slf4j vulnerabilities (AlmaLinux)
31 vulnerabilities.
-
slf4jAlmaLinux jackson-core: Delayed maxNameLength enforcement for char-backed input (ReaderBasedJsonParser) allows memory-exhaustion denial of service 7.5 High -
slf4jAlmaLinux jackson-databind: quadratic forward-reference completion in Collection and Map deserializers 7.5 High -
slf4jAlmaLinux jackson-core: UTF8DataInputJsonParser._reportInvalidToken() does not honor maxErrorTokenLength, allowing unbounded StringBuilder growth 7.5 High -
slf4jAlmaLinux jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray) 8.1 High -
slf4jAlmaLinux Plexus-Utils has a Directory Traversal vulnerability in its extractFile method 8.8 High -
slf4jAlmaLinux jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data 8.7 High -
slf4jAlmaLinux Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default 8.8 High -
slf4jAlmaLinux Commandline class shell injection vulnerabilities 9.8 Critical -
slf4jAlmaLinux Deeply nested json in jackson-databind 7.5 High -
slf4jAlmaLinux maven:3.6 bug fix and enhancement update No score -
slf4jAlmaLinux maven:3.6 bug fix and enhancement update No score -
slf4jAlmaLinux Cross-site scripting in Apache HttpClient 5.3 Medium -
slf4jAlmaLinux new module: maven:3.6 No score -
slf4jAlmaLinux jackson-databind mishandles the interaction between serialization gadgets and typing 8.8 High -
slf4jAlmaLinux jackson-databind mishandles the interaction between serialization gadgets and typing 8.8 High -
slf4jAlmaLinux jackson-databind mishandles the interaction between serialization gadgets and typing 9.8 Critical -
slf4jAlmaLinux jackson-databind mishandles the interaction between serialization gadgets and typing 9.8 Critical -
slf4jAlmaLinux jackson-databind mishandles the interaction between serialization gadgets and typing 9.8 Critical -
slf4jAlmaLinux Deserialization of Untrusted Data in jackson-databind 9.8 Critical -
slf4jAlmaLinux Deserialization of Untrusted Data in jackson-databind 9.8 Critical -
slf4jAlmaLinux jackson-databind polymorphic typing issue 9.8 Critical -
slf4jAlmaLinux jackson-databind polymorphic typing issue 9.8 Critical -
slf4jAlmaLinux Polymorphic Typing in FasterXML jackson-databind 9.8 Critical -
slf4jAlmaLinux Polymorphic Typing issue in FasterXML jackson-databind 9.8 Critical -
slf4jAlmaLinux Polymorphic Typing issue in FasterXML jackson-databind 9.8 Critical -
slf4jAlmaLinux Insecure Deserialization in Apache Commons Beanutils 7.3 High -
slf4jAlmaLinux Deserialization of Untrusted Data in FasterXML jackson-databind 5.9 Medium -
slf4jAlmaLinux Apache Tomcat Open Redirect vulnerability 4.3 Medium -
slf4jAlmaLinux Apache Tomcat Race Condition vulnerability 5.9 Medium -
slf4jAlmaLinux The host name verification missing in Apache Tomcat 7.5 High -
slf4jAlmaLinux The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins 9.8 Critical