Upgrade RHEL:8 java-11-openjdk-src to version 1:11.0.13.0.8-1.el8_2 or higher. This issue was patched in RHSA-2021:3887 .

gitness vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the gitness package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
L GHSA-hw49-2p59-3mhj	<3.0.0_beta6-r5
L CVE-2024-24791	<3.0.0_beta6-r5
L GHSA-49gw-vxvf-fc2g	<3.0.0_beta6-r4
C CVE-2024-24790	<3.0.0_beta6-r4
L GHSA-236w-p7wf-5ph8	<3.0.0_beta6-r4
M CVE-2024-24789	<3.0.0_beta6-r4
L CVE-2024-24787	<3.0.0_beta6-r3
L GHSA-5fq7-4mxc-535h	<3.0.0_beta6-r3
L CVE-2024-24788	<3.0.0_beta6-r3
L GHSA-2jwv-jmq4-4j3r	<3.0.0_beta6-r3
L GHSA-4v7x-pqxf-cx7m	<3.0.0_beta6-r1
L CVE-2023-45288	<3.0.0_beta6-r1
L GHSA-8r3f-844c-mc37	<3.0.0_beta6-r0
L CVE-2024-24786	<3.0.0_beta6-r0
L CVE-2024-24783	<3.0.0_beta5-r1
L CVE-2024-24784	<3.0.0_beta5-r1
L GHSA-32ch-6x54-q4h9	<3.0.0_beta5-r1
L GHSA-j6m3-gc37-6r6q	<3.0.0_beta5-r1
L GHSA-rr6r-cfgf-gc6h	<3.0.0_beta5-r1
L GHSA-fgq5-q76c-gx78	<3.0.0_beta5-r1
L CVE-2024-24785	<3.0.0_beta5-r1
L CVE-2023-45289	<3.0.0_beta5-r1
L CVE-2023-45290	<3.0.0_beta5-r1
L GHSA-3q2c-pvp5-3cqp	<3.0.0_beta5-r1
H Improper Authentication	<3.0.0_beta5-r0
L GHSA-mw99-9chc-xw7r	<3.0.0_beta5-r0
H CVE-2023-49568	<3.0.0_beta5-r0
L GHSA-449p-3h89-pw88	<3.0.0_beta5-r0
C Directory Traversal	<3.0.0_beta5-r0
L GHSA-9763-4f94-gfch	<3.0.0_beta5-r0
L GHSA-w73w-5m7g-f7qc	<3.0.0_beta5-r0
L GHSA-45x7-px36-x8w8	<3.0.0_beta2-r2
M Improper Validation of Integrity Check Value	<3.0.0_beta2-r2
L GHSA-7ww5-4wqc-m92c	<3.0.0_beta2-r2
L GHSA-2wrh-6pvc-2jm9	<3.0.0_beta2-r0
L GHSA-qppj-fm5r-hxr3	<3.0.0_beta2-r2
L GHSA-4374-p667-p6c8	<3.0.0_beta2-r0
M Cross-site Scripting (XSS)	<3.0.0_beta2-r0
H Allocation of Resources Without Limits or Throttling	<3.0.0_beta2-r0
H CVE-2023-44487	<3.0.0_beta2-r2