Mchange C3p0 vulnerabilities

• mchange c3p0, fedoraproject fedora, oracle communications ip service activator +8 more +10 more Billion laughs attack in c3p0 CVE-2019-5427 Public exploitFix available 7.5 HighApril 22, 2019
• mchange c3p0, debian linux +1 more XML External Entity Reference in mchange:c3p0 CVE-2018-20433 Public exploitFix available 9.8 CriticalDecember 24, 2018