Search for packages
| purl | pkg:rpm/redhat/vdsm@4.50.3.6-1?arch=el8ev |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-netd-rr9e-wbg5
Aliases: CVE-2022-45047 GHSA-fhw8-8j55-vwgq |
Unsafe deserialization in Apache MINA SSHD Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys of an SSH server. Until version 2.1.0, the code affected by this vulnerability appeared in `org.apache.sshd:sshd-core`. Version 2.1.0 contains a [commit](https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0) where the code was moved to the package `org.apache.sshd:sshd-common`, which did not exist until version 2.1.0. | There are no reported fixed by versions. |
|
VCID-uu1u-tqdx-w7gp
Aliases: CVE-2021-30483 GHSA-fgxq-p49f-qw99 |
Path Traversal isomorphic-git allows Directory Traversal via a crafted repository. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:01:43.028777+00:00 | RedHat Importer | Affected by | VCID-uu1u-tqdx-w7gp | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-30483.json | 38.0.0 |
| 2026-04-01T13:56:18.241370+00:00 | RedHat Importer | Affected by | VCID-netd-rr9e-wbg5 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-45047.json | 38.0.0 |