Current status
In Process · High impact · since 2026-07-07
Service modelSaaS
MarketplaceRev5 · source: marketplace
Security posture
52 critical
1 high
· 64 correlated CVEs
CMMC DOMAINS ADDRESSED
STATUS TIMELINE · SCD2
| STATUS | FROM | TO |
|---|---|---|
| In Process | 2026-07-07 | current |
AUTHORIZATIONS
No authorizations recorded.
EXPOSED CVEs · CORRELATED TO THIS PRODUCT
all exposures
| SEVERITY | CVE | TITLE |
|---|---|---|
| CRITICAL | CVE-2021-32292 | CVE-2021-32292: An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) thro |
| CRITICAL | CVE-2023-28531 | CVE-2023-28531: ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the inten |
| CRITICAL | CVE-2023-23914 | CVE-2023-23914: A cleartext transmission of sensitive information vulnerability exists in curl < |
| CRITICAL | CVE-2022-32221 | CVE-2022-32221: When doing HTTP(S) transfers, libcurl might erroneously use the read callback (` |
| CRITICAL | CVE-2020-35527 | CVE-2020-35527: In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE f |
| CRITICAL | CVE-2022-37434 | CVE-2022-37434: zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in infl |
| CRITICAL | CVE-2022-32207 | CVE-2022-32207: When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes |
| CRITICAL | CVE-2022-2274 | CVE-2022-2274: The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for |
| CRITICAL | CVE-2022-29155 | CVE-2022-29155: In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerabil |
| CRITICAL | CVE-2022-23852 | CVE-2022-23852: Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer |
| CRITICAL | CVE-2021-44228 | CVE-2021-44228: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12 |
| CRITICAL | CVE-2021-22945 | CVE-2021-22945: When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some |
| CRITICAL | CVE-2021-40438 | CVE-2021-40438: A crafted request uri-path can cause mod_proxy to forward the request to an orig |
| CRITICAL | CVE-2021-3711 | CVE-2021-3711: In order to decrypt SM2 encrypted data an application is expected to call the AP |
| CRITICAL | CVE-2021-35942 | CVE-2021-35942: The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or |
| CRITICAL | CVE-2021-3520 | CVE-2021-3520: There's a flaw in lz4. An attacker who submits a crafted file to an application |
| CRITICAL | CVE-2021-33574 | CVE-2021-33574: The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 h |
| MEDIUM | CVE-2021-23383 | CVE-2021-23383: The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when s |
| MEDIUM | CVE-2021-21342 | CVE-2021-21342: XStream is a Java library to serialize objects to XML and back again. In XStream |
| MEDIUM | CVE-2021-21344 | CVE-2021-21344: XStream is a Java library to serialize objects to XML and back again. In XStream |
| MEDIUM | CVE-2021-21345 | CVE-2021-21345: XStream is a Java library to serialize objects to XML and back again. In XStream |
| MEDIUM | CVE-2021-21346 | CVE-2021-21346: XStream is a Java library to serialize objects to XML and back again. In XStream |
| MEDIUM | CVE-2021-21347 | CVE-2021-21347: XStream is a Java library to serialize objects to XML and back again. In XStream |
| MEDIUM | CVE-2021-21350 | CVE-2021-21350: XStream is a Java library to serialize objects to XML and back again. In XStream |
| MEDIUM | CVE-2021-21351 | CVE-2021-21351: XStream is a Java library to serialize objects to XML and back again. In XStream |
| CRITICAL | CVE-2021-20231 | CVE-2021-20231: A flaw was found in gnutls. A use after free issue in client sending key_share e |
| CRITICAL | CVE-2021-3177 | CVE-2021-3177: Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callpro |
| CRITICAL | CVE-2020-15801 | CVE-2020-15801: In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ign |
| CRITICAL | CVE-2020-10683 | CVE-2020-10683: dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Enti |
| CRITICAL | CVE-2020-11656 | CVE-2020-11656: In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, a |
| CRITICAL | CVE-2019-14893 | CVE-2019-14893: A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.1 |
| CRITICAL | CVE-2020-9546 | CVE-2020-9546: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee |
| CRITICAL | CVE-2020-9547 | CVE-2020-9547: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee |
| CRITICAL | CVE-2020-9548 | CVE-2020-9548: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee |
| CRITICAL | CVE-2020-1938 | CVE-2020-1938: When using the Apache JServ Protocol (AJP), care must be taken when trusting inc |
| CRITICAL | CVE-2020-8840 | CVE-2020-8840: FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JN |
| CRITICAL | CVE-2019-20330 | CVE-2019-20330: FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache bloc |
| CRITICAL | CVE-2019-19646 | CVE-2019-19646: pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAG |
| CRITICAL | CVE-2019-19317 | CVE-2019-19317: lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in |
| CRITICAL | CVE-2019-17531 | CVE-2019-17531: A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 th |
| CRITICAL | CVE-2019-17267 | CVE-2019-17267: A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2 |
| CRITICAL | CVE-2019-16942 | CVE-2019-16942: A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 th |
| CRITICAL | CVE-2019-16943 | CVE-2019-16943: A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 th |
| CRITICAL | CVE-2019-5481 | CVE-2019-5481: Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3. |
| CRITICAL | CVE-2019-5482 | CVE-2019-5482: Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. |
| CRITICAL | CVE-2019-14540 | CVE-2019-14540: A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2 |
| CRITICAL | CVE-2019-16335 | CVE-2019-16335: A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2 |
| CRITICAL | CVE-2019-14379 | CVE-2019-14379: SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles de |
| CRITICAL | CVE-2019-10160 | CVE-2019-10160: A security regression of CVE-2019-9636 was discovered in python since commit d53 |
| MEDIUM | CVE-2019-3860 | CVE-2019-3860: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFT |
| MEDIUM | CVE-2019-3861 | CVE-2019-3861: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH |
| MEDIUM | CVE-2019-3858 | CVE-2019-3858: An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a special |
| CRITICAL | CVE-2019-3859 | CVE-2019-3859: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh |
| HIGH | CVE-2019-3862 | CVE-2019-3862: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH |
| CRITICAL | CVE-2019-9169 | CVE-2019-9169: In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in pos |
| CRITICAL | CVE-2018-14718 | CVE-2018-14718: FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to exec |
| CRITICAL | CVE-2018-14719 | CVE-2018-14719: FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to exec |
| CRITICAL | CVE-2018-8014 | CVE-2018-8014: The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to |
| CRITICAL | CVE-2017-15095 | CVE-2017-15095: A deserialization flaw was discovered in the jackson-databind in versions before |
| CRITICAL | CVE-2017-7525 | CVE-2017-7525: A deserialization flaw was discovered in the jackson-databind, versions before 2 |
| CRITICAL | CVE-2016-5018 | CVE-2016-5018: In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0. |
| CRITICAL | CVE-2016-9841 | CVE-2016-9841: inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecif |
| CRITICAL | CVE-2017-5645 | CVE-2017-5645: In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket |
| CRITICAL | CVE-2016-8735 | CVE-2016-8735: Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7 |