{"id":"CVE-2024-47554","aliases":["AZL-50019","AZL-50031","CLSA-2025-1759795577","CLSA-2025-1764634061","CLSA-2026-1776126821","CLSA-2026-1778028242","CLSA-2026-1778633126","CLSA-2026-1779670106","CLSA-2026-1780274964","CLSA-2026-1784250510","CLSA-2026-1786518146","CLSA-2026-1788210245","CLSA-2026-1788215347","CLSA-2026-1788757840","CLSA-2026-1788766641","CLSA-2026-1789366696","CLSA-2026-1789374590","CLSA-2026-1789374806","CLSA-2026-1789374817","CLSA-2026-1789374823","DEBIAN-CVE-2024-47554","EUVD-2024-2976","GHSA-78wr-2p64-hpwj","GHSA-gwrp-pvrq-jmwv","OESA-2024-2558","RHLW-2026-4aa7ebdfd0b8c810","RHLW-2026-a317ddba4af7590d","RHLW-2026-f33a833f49f3fd86","RHLW-2026-f8fc2683e717e6a2","RHSA-2024:8823","RHSA-2024:8824","RHSA-2025:4548","RHSA-2025:4549","RHSA-2025:4550","ROOT-APP-MAVEN-CVE-2024-47554","SUSE-RU-2025:1150-1","SUSE-SU-2024:3596-1","UBUNTU-CVE-2024-47554","USN-8191-1","openSUSE-SU-2024:14387-1"],"status":"published","title":"Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader","description":"Uncontrolled Resource Consumption vulnerability in Apache Commons IO.\n\nThe org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.\n\n\nThis issue affects Apache Commons IO: from 2.0 before 2.14.0.\n\nUsers are recommended to upgrade to version 2.14.0 or later, which fixes the issue.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.01315,"percentile":0.71132,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2024-10-03T11:32:48Z","modified":"2026-11-02T12:02:52Z","fixes":[{"ecosystem":"Maven","package":"commons-io:commons-io","fixed_in":["2.14.0"],"sources":["ghsa","osv"]},{"ecosystem":"Azure Linux:2","package":"apache-commons-io","fixed_in":["2.14.0-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"apache-commons-io","fixed_in":["2.14.0-1"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"commons-io:commons-io","fixed_in":["2.7-tuxcare.1","2.5-tuxcare.1","2.11.0-tuxcare.1","2.6-tuxcare.1","2.4-tuxcare.1","2.8.0-tuxcare.1","2.0.1-tuxcare.1","2.9.0-tuxcare.1","2.10.0-tuxcare.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"commons-io","fixed_in":["2.16.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"commons-io","fixed_in":["2.16.0-1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"apache-commons-io","fixed_in":["2.15.1-1.oe2403"],"sources":["osv"]},{"ecosystem":"Red Hat Lightwell:Maven","package":"commons-io:commons-io","fixed_in":["2.8.0.rhlw-00002","2.11.0.rhlw-00009","2.13.0.rhlw-00007"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.root.commons-io:commons-io","fixed_in":["2.6-root.io.1","2.5-root.io.1","2.11.0-root.io.1","2.5-root.io.2","2.11.0-root.io.2","2.6-root.io.2"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"commons-io:commons-io","fixed_in":["2.5-aikido.2","2.11.0-aikido.2","2.6-aikido.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"apache-commons-io","fixed_in":["2.18.0-150200.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"apache-commons-io","fixed_in":["2.18.0-150200.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"apache-commons-io","fixed_in":["2.18.0-150200.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"apache-commons-io","fixed_in":["2.18.0-150200.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"apache-commons-io","fixed_in":["2.18.0-150200.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"apache-commons-io","fixed_in":["2.18.0-150200.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"apache-commons-io","fixed_in":["2.18.0-150200.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"apache-commons-io","fixed_in":["2.18.0-150200.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"apache-commons-io","fixed_in":["2.18.0-150200.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"apache-commons-io","fixed_in":["2.18.0-150200.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"apache-commons-io","fixed_in":["2.18.0-150200.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"apache-commons-io","fixed_in":["2.18.0-150200.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"apache-commons-io","fixed_in":["2.18.0-150200.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"apache-commons-io","fixed_in":["2.18.0-150200.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"apache-commons-io","fixed_in":["2.18.0-150200.3.15.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"apache-commons-io","fixed_in":["2.18.0-150200.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"apache-commons-io","fixed_in":["2.17.0-11.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"apache-commons-io","fixed_in":["2.17.0-11.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"apache-commons-io","fixed_in":["2.17.0-11.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"commons-io","fixed_in":["2.4-2ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"commons-io","fixed_in":["2.4-2ubuntu0.16.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"commons-io","fixed_in":["2.6-2ubuntu0.18.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"commons-io","fixed_in":["2.6-2ubuntu0.20.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"commons-io","fixed_in":["2.11.0-2ubuntu0.22.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"commons-io","fixed_in":["2.11.0-2ubuntu0.24.04.1~esm1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"apache-commons-io","fixed_in":["2.17.0-2.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"commons-io:commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0"},{"fixed":"2.14.0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.0-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.0-1"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"commons-io:commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7"},{"fixed":"2.7-tuxcare.1"}]}],"versions":["2.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"commons-io:commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.5"},{"fixed":"2.5-tuxcare.1"}]}],"versions":["2.5"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"commons-io:commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.11.0"},{"fixed":"2.11.0-tuxcare.1"}]}],"versions":["2.11.0"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"commons-io:commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6"},{"fixed":"2.6-tuxcare.1"}]}],"versions":["2.6"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"commons-io:commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4"},{"fixed":"2.4-tuxcare.1"}]}],"versions":["2.4"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"commons-io:commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.8.0"},{"fixed":"2.8.0-tuxcare.1"}]}],"versions":["2.8.0"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"commons-io:commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2"},{"fixed":"2.2-tuxcare.1"}]}],"versions":["2.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"commons-io:commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.1"},{"fixed":"2.0.1-tuxcare.1"}]}],"versions":["2.0.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"commons-io:commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1"},{"fixed":"2.1-tuxcare.1"}]}],"versions":["2.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"commons-io:commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3"},{"fixed":"2.3-tuxcare.1"}]}],"versions":["2.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"commons-io:commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.9.0"},{"fixed":"2.9.0-tuxcare.1"}]}],"versions":["2.9.0"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"commons-io:commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.10.0"},{"fixed":"2.10.0-tuxcare.1"}]}],"versions":["2.10.0"]},{"source":"osv","ecosystem":"Debian:12","package":"commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.11.0-2","2.15.1-1","2.16.0-1","2.16.1-1","2.17.0-1","2.18.0-1","2.19.0-1","2.22.0-1"]},{"source":"osv","ecosystem":"Debian:13","package":"commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-1"}]}]},{"source":"osv","ecosystem":"Maven","package":"commons-io:commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0"},{"fixed":"2.14.0"}]}],"versions":["2.0","2.0.1","2.1","2.10.0","2.11.0","2.12.0","2.13.0","2.2","2.3","2.4","2.5","2.6","2.7","2.8.0","2.9.0"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.1-1.oe2403"}]}]},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"commons-io:commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.8.0"},{"fixed":"2.8.0.rhlw-00002"}]}],"versions":["2.8.0"]},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"commons-io:commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.11.0"},{"fixed":"2.11.0.rhlw-00009"}]}],"versions":["2.11.0"]},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"commons-io:commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0.rhlw-00004"}]}],"versions":["0.1","1.0","1.1","1.2","1.3","1.3.1","1.3.2","1.4","2.0","2.0.1","2.1","2.2","2.2.0"],"bundled":2},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"commons-io:commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.0"},{"fixed":"2.13.0.rhlw-00007"}]}],"versions":["2.13.0"]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-activemq-artemis-jakarta-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-activemq-artemis-jakarta-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-activemq-artemis-jakarta-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-activemq-artemis-jakarta-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-activemq-artemis-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.0-2.redhat_00005.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-aesh-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-2.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-aesh-readline","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-2.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-apache-commons-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-2.redhat_00007.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-apache-commons-collections","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.2-28.redhat_2.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-apache-commons-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-2.redhat_00006.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-1.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-1.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-1.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-1.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-artemis-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.0-2.redhat_00005.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-artemis-native-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.0-2.redhat_00005.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-artemis-wildfly-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-asyncutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.0-2.redhat_00010.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-aws-java-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.284-2.redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-aws-java-sdk-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.284-2.redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-aws-java-sdk-kms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.284-2.redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-aws-java-sdk-s3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.284-2.redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-cryptacular","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-2.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-eap-product-conf-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:800.4.0-1.GA_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-eap-product-conf-wildfly-ee-feature-pack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:800.4.0-1.GA_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-fastinfoset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-4.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.31-1.Final_redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.31-1.Final_redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.31-1.Final_redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-hibernate-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.1-3.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-hibernate-validator-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.1-3.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-hppc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.1-2.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-insights-java-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.3-1.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-jakarta-servlet-jsp-jstl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-jakarta-servlet-jsp-jstl-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-jboss-cert-helper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.3-1.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-jboss-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-jctools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-1.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-jctools-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-1.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-jgroups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.10-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-jmespath-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.284-2.redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.1-1.redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-narayana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-narayana-jbosstxbridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-narayana-jbossxts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-narayana-jts-idlj","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-narayana-jts-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-narayana-restat-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-narayana-restat-bridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-narayana-restat-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-narayana-restat-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-nimbus-jose-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.37.3-1.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.0-1.redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-objectweb-asm-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.0-1.redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-pem-keystore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-1.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-resteasy-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-3.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-resteasy-spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-2.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-resteasy-tracing-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-3.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-saaj-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.4-1.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-shibboleth-java-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.0-6.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-1.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-slf4j-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-1.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-snakeyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-1.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.4-2.GA_redhat_00005.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.4-2.GA_redhat_00005.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.4-2.GA_redhat_00005.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-wildfly-java-jdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.4-2.GA_redhat_00005.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el8","package":"eap8-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.4-2.GA_redhat_00005.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-activemq-artemis-jakarta-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-activemq-artemis-jakarta-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-activemq-artemis-jakarta-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-activemq-artemis-jakarta-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-activemq-artemis-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.0-2.redhat_00005.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.33.0-1.redhat_00015.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-aesh-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-2.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-aesh-readline","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-2.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-apache-commons-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.1-2.redhat_00007.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-apache-commons-collections","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.2-28.redhat_2.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-apache-commons-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-2.redhat_00006.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-1.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-1.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-1.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-1.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-artemis-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.0-2.redhat_00005.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-artemis-native-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.0-2.redhat_00005.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-artemis-wildfly-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-asyncutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.0-2.redhat_00010.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-aws-java-sdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.284-2.redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-aws-java-sdk-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.284-2.redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-aws-java-sdk-kms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.284-2.redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-aws-java-sdk-s3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.284-2.redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-cryptacular","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-2.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-eap-product-conf-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:800.4.0-1.GA_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-eap-product-conf-wildfly-ee-feature-pack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:800.4.0-1.GA_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-fastinfoset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-4.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.31-1.Final_redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.31-1.Final_redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.31-1.Final_redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-hibernate-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.1-3.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-hibernate-validator-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.1-3.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-hppc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.1-2.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-insights-java-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.3-1.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-jakarta-servlet-jsp-jstl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-jakarta-servlet-jsp-jstl-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-jboss-cert-helper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.3-1.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-jboss-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.3-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-jctools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-1.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-jctools-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-1.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-jgroups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.10-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-jmespath-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.284-2.redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.22.1-1.redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-narayana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.3-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-narayana-jbosstxbridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.3-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-narayana-jbossxts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.3-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-narayana-jts-idlj","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.3-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-narayana-jts-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.3-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-narayana-restat-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.3-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-narayana-restat-bridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.3-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-narayana-restat-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.3-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-narayana-restat-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.3-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-nimbus-jose-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.37.3-1.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.0-1.redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-objectweb-asm-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.0-1.redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-pem-keystore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-1.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-resteasy-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-3.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-resteasy-spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-2.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-resteasy-tracing-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-3.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-saaj-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.4-1.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-shibboleth-java-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.0-6.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-1.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-slf4j-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-1.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-snakeyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-1.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.4-2.GA_redhat_00005.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.4-2.GA_redhat_00005.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.4-2.GA_redhat_00005.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-wildfly-java-jdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.4-2.GA_redhat_00005.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.0::el9","package":"eap8-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.4-2.GA_redhat_00005.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.1-1.redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.31-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-41.Final_redhat_00041.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-41.Final_redhat_00041.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-41.Final_redhat_00041.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.11-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.11-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.11-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.11-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.11-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.11-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.11-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.22-2.GA_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.25-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.25-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.22-2.GA_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.22-2.GA_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.22-2.GA_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.22-2.GA_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.1-1.redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-1.Final_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.31-1.Final_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-41.Final_redhat_00041.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-41.Final_redhat_00041.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-41.Final_redhat_00041.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.22-2.GA_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.25-1.Final_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.25-1.Final_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.22-2.GA_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.22-2.GA_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.22-2.GA_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.22-2.GA_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.22-2.GA_redhat_00001.1.el8eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.1-1.redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-1.Final_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.19-1.Final_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.31-1.Final_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-41.Final_redhat_00041.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-41.Final_redhat_00041.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-41.Final_redhat_00041.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.11-1.Final_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.11-1.Final_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.11-1.Final_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.11-1.Final_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.11-1.Final_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.11-1.Final_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.11-1.Final_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.22-2.GA_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.25-1.Final_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.25-1.Final_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.22-2.GA_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.22-2.GA_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.22-2.GA_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.22-2.GA_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.22-2.GA_redhat_00001.1.el9eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.commons-io:commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-root.io.1"},{"fixed":"2.5-root.io.1"},{"fixed":"2.11.0-root.io.1"},{"fixed":"2.5-root.io.2"},{"fixed":"2.11.0-root.io.2"},{"fixed":"2.6-root.io.2"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"commons-io:commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5-aikido.2"},{"fixed":"2.11.0-aikido.2"},{"fixed":"2.6-aikido.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.0-150200.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.0-150200.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.0-150200.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.0-150200.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.0-150200.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.0-150200.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.0-150200.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.0-150200.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.0-150200.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.0-150200.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.0-150200.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.0-150200.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.0-150200.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.0-150200.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.0-150200.3.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.0-150200.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0-11.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0-11.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0-11.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4-2ubuntu0.1~esm2"}]}],"versions":["2.4-2","2.4-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4-2ubuntu0.16.04.1~esm1"}]}],"versions":["2.4-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-2ubuntu0.18.04.1+esm1"}]}],"versions":["2.5-1","2.5-2","2.6-1","2.6-2","2.6-2ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-2ubuntu0.20.04.1+esm1"}]}],"versions":["2.6-2","2.6-2ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.0-2ubuntu0.22.04.1~esm1"}]}],"versions":["2.8.0-1","2.11.0-1","2.11.0-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.0-2ubuntu0.24.04.1~esm1"}]}],"versions":["2.11.0-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4-2ubuntu0.1~esm2"}]}],"versions":["2.4-2","2.4-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4-2ubuntu0.16.04.1~esm1"}]}],"versions":["2.4-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-2ubuntu0.18.04.1+esm1"}]}],"versions":["2.5-1","2.5-2","2.6-1","2.6-2","2.6-2ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-2ubuntu0.20.04.1+esm1"}]}],"versions":["2.6-2","2.6-2ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.0-2ubuntu0.22.04.1~esm1"}]}],"versions":["2.8.0-1","2.11.0-1","2.11.0-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.0-2ubuntu0.24.04.1~esm1"}]}],"versions":["2.11.0-2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"apache-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0-2.1"}]}]}],"products":[{"vendor":"apache","product":"commons_io"},{"vendor":"apache software foundation","product":"apache commons io"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"bluexp"},{"vendor":"netapp","product":"e-series_santricity_unified_manager"},{"vendor":"netapp","product":"e-series_santricity_web_services_proxy"},{"vendor":"netapp","product":"ontap_tools"},{"vendor":"netapp","product":"santricity_storage_plugin"},{"vendor":"netapp","product":"snapcenter"}],"references":[{"url":"https://lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1","tags":["vendor-advisory","Mailing List","Vendor Advisory","advisory","web","article","report"]},{"url":"http://www.openwall.com/lists/oss-security/2024/10/03/2","tags":["Mailing List","Third Party Advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20250131-0010/","tags":["Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47554","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20250131-0010","tags":["web"]},{"url":"https://github.com/advisories/GHSA-78wr-2p64-hpwj","tags":["advisory"]},{"url":"https://repo.maven.apache.org/maven2","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47554.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-47554","tags":["advisory"]},{"url":"https://github.com/apache/commons-io","tags":["package"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2558","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/r01b4a1fcdf3311c936ce33d75a9398b6c255f00c1a2f312ac21effe1%40%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r0bfa8f7921abdfae788b1f076a12f73a92c93cc0a6e1083bce0027c5%40%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r0d73e2071d1f1afe1a15da14c5b6feb2cf17e3871168d5a3c8451436%40%3Ccommits.pulsar.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r1c2f4683c35696cf6f863e3c107e37ec41305b1930dd40c17260de71%40%3Ccommits.pulsar.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r20416f39ca7f7344e7d76fe4d7063bb1d91ad106926626e7e83fb346%40%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r2345b49dbffa8a5c3c589c082fe39228a2c1d14f11b96c523da701db%40%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe%40%3Cusers.kafka.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r27b1eedda37468256c4bb768fde1e8b79b37ec975cbbfd0d65a7ac34%40%3Cdev.myfaces.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r2bc986a070457daca457a54fe71ee09d2584c24dc262336ca32b6a19%40%3Cdev.creadur.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r2df50af2641d38f432ef025cd2ba5858215cc0cf3fc10396a674ad2e%40%3Cpluto-scm.portals.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r345330b7858304938b7b8029d02537a116d75265a598c98fa333504a%40%3Cdev.creadur.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r4050f9f6b42ebfa47a98cbdee4aabed4bb5fb8093db7dbb88faceba2%40%3Ccommits.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r462db908acc1e37c455e11b1a25992b81efd18e641e7e0ceb1b6e046%40%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r477c285126ada5c3b47946bb702cb222ac4e7fd3100c8549bdd6d3b2%40%3Cissues.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r47ab6f68cbba8e730f42c4ea752f3a44eb95fb09064070f2476bb401%40%3Cdev.creadur.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r5149f78be265be69d34eacb4e4b0fc7c9c697bcdfa91a1c1658d717b%40%3Cissues.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r523a6ffad58f71c4f3761e3cee72df878e48cdc89ebdce933be1475c%40%3Cdev.creadur.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r808be7d93b17a7055c1981a8453ae5f0d0fce5855407793c5d0ffffa%40%3Cuser.commons.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r8569a41d565ca880a4dee0e645dad1cd17ab4a92e68055ad9ebb7375%40%3Cdev.creadur.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r86528f4b7d222aed7891e7ac03d69a0db2a2dfa17b86ac3470d7f374%40%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r873d5ddafc0a68fd999725e559776dc4971d1ab39c0f5cc81bd9bc04%40%3Ccommits.pulsar.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r8bfc7235e6b39d90e6f446325a5a44c3e9e50da18860fdabcee23e29%40%3Cissues.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r8efcbabde973ea72f5e0933adc48ef1425db5cde850bf641b3993f31%40%3Cdev.commons.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r92ea904f4bae190b03bd42a4355ce3c2fbe8f36ab673e03f6ca3f9fa%40%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/ra8ef65aedc086d2d3d21492b4c08ae0eb8a3a42cc52e29ba1bc009d8%40%3Cdev.creadur.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/raa053846cae9d497606027816ae87b4e002b2e0eb66cb0dee710e1f5%40%3Cdev.creadur.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rad4ae544747df32ccd58fff5a86cd556640396aeb161aa71dd3d192a%40%3Cuser.commons.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rbebd3e19651baa7a4a5503a9901c95989df9d40602c8e35cb05d3eb5%40%3Cdev.creadur.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rc10fa20ef4d13cbf6ebe0b06b5edb95466a1424a9b7673074ed03260%40%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rc2dd3204260e9227a67253ef68b6f1599446005bfa0e1ddce4573a80%40%3Cpluto-dev.portals.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rc5f3df5316c5237b78a3dff5ab95b311ad08e61d418cd992ca7e34ae%40%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rc65f9bc679feffe4589ea0981ee98bc0af9139470f077a91580eeee0%40%3Cpluto-dev.portals.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rca71a10ca533eb9bfac2d590533f02e6fb9064d3b6aa3ec90fdc4f51%40%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rd09d4ab3e32e4b3a480e2ff6ff118712981ca82e817f28f2a85652a6%40%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/re41e9967bee064e7369411c28f0f5b2ad28b8334907c9c6208017279%40%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/red3aea910403d8620c73e1c7b9c9b145798d0469eb3298a7be7891af%40%3Cnotifications.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rfa2f08b7c0caf80ca9f4a18bd875918fdd4e894e2ea47942a4589b9c%40%3Cdev.creadur.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rfcd2c649c205f12b72dde044f905903460669a220a2eb7e12652d19d%40%3Cdev.zookeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rfd01af05babc95b8949e6d8ea78d9834699e1b06981040dde419a330%40%3Cdev.commons.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rc359823b5500e9a9a2572678ddb8e01d3505a7ffcadfa8d13b8780ab%40%3Cuser.commons.apache.org%3E","tags":["advisory"]},{"url":"https://issues.apache.org/jira/browse/IO-556","tags":["report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-29425","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gwrp-pvrq-jmwv","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:8823","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/8.0/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2108554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2298829","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2309764","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2311641","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2312511","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-24945","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25035","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-27002","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-27194","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-27247","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-27276","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-27293","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-27392","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-27543","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-27585","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-27643","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-27659","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-27688","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-27694","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-27957","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-28057","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-28278","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-28289","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8823.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-34169","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-34169","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-34169","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-52428","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-52428","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52428","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-4029","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-4029","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4029","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-x7g6-rwhc-g7mj","tags":["advisory"]},{"url":"https://github.com/wildfly/wildfly/pull/17914","tags":["article"]},{"url":"https://github.com/wildfly/wildfly/pull/17935","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-8698","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-8698","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-8698","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-8883","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-8883","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-8883","tags":["advisory"]},{"url":"https://github.com/keycloak/keycloak/blob/main/services/src/main/java/org/keycloak/protocol/oidc/utils/RedirectUtils.java","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-41172","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-41172","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-41172","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-4mgg-fqfq-64hg","tags":["advisory"]},{"url":"https://lists.apache.org/thread/n2hvbrgwpdtcqdccod8by28ynnolybl6","tags":["article"]},{"url":"https://osv.dev/vulnerability/GHSA-4mgg-fqfq-64hg","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-47554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2316271","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-47554","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2024:8824","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-27248","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8824.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4548","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2325538","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2337620","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2344787","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2344788","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-28786","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-28808","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-28843","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-28989","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-29003","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-29311","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-29488","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-29539","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4548.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-47535","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-47535","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47535","tags":["advisory"]},{"url":"https://github.com/netty/netty/commit/fbf7a704a82e7449b48bd0bbb679f5661c6d61a3","tags":["article"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-24970","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-24970","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24970","tags":["advisory"]},{"url":"https://github.com/netty/netty/commit/87f40725155b2f89adfde68c7732f97c153676c4","tags":["article"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-4g8c-wm8x-jfhw","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-25193","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-25193","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-25193","tags":["advisory"]},{"url":"https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386","tags":["article"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-389x-839f-4rhx","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4549","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-28809","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4549.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4550","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-28810","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4550.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/-2025-1150/suse-ru-20251150-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1231298","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47554","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243596-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-47554","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8191-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JRY5QEEISAVBMYG363PQWMMY2EMLEE5E/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-47554","title":"Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader","description":"Uncontrolled Resource Consumption vulnerability in Apache Commons IO.\n\nThe org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.\n\n\nThis issue affects Apache Commons IO: from 2.0 before 2.14.0.\n\nUsers are recommended to upgrade to version 2.14.0 or later, which fixes the issue.","status":"published","published":"2024-10-03T11:32:48.936Z","modified":"2025-01-31T15:02:47.229Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:33:57.638551Z"}],"euvd":[{"id":"EUVD-2024-2976","description":"Uncontrolled Resource Consumption vulnerability in Apache Commons IO.\n\nThe org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.\n\n\nThis issue affects Apache Commons IO: from 2.0 before 2.14.0.\n\nUsers are recommended to upgrade to version 2.14.0 or later, which fixes the issue.","status":"published","published":"2024-10-03T11:32:48Z","modified":"2025-01-31T15:02:47Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T00:04:08.172652Z"}],"ghsa":[{"id":"GHSA-78wr-2p64-hpwj","title":"Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader","description":"Uncontrolled Resource Consumption vulnerability in Apache Commons IO.\n\nThe `org.apache.commons.io.input.XmlStreamReader` class may excessively consume CPU resources when processing maliciously crafted input.\n\n\nThis issue affects Apache Commons IO: from 2.0 before 2.14.0.\n\nUsers are recommended to upgrade to version 2.14.0 or later, which fixes the issue.","status":"published","published":"2024-10-03T12:30:48Z","modified":"2025-01-31T15:30:43Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:38:28.945236Z"}],"nvd":[{"id":"CVE-2024-47554","description":"Uncontrolled Resource Consumption vulnerability in Apache Commons IO.\n\nThe org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.\n\n\nThis issue affects Apache Commons IO: from 2.0 before 2.14.0.\n\nUsers are recommended to upgrade to version 2.14.0 or later, which fixes the issue.","status":"published","published":"2024-10-03T12:15:02.613Z","modified":"2026-06-17T07:57:17.887Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:10:30.673028Z"}],"osv":[{"id":"CVE-2024-47554","title":"Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader","description":"Uncontrolled Resource Consumption vulnerability in Apache Commons IO.\n\nThe org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.\n\n\nThis issue affects Apache Commons IO: from 2.0 before 2.14.0.\n\nUsers are recommended to upgrade to version 2.14.0 or later, which fixes the issue.","status":"published","published":"2024-10-03T11:32:48.936Z","modified":"2026-10-28T02:31:13.955573033Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:44:43.253252Z"},{"id":"DEBIAN-CVE-2024-47554","description":"Uncontrolled Resource Consumption vulnerability in Apache Commons IO.  The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.   This issue affects Apache Commons IO: from 2.0 before 2.14.0.  Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.","status":"published","published":"2024-10-03T12:15:02.613Z","modified":"2026-11-02T12:02:52.210800964Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:43.798789Z"},{"id":"GHSA-78wr-2p64-hpwj","title":"Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader","description":"Uncontrolled Resource Consumption vulnerability in Apache Commons IO.\n\nThe `org.apache.commons.io.input.XmlStreamReader` class may excessively consume CPU resources when processing maliciously crafted input.\n\n\nThis issue affects Apache Commons IO: from 2.0 before 2.14.0.\n\nUsers are recommended to upgrade to version 2.14.0 or later, which fixes the issue.","status":"published","published":"2024-10-03T12:30:48Z","modified":"2026-09-10T03:50:19.619589743Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:46:40.657155Z"},{"id":"OESA-2024-2558","title":"apache-commons-io security update","description":"Apache commons IO library is used for developing IO functionality. It contains a collecton of utilities with utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.\r\n\r\nSecurity Fix(es):\r\n\r\nUncontrolled Resource Consumption vulnerability in Apache Commons IO.  The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.   This issue affects Apache Commons IO: from 2.0 before 2.14.0.  Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.(CVE-2024-47554)","status":"published","published":"2024-12-13T11:08:02Z","modified":"2026-08-18T01:18:43.405595781Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"RHLW-2026-4aa7ebdfd0b8c810","title":"Lightwell Security Advisory: commons-io 2.8.0.rhlw-00002","description":"Red Hat Lightwell has released commons-io:commons-io 2.8.0.rhlw-00002 with a backported security fix.\n\nCVE-2024-47554: Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader\n\nThis patched artifact is a drop-in replacement for commons-io:commons-io 2.8.0 from Maven Central.","status":"published","published":"2026-09-10T14:57:00Z","modified":"2026-10-29T14:30:04.608073341Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHLW-2026-a317ddba4af7590d","title":"Lightwell Security Advisory: commons-io 2.11.0.rhlw-00009","description":"Red Hat Lightwell has released commons-io:commons-io 2.11.0.rhlw-00009 with a backported security fix.\n\nCVE-2024-47554: Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader\n\nThis patched artifact is a drop-in replacement for commons-io:commons-io 2.11.0 from Maven Central.","status":"published","published":"2026-10-08T00:00:00Z","modified":"2026-10-29T14:30:07.187674783Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHLW-2026-f33a833f49f3fd86","title":"Lightwell Security Advisory: commons-io 2.2.0.rhlw-00004","description":"Red Hat Lightwell has released commons-io:commons-io 2.2.0.rhlw-00004 with backported fixes for CVE-2021-29425 and CVE-2024-47554.\n\nCVE-2021-29425: In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"//../foo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value.\n\nCVE-2024-47554: Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader\n\nThis patched artifact is a drop-in replacement for commons-io:commons-io 2.2.0 from Maven Central.","status":"published","published":"2026-10-08T19:45:23Z","modified":"2026-10-27T04:12:59.01958663Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:59.135214Z"},{"id":"RHLW-2026-f8fc2683e717e6a2","title":"Lightwell Security Advisory: commons-io 2.13.0.rhlw-00007","description":"Red Hat Lightwell has released commons-io:commons-io 2.13.0.rhlw-00007 with a backported security fix.\n\nCVE-2024-47554: Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader\n\nThis patched artifact is a drop-in replacement for commons-io:commons-io 2.13.0 from Maven Central.","status":"published","published":"2026-09-29T07:37:41Z","modified":"2026-10-29T14:30:09.777938714Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:59.135214Z"},{"id":"RHSA-2024:8823","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.4 Security update","status":"published","published":"2026-08-05T10:22:32Z","modified":"2026-10-14T10:05:34Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:8824","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.4 Security update","status":"published","published":"2024-11-15T21:24:12Z","modified":"2026-10-14T10:05:34Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2025:4548","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.22 security update","status":"published","published":"2025-05-07T10:05:44Z","modified":"2026-10-20T10:04:00Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:4549","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.22 security update","status":"published","published":"2025-05-07T10:05:45Z","modified":"2026-10-20T10:04:00Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:4550","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.22 security update","status":"published","published":"2025-05-07T10:05:46Z","modified":"2026-10-20T10:04:01Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"ROOT-APP-MAVEN-CVE-2024-47554","title":"CVE-2024-47554 in io.root.commons-io:commons-io - Patched by Root","description":"Root has patched CVE-2024-47554 in the io.root.commons-io:commons-io package for Root:Maven. Multiple fixed versions available.","status":"published","published":"2026-06-17T12:34:40Z","modified":"2026-06-17T18:15:33.457941749Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:27.066589Z"},{"id":"UBUNTU-CVE-2024-47554","description":"Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.","status":"published","published":"2024-10-03T12:15:00Z","modified":"2026-04-22T15:10:42.698539Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T16:55:02.636559Z"},{"id":"AZL-50019","title":"CVE-2024-47554 affecting package apache-commons-io for versions less than 2.14.0-1","description":"Uncontrolled Resource Consumption vulnerability in Apache Commons IO.\n\nThe org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.\n\n\nThis issue affects Apache Commons IO: from 2.0 before 2.14.0.\n\nUsers are recommended to upgrade to version 2.14.0 or later, which fixes the issue.","status":"published","published":"2024-10-03T12:15:02Z","modified":"2026-04-21T04:30:05.37522Z","updated_at":"2026-11-02T15:28:06.032783Z"},{"id":"AZL-50031","title":"CVE-2024-47554 affecting package apache-commons-io for versions less than 2.14.0-1","description":"Uncontrolled Resource Consumption vulnerability in Apache Commons IO.\n\nThe org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.\n\n\nThis issue affects Apache Commons IO: from 2.0 before 2.14.0.\n\nUsers are recommended to upgrade to version 2.14.0 or later, which fixes the issue.","status":"published","published":"2024-10-03T12:15:02Z","modified":"2026-04-21T04:50:42.459822Z","updated_at":"2026-11-02T15:28:06.032783Z"},{"id":"CLSA-2025-1759795577","title":"TuxCare security update for commons-io:commons-io (1 CVE)","description":"TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.7-tuxcare.1.","status":"published","published":"2026-08-04T14:52:05Z","modified":"2026-10-15T09:46:10.626685432Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1764634061","title":"TuxCare security update for commons-io:commons-io (1 CVE)","description":"TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.5-tuxcare.1.","status":"published","published":"2026-08-04T14:52:06Z","modified":"2026-10-15T09:46:14.744627977Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1776126821","title":"TuxCare security update for commons-io:commons-io (1 CVE)","description":"TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.11.0-tuxcare.1.","status":"published","published":"2026-08-04T14:52:24Z","modified":"2026-10-15T09:46:26.03566174Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1778028242","title":"TuxCare security update for com.squareup.retrofit2 (3 CVEs)","description":"TuxCare rebuilt 5 com.squareup.retrofit2 packages to address 3 CVEs. Fixed in 2.9.0-tuxcare.1.","status":"withdrawn","published":"2026-08-04T14:52:30Z","modified":"2026-10-26T13:21:31Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1778633126","title":"TuxCare security update for commons-io:commons-io (1 CVE)","description":"TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.6-tuxcare.1.","status":"published","published":"2026-08-04T14:52:31Z","modified":"2026-10-15T09:46:31.085851024Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1779670106","title":"TuxCare security update for commons-io:commons-io (1 CVE)","description":"TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.4-tuxcare.1.","status":"published","published":"2026-08-04T14:52:33Z","modified":"2026-10-15T09:45:17.587415601Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1780274964","title":"TuxCare security update for commons-digester:commons-digester (4 CVEs)","description":"TuxCare rebuilt commons-digester:commons-digester to address 4 CVEs. Fixed in 2.1-tuxcare.1.","status":"withdrawn","published":"2026-08-04T14:52:34Z","modified":"2026-10-26T13:21:31Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1784250510","title":"TuxCare security update for commons-io:commons-io (1 CVE)","description":"TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.8.0-tuxcare.1.","status":"published","published":"2026-08-04T14:52:44Z","modified":"2026-10-15T09:47:23.765448469Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"CLSA-2026-1786518146","title":"TuxCare security update for commons-io:commons-io (2 CVEs)","description":"TuxCare rebuilt commons-io:commons-io to address 2 CVEs. Fixed in 2.2-tuxcare.1.","status":"published","published":"2026-08-12T07:02:26Z","modified":"2026-10-15T09:46:52.198719842Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1788210245","title":"TuxCare security update for 21 packages (1 CVE)","description":"TuxCare rebuilt 21 packages to address 1 CVE. Fixed in 2.5-tuxcare.1.","status":"withdrawn","published":"2026-08-31T21:04:05Z","modified":"2026-10-26T13:21:31Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1788215347","title":"TuxCare security update for org.apache.logging.log4j (7 CVEs)","description":"TuxCare rebuilt 23 org.apache.logging.log4j packages to address 7 CVEs. Fixed in 2.11.0-tuxcare.1.","status":"withdrawn","published":"2026-08-31T22:29:07Z","modified":"2026-10-26T13:21:31Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1788757840","title":"TuxCare security update for commons-io:commons-io (1 CVE)","description":"TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.0.1-tuxcare.1.","status":"published","published":"2026-09-07T05:10:40Z","modified":"2026-10-15T09:46:54.452322578Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1788766641","title":"TuxCare security update for com.jayway.jsonpath (3 CVEs)","description":"TuxCare rebuilt 2 com.jayway.jsonpath packages to address 3 CVEs. Fixed in 2.9.0-tuxcare.1.","status":"withdrawn","published":"2026-09-07T07:37:21Z","modified":"2026-10-26T13:21:31Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"CLSA-2026-1789366696","title":"TuxCare security update for org.apache.commons:commons-configuration2 (2 CVEs)","description":"TuxCare rebuilt org.apache.commons:commons-configuration2 to address 2 CVEs. Fixed in 2.8.0-tuxcare.1.","status":"withdrawn","published":"2026-09-14T06:18:16Z","modified":"2026-10-26T13:21:31Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"CLSA-2026-1789374590","title":"TuxCare security update for commons-io:commons-io (2 CVEs)","description":"TuxCare rebuilt commons-io:commons-io to address 2 CVEs. Fixed in 2.1-tuxcare.1.","status":"published","published":"2026-09-14T08:29:50Z","modified":"2026-10-15T09:47:43.397625994Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"CLSA-2026-1789374806","title":"TuxCare security update for commons-io:commons-io (2 CVEs)","description":"TuxCare rebuilt commons-io:commons-io to address 2 CVEs. Fixed in 2.3-tuxcare.1.","status":"published","published":"2026-09-14T08:33:26Z","modified":"2026-10-15T09:47:42.912617143Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"CLSA-2026-1789374817","title":"TuxCare security update for commons-io:commons-io (1 CVE)","description":"TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.9.0-tuxcare.1.","status":"published","published":"2026-09-14T08:33:37Z","modified":"2026-10-15T09:47:43.008002764Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"CLSA-2026-1789374823","title":"TuxCare security update for commons-io:commons-io (1 CVE)","description":"TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.10.0-tuxcare.1.","status":"published","published":"2026-09-14T08:33:43Z","modified":"2026-10-15T09:47:43.550927529Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"openSUSE-SU-2024:14387-1","title":"apache-commons-io-2.17.0-2.1 on GA media","description":"These are all security issues fixed in the apache-commons-io-2.17.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-10-08T00:00:00Z","modified":"2026-02-04T02:36:33.195248Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"SUSE-RU-2025:1150-1","title":"Recommended update for apache-commons-io","description":"This update for apache-commons-io fixes the following issues:\n\napache-commons-io was updated from version 2.15.1 to 2.18.0:\n    \n- Key changes across versions:\n  * Cleaner code and updated dependencies\n  * Improved security when handling serialized data with the new safe deserialization feature\n  * New features for advanced file and stream operations\n  * Various bugs were fixed to improve reliability with fewer crashes and unexpected errors\n  * For the full list of changes please consult the packaged RELEASE-NOTES.txt\n    \n- Already fixed in previous version:\n  * CVE-2024-47554: Untrusted input to XmlStreamReader can lead to uncontrolled resource consumption (bsc#1231298)\n","status":"published","published":"2025-04-07T07:47:08Z","modified":"2026-02-04T04:04:54.631471Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2024:3596-1","title":"Security update for apache-commons-io","description":"This update for apache-commons-io fixes the following issues:\n\nUpgrade to 2.17.0:\n\n- CVE-2024-47554: Fixed untrusted input to XmlStreamReader can lead to uncontrolled resource consumption (bsc#1231298)\n\nOther changes:\n- https://commons.apache.org/proper/commons-io/changes-report.html#a2.17.0\n \n","status":"published","published":"2024-10-11T08:38:55Z","modified":"2026-02-04T02:44:42.99923Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"USN-8191-1","title":"commons-io vulnerability","description":"It was discovered that Apache Commons IO's XmlStreamReader class\ncould excessively consume CPU resources under certain circumstances. An\nattacker could possibly use this issue to cause Apache Commons IO\nto crash, resulting in a denial of service.","status":"published","published":"2026-04-21T11:36:11Z","modified":"2026-06-25T13:32:31.900321148Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}