{"id":"CVE-2026-0603","aliases":["CLSA-2026-1769731733","CLSA-2026-1778892379","CLSA-2026-1779151631","CLSA-2026-1779238047","CLSA-2026-1783299710","CLSA-2026-1783386136","EUVD-2026-4427","GHSA-2p5w-cvg5-gc5c","RHSA-2026:4915","RHSA-2026:4916","RHSA-2026:4917","RHSA-2026:6011","RHSA-2026:6012","RHSA-2026:76128","RHSA-2026:76129","RHSA-2026:76130","ROOT-APP-MAVEN-CVE-2026-0603"],"status":"published","title":"Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection","description":"A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive information disclosure, such as reading system files, and allow for data manipulation or deletion within the application's database, resulting in an application level denial of service.","severity":{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.01032,"percentile":0.64038,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-89"],"published":"2026-01-23T06:31:38Z","modified":"2026-11-05T21:16:20Z","exploits":[{"source":"pocgithub","id":"EQSTLab/CVE-2026-0603","title":"EQSTLab/CVE-2026-0603","date":"2026-04-23","url":"https://github.com/EQSTLab/CVE-2026-0603"},{"source":"pocgithub","id":"yym8538/CVE-2026-0603","title":"yym8538/CVE-2026-0603","date":"2026-08-21","url":"https://github.com/yym8538/CVE-2026-0603"}],"fixes":[{"ecosystem":"Maven","package":"org.hibernate:hibernate-core","fixed_in":["5.3.38"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:Maven","package":"org.hibernate:hibernate-core","fixed_in":["5.6.15.Final-tuxcare.3","5.4.33.Final-tuxcare.1","5.5.9.Final-tuxcare.1","5.5.6.Final-tuxcare.1","5.4.31.Final-tuxcare.2","5.4.30.Final-tuxcare.2"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"org.hibernate:hibernate-core","fixed_in":["5.6.12.Final-aikido.1"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.root.org.hibernate:hibernate-core","fixed_in":["5.6.12.Final-root.io.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.hibernate:hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.8"},{"fixed":"5.3.38"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.hibernate:hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.15.Final"},{"fixed":"5.6.15.Final-tuxcare.3"}]}],"versions":["5.6.15.Final","5.6.15.Final-tuxcare.1","5.6.15.Final-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.hibernate:hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.4.33.Final"},{"fixed":"5.4.33.Final-tuxcare.1"}]}],"versions":["5.4.33.Final"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.hibernate:hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.9.Final"},{"fixed":"5.5.9.Final-tuxcare.1"}]}],"versions":["5.5.9.Final"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.hibernate:hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.6.Final"},{"fixed":"5.5.6.Final-tuxcare.1"}]}],"versions":["5.5.6.Final"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.hibernate:hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.4.31.Final"},{"fixed":"5.4.31.Final-tuxcare.2"}]}],"versions":["5.4.31.Final","5.4.31.Final-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.hibernate:hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.4.30.Final"},{"fixed":"5.4.30.Final-tuxcare.2"}]}],"versions":["5.4.30.Final","5.4.30.Final-tuxcare.1"]},{"source":"osv","ecosystem":"Maven","package":"org.hibernate:hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.8"},{"fixed":"5.3.38"}]}],"versions":["5.2.10.Final","5.2.11.Final","5.2.12.Final","5.2.13.Final","5.2.14.Final","5.2.15.Final","5.2.16.Final","5.2.17.Final","5.2.18.Final","5.2.8.Final","5.2.9.Final","5.3.0.Beta1","5.3.0.Beta2","5.3.0.CR1","5.3.0.CR2","5.3.0.Final","5.3.1.Final","5.3.10.Final","5.3.11.Final","5.3.12.Final","5.3.13.Final","5.3.14.Final","5.3.15.Final","5.3.16.Final","5.3.17.Final","5.3.18.Final","5.3.19.Final","5.3.2.Final","5.3.20.Final","5.3.21.Final","5.3.22.Final","5.3.23.Final","5.3.24.Final","5.3.25.Final","5.3.26.Final","5.3.27.Final","5.3.28.Final","5.3.29.Final","5.3.3.Final","5.3.30.Final","5.3.31.Final","5.3.32.Final","5.3.33.Final","5.3.34.Final","5.3.35.Final","5.3.36.Final","5.3.37.Final","5.3.4.Final","5.3.5.Final","5.3.6.Final","5.3.7.Final","5.3.8.Final","5.3.9.Final"]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.39-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-eclipse-jgit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.13.5.202508271544-2.r_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-memcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-stomp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-resolver-dns-classes-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-classes-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el7eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.39-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-eclipse-jgit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.13.5.202508271544-2.r_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-memcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-stomp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-resolver-dns-classes-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-classes-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el8eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.39-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.24-4.GA_redhat_00002.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.16-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-eclipse-jgit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.13.5.202508271544-2.r_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-memcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-stomp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-resolver-dns-classes-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-classes-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.124-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el9eap"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.41-7.SP8_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.17-5.GA_redhat_00006.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.17-5.GA_redhat_00006.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.17-5.GA_redhat_00006.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.17-5.GA_redhat_00006.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.17-5.GA_redhat_00006.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-eclipse-jgit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.13.5.202508271544-1.r_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-3.SP2_redhat_00003.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-3.SP2_redhat_00003.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-3.SP2_redhat_00003.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-3.SP2_redhat_00003.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.0-2.SP1_redhat_00002.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.38-1.Final_redhat_00001.1.el7eap"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.18-19.SP17_redhat_00001.1.ep7.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.14-4.GA_redhat_00003.1.ep7.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.14-4.GA_redhat_00003.1.ep7.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.16-6.redhat_00006.1.ep7.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.16-6.redhat_00006.1.ep7.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.16-6.redhat_00006.1.ep7.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.16-6.redhat_00006.1.ep7.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.11-1.SP1_redhat_00001.1.ep7.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-4.Final_redhat_00005.1.ep7.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-4.Final_redhat_00005.1.ep7.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-4.Final_redhat_00005.1.ep7.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-4.Final_redhat_00005.1.ep7.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-hibernate-infinispan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-4.Final_redhat_00005.1.ep7.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-4.Final_redhat_00005.1.ep7.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el7","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.20-1.redhat_00001.1.el7sso"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el7","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.20-1.redhat_00001.1.el7sso"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el8","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.20-1.redhat_00001.1.el8sso"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el8","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.20-1.redhat_00001.1.el8sso"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el9","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.20-1.redhat_00001.1.el9sso"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el9","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.20-1.redhat_00001.1.el9sso"}]}],"bundled":27},{"source":"osv","ecosystem":"Root:Maven","package":"org.hibernate:hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.12.Final-aikido.1"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.org.hibernate:hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.12.Final-root.io.1"}]}]}],"products":[{"vendor":"red hat","product":"red hat amq broker 7"},{"vendor":"red hat","product":"red hat build of optaplanner 8"},{"vendor":"red hat","product":"red hat data grid 8"},{"vendor":"red hat","product":"red hat fuse 7"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 7"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 7.1 eus for rhel 7"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 7.3 eus for rhel 7"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 7.4 els on rhel 7"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 7.4 els on rhel 8"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 7.4 els on rhel 9"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 7.4.24"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 8"},{"vendor":"red hat","product":"red hat jboss enterprise application platform expansion pack"},{"vendor":"red hat","product":"red hat openshift ai (rhoai)"},{"vendor":"red hat","product":"red hat openshift dev spaces"},{"vendor":"red hat","product":"red hat process automation 7"},{"vendor":"red hat","product":"red hat satellite 6"},{"vendor":"red hat","product":"red hat single sign-on 7"},{"vendor":"red hat","product":"red hat single sign-on 7.6 for rhel 7"},{"vendor":"red hat","product":"red hat single sign-on 7.6 for rhel 8"},{"vendor":"red hat","product":"red hat single sign-on 7.6 for rhel 9"},{"vendor":"red hat","product":"red hat single sign-on 7.6.13"},{"vendor":"red hat","product":"rhel-8 based middleware containers"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:4915","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:4916","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:4917","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:4924","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6011","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6012","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:76128","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:76129","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:76130","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:76132","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:76134","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-0603","tags":["vdb-entry","x_refsource_REDHAT","advisory","web","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2427147","tags":["issue-tracking","x_refsource_REDHAT","report","web"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0603.json","tags":["x_sadp-csaf-vex","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0603","tags":["advisory"]},{"url":"https://github.com/hibernate/hibernate-orm/commit/3f820fdf16ee4d1f556bc73b259625416d703048","tags":["web"]},{"url":"https://github.com/advisories/GHSA-2p5w-cvg5-gc5c"},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","tags":["web"]},{"url":"https://catalog.redhat.com/software/containers/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/0xxx/CVE-2026-0603.json","tags":["advisory"]},{"url":"https://github.com/hibernate/hibernate-orm","tags":["package"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275287","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2313454","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2367730","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2374804","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2387221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2388252","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2392306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2408784","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-30074","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4915.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-3884","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-3884","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3884","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-7254","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-7254","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7254","tags":["advisory"]},{"url":"https://github.com/protocolbuffers/protobuf/commit/cc8b3483a5584b3301e3d43d17eb59704857ffaa","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-4949","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-4949","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-4949","tags":["advisory"]},{"url":"https://gitlab.eclipse.org/security/cve-assignement/-/issues/64","tags":["article"]},{"url":"https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/281","tags":["article"]},{"url":"https://projects.eclipse.org/projects/technology.jgit/releases/7.2.1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-9784","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-9784","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9784","tags":["advisory"]},{"url":"https://github.com/undertow-io/undertow/pull/1778","tags":["article"]},{"url":"https://github.com/undertow-io/undertow/releases/tag/2.2.38.Final","tags":["article"]},{"url":"https://issues.redhat.com/browse/UNDERTOW-2598","tags":["article"]},{"url":"https://kb.cert.org/vuls/id/767506","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-12543","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-12543","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-12543","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-48913","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-48913","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48913","tags":["advisory"]},{"url":"https://lists.apache.org/thread/f1nv488ztc0js4g5ml2v88mzkzslyh83","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-52999","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-52999","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-52999","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-core/pull/943","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-core/security/advisories/GHSA-h46c-h94j-95f3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-55163","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-55163","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-55163","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0603","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-30075","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4916.json","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-30076","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4917.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/index","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3/html/7.3.0_release_notes/index","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-31431","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6011.json","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1/html-single/installation_guide/index","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1/html-single/7.1.0_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6012.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76128.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-14813","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458640","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-14813","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14813","tags":["advisory"]},{"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%9014813","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2092","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2437296","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2092","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2092","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2440149","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2575","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2575","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3505","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458638","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3505","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3505","tags":["advisory"]},{"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%903505","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2450250","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4634","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4634","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-5588","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458634","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-5588","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5588","tags":["advisory"]},{"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905588","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-7307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2476526","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-7307","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7307","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-7507","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2464145","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-7507","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7507","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15563","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483138","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15563","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15563","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42578","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477226","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42578","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42578","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42579","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477217","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42579","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42579","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42581","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477232","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42581","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42581","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42587","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477220","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42587","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42587","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44249","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488081","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44249","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44249","tags":["advisory"]},{"url":"https://github.com/netty/netty/releases/tag/netty-4.1.135.Final","tags":["article"]},{"url":"https://github.com/netty/netty/releases/tag/netty-4.2.15.Final","tags":["article"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44893","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488383","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44893","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44893","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-45416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488391","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-45416","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45416","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-45674","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488400","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-45674","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45674","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-47691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488439","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47691","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47691","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-48043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488442","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-48043","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48043","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-48059","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488437","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-48059","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48059","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-50010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488429","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-50010","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50010","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-50193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2491999","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-50193","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50193","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/a1fa4ae4ecf5cee16da465985f135f3e81816f8c","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/3447","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3wrr-7qpf-2prh","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-54512","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492015","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-54512","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54512","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/5988","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-68494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2511026","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-68494","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68494","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-core/pull/1611","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9","tags":["article"]},{"url":"https://github.com/advisories/GHSA-72hv-8253-57qq","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-18401","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76129.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76130.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-0603","title":"Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection","description":"A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive information disclosure, such as reading system files, and allow for data manipulation or deletion within the application's database, resulting in an application level denial of service.","status":"published","published":"2026-01-23T06:31:38.975Z","modified":"2026-11-04T21:46:46.456Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high","assessor":"cna"},{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high","assessor":"adp"}],"cwes":["CWE-89","CWE-89"],"updated_at":"2026-11-04T22:39:14.734949Z"}],"euvd":[{"id":"EUVD-2026-4427","description":"A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive information disclosure, such as reading system files, and allow for data manipulation or deletion within the application's database, resulting in an application level denial of service.","status":"published","published":"2026-01-23T06:31:38Z","modified":"2026-11-04T21:46:46Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-04T23:47:19.24864Z"}],"ghsa":[{"id":"GHSA-2p5w-cvg5-gc5c","title":"Hibernate vulnerable to SQL Injection","description":"A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive information disclosure, such as reading system files, and allow for data manipulation or deletion within the application's database, resulting in an application level denial of service.","status":"published","published":"2026-01-23T09:30:28Z","modified":"2026-10-06T18:32:18Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:41:27.036917Z"}],"nvd":[{"id":"CVE-2026-0603","description":"A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive information disclosure, such as reading system files, and allow for data manipulation or deletion within the application's database, resulting in an application level denial of service.","status":"published","published":"2026-01-23T07:15:53.66Z","modified":"2026-11-04T22:17:41.653Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high","assessor":"secondary"},{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-04T23:43:38.567042Z"}],"osv":[{"id":"CVE-2026-0603","title":"Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection","description":"A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive information disclosure, such as reading system files, and allow for data manipulation or deletion within the application's database, resulting in an application level denial of service.","status":"published","published":"2026-01-23T06:31:38.975Z","modified":"2026-11-05T21:16:20.767243598Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-05T22:00:58.054534Z"},{"id":"GHSA-2p5w-cvg5-gc5c","title":"Hibernate vulnerable to SQL Injection","description":"A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive information disclosure, such as reading system files, and allow for data manipulation or deletion within the application's database, resulting in an application level denial of service.","status":"published","published":"2026-01-23T09:30:28Z","modified":"2026-10-06T18:45:07.075776439Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:46:34.700741Z"},{"id":"RHSA-2026:4915","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update","status":"published","published":"2026-03-19T10:20:30Z","modified":"2026-10-20T10:10:07Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:4916","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update","status":"published","published":"2026-03-19T10:20:31Z","modified":"2026-10-20T10:10:08Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:4917","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update","status":"published","published":"2026-03-19T10:20:31Z","modified":"2026-10-20T10:10:09Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:6011","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.17 security update","status":"published","published":"2026-03-31T10:12:08Z","modified":"2026-10-17T10:16:35Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:6012","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.14 security update","status":"published","published":"2026-03-31T10:12:09Z","modified":"2026-10-15T10:22:44Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:76128","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update on RHEL 7","status":"published","published":"2026-10-07T10:19:58Z","modified":"2026-10-20T10:15:52Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:76129","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update on RHEL 8","status":"published","published":"2026-10-07T10:19:59Z","modified":"2026-10-20T10:15:53Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:76130","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update on RHEL 9","status":"published","published":"2026-10-07T10:19:59Z","modified":"2026-10-20T10:15:54Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"CLSA-2026-1769731733","title":"TuxCare security update for org.hibernate:hibernate-core (1 CVE)","description":"TuxCare rebuilt org.hibernate:hibernate-core to address 1 CVE. Fixed in 5.6.15.Final-tuxcare.3.","status":"published","published":"2026-08-04T14:52:07Z","modified":"2026-11-02T19:45:12.249372151Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1778892379","title":"TuxCare security update for org.hibernate:hibernate-core (1 CVE)","description":"TuxCare rebuilt org.hibernate:hibernate-core to address 1 CVE. Fixed in 5.4.33.Final-tuxcare.1.","status":"published","published":"2026-08-04T14:52:31Z","modified":"2026-11-02T19:45:29.283892228Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1779151631","title":"TuxCare security update for org.hibernate:hibernate-core (1 CVE)","description":"TuxCare rebuilt org.hibernate:hibernate-core to address 1 CVE. Fixed in 5.5.9.Final-tuxcare.1.","status":"published","published":"2026-08-04T14:52:32Z","modified":"2026-11-02T19:45:30.800117237Z","updated_at":"2026-11-02T20:30:18.404297Z"},{"id":"CLSA-2026-1779238047","title":"TuxCare security update for org.hibernate:hibernate-core (1 CVE)","description":"TuxCare rebuilt org.hibernate:hibernate-core to address 1 CVE. Fixed in 5.5.6.Final-tuxcare.1.","status":"published","published":"2026-08-04T14:52:32Z","modified":"2026-11-02T19:45:33.220034862Z","updated_at":"2026-11-02T20:30:18.404297Z"},{"id":"CLSA-2026-1783299710","title":"TuxCare security update for org.hibernate:hibernate-core (1 CVE)","description":"TuxCare rebuilt org.hibernate:hibernate-core to address 1 CVE. Fixed in 5.4.31.Final-tuxcare.2.","status":"published","published":"2026-08-04T14:52:42Z","modified":"2026-11-02T19:45:39.592344962Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1783386136","title":"TuxCare security update for org.hibernate:hibernate-core (1 CVE)","description":"TuxCare rebuilt org.hibernate:hibernate-core to address 1 CVE. Fixed in 5.4.30.Final-tuxcare.2.","status":"published","published":"2026-08-04T14:52:42Z","modified":"2026-11-02T19:45:42.36920844Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"ROOT-APP-MAVEN-CVE-2026-0603","title":"CVE-2026-0603 in org.hibernate:hibernate-core - Patched by Root","description":"Root has patched CVE-2026-0603 in the org.hibernate:hibernate-core package for Root:Maven. Multiple fixed versions available.","status":"published","published":"2026-10-01T06:25:27Z","modified":"2026-10-01T07:15:10.376288905Z","updated_at":"2026-11-02T15:53:27.066589Z"}]}}