Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/eap7-apache-commons-io@2.10.0-1.redhat_00001.1?arch=el9eap
purl pkg:rpm/redhat/eap7-apache-commons-io@2.10.0-1.redhat_00001.1?arch=el9eap
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.5
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-h4rg-c4rj-6kdj
Aliases:
CVE-2022-24823
GHSA-269q-hmxg-m83q
This advisory has been marked as False Positive and moved to `netty-common`. There are no reported fixed by versions.
VCID-nfjb-tkzv-fudg
Aliases:
CVE-2022-25647
GHSA-4jrv-ppp4-jm57
The package com.google.code.gson:gson before 2.8.9 is vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks. There are no reported fixed by versions.
VCID-turp-dju7-c7fx
Aliases:
CVE-2021-44906
GHSA-xvch-5gv4-984h
Prototype Pollution in minimist Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95). There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:59:16.392126+00:00 RedHat Importer Affected by VCID-turp-dju7-c7fx https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-44906.json 38.0.0
2026-04-01T13:58:43.063508+00:00 RedHat Importer Affected by VCID-nfjb-tkzv-fudg https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-25647.json 38.0.0
2026-04-01T13:58:33.086788+00:00 RedHat Importer Affected by VCID-h4rg-c4rj-6kdj https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-24823.json 38.0.0