Search for packages
| purl | pkg:rpm/redhat/eap7-jackson-module-jaxb-annotations@2.8.11-2.redhat_1.1.ep7?arch=el6 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-7ec2-9kmy-77eh
Aliases: CVE-2018-1114 GHSA-gjjx-gqm4-wcgm |
It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak. | There are no reported fixed by versions. |
|
VCID-x6g1-qw1v-jbas
Aliases: CVE-2018-7489 GHSA-cggj-fvv3-cqwv |
FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in the classpath. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:26:00.963473+00:00 | RedHat Importer | Affected by | VCID-x6g1-qw1v-jbas | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7489.json | 38.0.0 |
| 2026-04-01T14:25:18.071188+00:00 | RedHat Importer | Affected by | VCID-7ec2-9kmy-77eh | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1114.json | 38.0.0 |