The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade prometheus-jmx-exporter-openjdk8Upgrade prometheus-jmx-exporter-openjdk11Upgrade prometheus-jmx-exporter-openjdk17Upgrade prometheus-jmx-exporter | Dec 19, 2022 | Dec 1, 2022 |
| Atlassian Bitbucket | — | Upgrade Atlassian Bitbucket to the latest version | Nov 14, 2024 | Dec 6, 2023 |
| Atlassian Jira | — | Upgrade to the latest version of Atlassian JIRA | Apr 21, 2026 | Dec 6, 2023 |
| Centos_linux | — | Upgrade rubygem-little-pluggerUpgrade rubygem-oauth-ttyUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-highlineUpgrade rubygem-hammer_cliUpgrade rubygem-rest-clientUpgrade rubygem-unicode-display_widthUpgrade rubygem-snaky_hashUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unicodeUpgrade rubygem-jwtUpgrade rubygem-unfUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-clampUpgrade rubygem-netrcUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-gssapiUpgrade satellite-maintainUpgrade rubygem-oauthUpgrade prometheus-jmx-exporter-openjdk17Upgrade rubygem-mime-types-dataUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unicode-debuginfoUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_openscapUpgrade prometheus-jmx-exporterUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-mime-typesUpgrade rubygem-hashieUpgrade rubygem-apipie-bindingsUpgrade rubygem-ffi-debuginfoUpgrade satellite-cliUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-ffiUpgrade rubygem-fast_gettextUpgrade python39-pulp_manifestUpgrade prometheus-jmx-exporter-openjdk8Upgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade prometheus-jmx-exporter-openjdk11Upgrade satellite-cloneUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-amazing_printUpgrade rubygem-powerbarUpgrade rubygem-localeUpgrade rubygem-http-cookie | Dec 16, 2022 | Dec 1, 2022 |
| Debian | — | No solution exists | May 15, 2025 | Dec 1, 2022 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Dell Powerstore Dsa2025182 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Apr 17, 2025 |
| Oracle_linux | — | Upgrade prometheus-jmx-exporter-openjdk17Upgrade prometheus-jmx-exporter-openjdk8Upgrade prometheus-jmx-exporterUpgrade prometheus-jmx-exporter-openjdk11 | Dec 16, 2022 | Oct 13, 2022 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Oct 13, 2022 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Dec 1, 2022 |
| Redhat Openshift | — | Upgrade jenkins-2-plugins | Feb 16, 2023 | Oct 13, 2022 |
| Redhat_linux | — | Upgrade prometheus-jmx-exporterUpgrade prometheus-jmx-exporter-openjdk17No solution existsUpgrade prometheus-jmx-exporter-openjdk8Upgrade prometheus-jmx-exporter-openjdk11 | Dec 16, 2022 | Dec 1, 2022 |
| Rocky_linux | — | Upgrade libdb-cxx-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxxUpgrade libdb-debugsource | Mar 12, 2024 | Dec 1, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub