK\n\nCVE-2024-47561: Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)\n\nThis patched artifact is a drop-in replacement for org.apache.avro:avro-android 1.11.0 from Maven Central.","status":"published","published":"2026-10-08T19:45:40Z","modified":"2026-10-27T04:13:04.772693794Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHLW-2026-41bd2185e6d22e15","title":"Lightwell Security Advisory: avro 1.11.0.rhlw-00002","description":"Red Hat Lightwell has released org.apache.avro:avro 1.11.0.rhlw-00002 with backported fixes for CVE-2023-39410 and CVE-2024-47561.\n\nCVE-2023-39410: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK\n\nCVE-2024-47561: Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)\n\nThis patched artifact is a drop-in replacement for org.apache.avro:avro 1.11.0 from Maven Central.","status":"published","published":"2026-09-17T11:51:50Z","modified":"2026-10-27T04:13:00.162498457Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2023:7637","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.14 on RHEL 7 security update","status":"published","published":"2024-09-30T15:48:00Z","modified":"2026-10-15T10:06:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2023:7638","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.14 on RHEL 8 security update","status":"published","published":"2024-09-30T15:47:51Z","modified":"2026-10-15T10:06:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2023:7639","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.14 on RHEL 9 security update","status":"published","published":"2024-09-30T15:47:40Z","modified":"2026-10-15T10:06:20Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:10207","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.11 Security update","status":"published","published":"2024-11-26T07:31:41Z","modified":"2026-10-20T10:02:32Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:10208","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.8 on RHEL 7 security update","status":"published","published":"2024-11-26T07:31:51Z","modified":"2026-10-20T10:02:33Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"ROOT-APP-MAVEN-CVE-2023-39410","title":"CVE-2023-39410 in io.root.org.apache.avro:avro - Patched by Root","description":"Root has patched CVE-2023-39410 in the io.root.org.apache.avro:avro package for Root:Maven. Multiple fixed versions available.","status":"published","published":"2026-06-26T07:55:59Z","modified":"2026-06-26T13:00:05.834422842Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:27.066589Z"},{"id":"CLSA-2025-1765238872","title":"TuxCare security update for org.apache.avro:avro (1 CVE)","description":"TuxCare rebuilt org.apache.avro:avro to address 1 CVE. Fixed in 1.10.2-tuxcare.1.","status":"published","published":"2026-08-04T14:52:06Z","modified":"2026-11-02T19:45:10.443677207Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1778633128","title":"TuxCare security update for org.apache.avro (3 CVEs)","description":"TuxCare rebuilt 16 org.apache.avro packages to address 3 CVEs. Fixed in 1.7.6-tuxcare.1.","status":"published","published":"2026-08-04T14:52:31Z","modified":"2026-10-15T09:46:30.858371328Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1778633130","title":"TuxCare security update for org.apache.avro (3 CVEs)","description":"TuxCare rebuilt 16 org.apache.avro packages to address 3 CVEs. Fixed in 1.7.7-tuxcare.1.","status":"published","published":"2026-08-04T14:52:31Z","modified":"2026-10-15T09:46:30.8024139Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1778719546","title":"TuxCare security update for org.apache.avro:avro (2 CVEs)","description":"TuxCare rebuilt org.apache.avro:avro to address 2 CVEs. Fixed in 1.8.2-tuxcare.1.","status":"published","published":"2026-08-04T14:52:31Z","modified":"2026-11-02T19:45:28.951174895Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1792663402","title":"TuxCare security update for org.apache.avro (2 CVEs)","description":"TuxCare rebuilt 2 org.apache.avro packages to address 2 CVEs. Fixed in 1.9.2-tuxcare.1.","status":"published","published":"2026-10-22T10:03:22Z","modified":"2026-11-02T19:46:30.510832482Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1794253414","title":"TuxCare security update for org.apache.avro (3 CVEs)","description":"TuxCare rebuilt 2 org.apache.avro packages to address 3 CVEs. Fixed in 1.11.1-tuxcare.1.","status":"published","published":"2026-11-09T20:43:34Z","modified":"2026-11-10T01:15:03.453043748Z","updated_at":"2026-11-10T01:43:20.132342Z"},{"id":"CVE-2023-39410","title":"Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK","description":"When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.\n\nThis issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2.  Users should update to apache-avro version 1.11.3 which addresses this issue.","status":"published","published":"2023-09-29T16:23:34.021Z","modified":"2026-10-28T02:30:31.088269427Z","cwes":["CWE-502"],"updated_at":"2026-11-02T15:44:32.922049Z"}]}}