Search for packages
| purl | pkg:rpm/redhat/rubygem-foreman_webhooks@3.0.5-1.1?arch=el8sat |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2cup-9gdn-yyhk
Aliases: CVE-2021-46877 GHSA-3x8x-79m2-3w2w |
jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization. | There are no reported fixed by versions. |
|
VCID-9h46-72hw-bkcr
Aliases: CVE-2022-42003 GHSA-jjjh-jjxp-wpff |
Multiple vulnerabilities have been found in FasterXML jackson-databind, the worst of which could result in denial of service. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T13:56:57.702773+00:00 | RedHat Importer | Affected by | VCID-9h46-72hw-bkcr | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-42003.json | 38.0.0 |
| 2026-04-01T13:54:51.938467+00:00 | RedHat Importer | Affected by | VCID-2cup-9gdn-yyhk | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-46877.json | 38.0.0 |