MediumFix available
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.11 security update
Type: advisorySources: OSV
- Products
- eap8-angus-activation, eap8-apache-commons-io, eap8-atinject, eap8-bouncycastle, eap8-bouncycastle-jmail, eap8-bouncycastle-pg, eap8-bouncycastle-pkix, eap8-bouncycastle-prov, eap8-bouncycastle-util, eap8-eap-product-conf-parent, eap8-eap-product-conf-wildfly-ee-feature-pack, eap8-eclipse-jgit, eap8-hal-console, eap8-hibernate, eap8-hibernate-core, eap8-hibernate-envers, eap8-hibernate-validator, eap8-hibernate-validator-cdi, eap8-httpcomponents-client, eap8-httpcomponents-core, eap8-installation-manager-api, eap8-istack-commons-runtime, eap8-istack-commons-tools, eap8-jakarta-activation, eap8-jakarta-annotation-api, eap8-jakarta-enterprise-concurrent, eap8-jakarta-interceptor-api, eap8-jakarta-mail, eap8-jakarta-servlet-api, eap8-jakarta-validation-api, eap8-jakarta-ws-rs-api, eap8-jakarta-xml-bind-api, eap8-jboss-el-api_5.0_spec, eap8-jbossws-cxf, eap8-jctools, eap8-jctools-core, eap8-parsson, eap8-reactive-streams, eap8-reactivex-rxjava2, eap8-saaj-impl, eap8-stax-ex, eap8-stax2-api, eap8-sun-istack-commons, eap8-wildfly, eap8-wildfly-elytron, eap8-wildfly-elytron-tool, eap8-wildfly-java-jdk11, eap8-wildfly-java-jdk17, eap8-wildfly-java-jdk21, eap8-wildfly-modules, eap8-yasson
- Affected versions
- Not specified
- Fixed versions
- 0:1.0.3-1.Final_redhat_00001.1.el9eap, 0:1.0.4-4.redhat_00005.1.el9eap, 0:1.1.7-3.redhat_00003.1.el9eap, 0:1.82.0-1.redhat_00001.1.el9eap, 0:2.0.1-5.redhat_00007.1.el9eap, 0:2.0.2-2.redhat_00002.1.el9eap, 0:2.1.0-3.redhat_00003.1.el9eap, 0:2.1.0-5.redhat_00003.1.el9eap, 0:2.1.1-5.redhat_00005.1.el9eap, 0:2.1.3-2.redhat_00002.1.el9eap, 0:2.1.3-3.redhat_00003.1.el9eap, 0:2.16.1-2.redhat_00002.1.el9eap, 0:2.2.12-1.Final_redhat_00002.1.el9eap, 0:2.2.21-4.redhat_00003.1.el9eap, 0:3.0.2-1.redhat_00001.1.el9eap, 0:3.0.2-3.redhat_00006.1.el9eap, 0:3.0.4-2.redhat_00002.1.el9eap, 0:3.0.4-2.redhat_00004.1.el9eap, 0:3.1.0-5.redhat_00003.1.el9eap, 0:3.6.27-1.Final_redhat_00001.1.el9eap, 0:4.0.2-1.Final_redhat_00001.1.el9eap, 0:4.0.2-2.redhat_00003.1.el9eap, 0:4.0.5-3.redhat_00002.1.el9eap, 0:4.1.2-2.redhat_00003.1.el9eap, 0:4.2.2-2.redhat_00003.1.el9eap, 0:4.4.16-6.redhat_00011.1.el9eap, 0:4.5.14-5.redhat_00016.1.el9eap, 0:6.0.0-6.redhat_00007.1.el9eap, 0:6.10.1.202505221210-1.r_redhat_00002.1.el9eap, 0:6.2.46-1.Final_redhat_00001.1.el9eap, 0:7.3.6-1.Final_redhat_00001.1.el9eap, 0:8.0.11-1.GA_redhat_00002.1.el9eap, 0:8.0.2-1.Final_redhat_00001.1.el9eap, 0:800.11.0-1.GA_redhat_00001.1.el9eap
- CVEs
- CVE-2025-4949
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 00:17 UTC · Revision 1
Source evidence
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.11 security update
core-osv · Original sourcePublished 5 Dec 2025, 10:08 UTC
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.11 security update
osv:RHSA-2025:22775
eap8-angus-activation
Fixed versions: 0:2.0.2-2.redhat_00002.1.el9eap
eap8-apache-commons-io
Fixed versions: 0:2.16.1-2.redhat_00002.1.el9eap
eap8-atinject
Fixed versions: 0:2.0.1-5.redhat_00007.1.el9eap
eap8-bouncycastle
Fixed versions: 0:1.82.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-jmail
Fixed versions: 0:1.82.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-pg
Fixed versions: 0:1.82.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-pkix
Fixed versions: 0:1.82.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-prov
Fixed versions: 0:1.82.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-util
Fixed versions: 0:1.82.0-1.redhat_00001.1.el9eap
eap8-eap-product-conf-parent
Fixed versions: 0:800.11.0-1.GA_redhat_00001.1.el9eap
eap8-eap-product-conf-wildfly-ee-feature-pack
Fixed versions: 0:800.11.0-1.GA_redhat_00001.1.el9eap
eap8-eclipse-jgit
Fixed versions: 0:6.10.1.202505221210-1.r_redhat_00002.1.el9eap
eap8-hal-console
Fixed versions: 0:3.6.27-1.Final_redhat_00001.1.el9eap
eap8-hibernate
Fixed versions: 0:6.2.46-1.Final_redhat_00001.1.el9eap
eap8-hibernate-core
Fixed versions: 0:6.2.46-1.Final_redhat_00001.1.el9eap
eap8-hibernate-envers
Fixed versions: 0:6.2.46-1.Final_redhat_00001.1.el9eap
eap8-hibernate-validator
Fixed versions: 0:8.0.2-1.Final_redhat_00001.1.el9eap
eap8-hibernate-validator-cdi
Fixed versions: 0:8.0.2-1.Final_redhat_00001.1.el9eap
eap8-httpcomponents-client
Fixed versions: 0:4.5.14-5.redhat_00016.1.el9eap
eap8-httpcomponents-core
Fixed versions: 0:4.4.16-6.redhat_00011.1.el9eap
eap8-installation-manager-api
Fixed versions: 0:1.0.3-1.Final_redhat_00001.1.el9eap
eap8-istack-commons-runtime
Fixed versions: 0:4.1.2-2.redhat_00003.1.el9eap
eap8-istack-commons-tools
Fixed versions: 0:4.1.2-2.redhat_00003.1.el9eap
eap8-jakarta-activation
Fixed versions: 0:2.1.3-2.redhat_00002.1.el9eap
eap8-jakarta-annotation-api
Fixed versions: 0:2.1.1-5.redhat_00005.1.el9eap
eap8-jakarta-enterprise-concurrent
Fixed versions: 0:3.0.2-1.redhat_00001.1.el9eap
eap8-jakarta-interceptor-api
Fixed versions: 0:2.1.0-5.redhat_00003.1.el9eap
eap8-jakarta-mail
Fixed versions: 0:2.1.3-3.redhat_00003.1.el9eap
eap8-jakarta-servlet-api
Fixed versions: 0:6.0.0-6.redhat_00007.1.el9eap
eap8-jakarta-validation-api
Fixed versions: 0:3.0.2-3.redhat_00006.1.el9eap
eap8-jakarta-ws-rs-api
Fixed versions: 0:3.1.0-5.redhat_00003.1.el9eap
eap8-jakarta-xml-bind-api
Fixed versions: 0:4.0.2-2.redhat_00003.1.el9eap
eap8-jboss-el-api_5.0_spec
Fixed versions: 0:4.0.2-1.Final_redhat_00001.1.el9eap
eap8-jbossws-cxf
Fixed versions: 0:7.3.6-1.Final_redhat_00001.1.el9eap
eap8-jctools
Fixed versions: 0:4.0.5-3.redhat_00002.1.el9eap
eap8-jctools-core
Fixed versions: 0:4.0.5-3.redhat_00002.1.el9eap
eap8-parsson
Fixed versions: 0:1.1.7-3.redhat_00003.1.el9eap
eap8-reactive-streams
Fixed versions: 0:1.0.4-4.redhat_00005.1.el9eap
eap8-reactivex-rxjava2
Fixed versions: 0:2.2.21-4.redhat_00003.1.el9eap
eap8-saaj-impl
Fixed versions: 0:3.0.4-2.redhat_00002.1.el9eap
eap8-stax-ex
Fixed versions: 0:2.1.0-3.redhat_00003.1.el9eap
eap8-stax2-api
Fixed versions: 0:4.2.2-2.redhat_00003.1.el9eap
eap8-sun-istack-commons
Fixed versions: 0:4.1.2-2.redhat_00003.1.el9eap
eap8-wildfly
Fixed versions: 0:8.0.11-1.GA_redhat_00002.1.el9eap
eap8-wildfly-elytron
Fixed versions: 0:2.2.12-1.Final_redhat_00002.1.el9eap
eap8-wildfly-elytron-tool
Fixed versions: 0:2.2.12-1.Final_redhat_00002.1.el9eap
eap8-wildfly-java-jdk11
Fixed versions: 0:8.0.11-1.GA_redhat_00002.1.el9eap
eap8-wildfly-java-jdk17
Fixed versions: 0:8.0.11-1.GA_redhat_00002.1.el9eap
eap8-wildfly-java-jdk21
Fixed versions: 0:8.0.11-1.GA_redhat_00002.1.el9eap
eap8-wildfly-modules
Fixed versions: 0:8.0.11-1.GA_redhat_00002.1.el9eap
eap8-yasson
Fixed versions: 0:3.0.4-2.redhat_00004.1.el9eap
Complete source record
{
"id": "31cbee9608166e460b4b1cf65c63ce1e8f59c9b3f4bf48c5dba06691cf702306",
"url": "https://osv.dev/vulnerability/RHSA-2025%3A22775",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.11 security update",
"summary": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.11 security update",
"evidence": "osv:RHSA-2025:22775",
"products": [
{
"name": {
"value": "eap8-angus-activation",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.0.2-2.redhat_00002.1.el9eap",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-apache-commons-io",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.16.1-2.redhat_00002.1.el9eap",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-atinject",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.0.1-5.redhat_00007.1.el9eap",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-bouncycastle",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.82.0-1.redhat_00001.1.el9eap",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-bouncycastle-jmail",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.82.0-1.redhat_00001.1.el9eap",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-bouncycastle-pg",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.82.0-1.redhat_00001.1.el9eap",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-bouncycastle-pkix",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.82.0-1.redhat_00001.1.el9eap",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-bouncycastle-prov",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.82.0-1.redhat_00001.1.el9eap",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-bouncycastle-util",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.82.0-1.redhat_00001.1.el9eap",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-eap-product-conf-parent",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:800.11.0-1.GA_redhat_00001.1.el9eap",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-eap-product-conf-wildfly-ee-feature-pack",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:800.11.0-1.GA_redhat_00001.1.el9eap",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-eclipse-jgit",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:6.10.1.202505221210-1.r_redhat_00002.1.el9eap",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-hal-console",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.6.27-1.Final_redhat_00001.1.el9eap",
"evidence": "/affected/12/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-hibernate",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:6.2.46-1.Final_redhat_00001.1.el9eap",
"evidence": "/affected/13/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-hibernate-core",
"evidence": "/affected/14/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:6.2.46-1.Final_redhat_00001.1.el9eap",
"evidence": "/affected/14/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-hibernate-envers",
"evidence": "/affected/15/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:6.2.46-1.Final_redhat_00001.1.el9eap",
"evidence": "/affected/15/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-hibernate-validator",
"evidence": "/affected/16/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:8.0.2-1.Final_redhat_00001.1.el9eap",
"evidence": "/affected/16/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-hibernate-validator-cdi",
"evidence": "/affected/17/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:8.0.2-1.Final_redhat_00001.1.el9eap",
"evidence": "/affected/17/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-httpcomponents-client",
"evidence": "/affected/18/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.5.14-5.redhat_00016.1.el9eap",
"evidence": "/affected/18/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-httpcomponents-core",
"evidence": "/affected/19/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.4.16-6.redhat_00011.1.el9eap",
"evidence": "/affected/19/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-installation-manager-api",
"evidence": "/affected/20/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.0.3-1.Final_redhat_00001.1.el9eap",
"evidence": "/affected/20/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-istack-commons-runtime",
"evidence": "/affected/21/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.1.2-2.redhat_00003.1.el9eap",
"evidence": "/affected/21/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-istack-commons-tools",
"evidence": "/affected/22/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.1.2-2.redhat_00003.1.el9eap",
"evidence": "/affected/22/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-jakarta-activation",
"evidence": "/affected/23/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.1.3-2.redhat_00002.1.el9eap",
"evidence": "/affected/23/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-jakarta-annotation-api",
"evidence": "/affected/24/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.1.1-5.redhat_00005.1.el9eap",
"evidence": "/affected/24/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-jakarta-enterprise-concurrent",
"evidence": "/affected/25/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.0.2-1.redhat_00001.1.el9eap",
"evidence": "/affected/25/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-jakarta-interceptor-api",
"evidence": "/affected/26/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.1.0-5.redhat_00003.1.el9eap",
"evidence": "/affected/26/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-jakarta-mail",
"evidence": "/affected/27/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.1.3-3.redhat_00003.1.el9eap",
"evidence": "/affected/27/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-jakarta-servlet-api",
"evidence": "/affected/28/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:6.0.0-6.redhat_00007.1.el9eap",
"evidence": "/affected/28/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-jakarta-validation-api",
"evidence": "/affected/29/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.0.2-3.redhat_00006.1.el9eap",
"evidence": "/affected/29/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-jakarta-ws-rs-api",
"evidence": "/affected/30/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.1.0-5.redhat_00003.1.el9eap",
"evidence": "/affected/30/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-jakarta-xml-bind-api",
"evidence": "/affected/31/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.0.2-2.redhat_00003.1.el9eap",
"evidence": "/affected/31/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-jboss-el-api_5.0_spec",
"evidence": "/affected/32/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.0.2-1.Final_redhat_00001.1.el9eap",
"evidence": "/affected/32/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-jbossws-cxf",
"evidence": "/affected/33/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:7.3.6-1.Final_redhat_00001.1.el9eap",
"evidence": "/affected/33/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-jctools",
"evidence": "/affected/34/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.0.5-3.redhat_00002.1.el9eap",
"evidence": "/affected/34/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-jctools-core",
"evidence": "/affected/35/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.0.5-3.redhat_00002.1.el9eap",
"evidence": "/affected/35/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-parsson",
"evidence": "/affected/36/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.1.7-3.redhat_00003.1.el9eap",
"evidence": "/affected/36/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-reactive-streams",
"evidence": "/affected/37/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.0.4-4.redhat_00005.1.el9eap",
"evidence": "/affected/37/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-reactivex-rxjava2",
"evidence": "/affected/38/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.2.21-4.redhat_00003.1.el9eap",
"evidence": "/affected/38/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-saaj-impl",
"evidence": "/affected/39/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.0.4-2.redhat_00002.1.el9eap",
"evidence": "/affected/39/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-stax-ex",
"evidence": "/affected/40/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.1.0-3.redhat_00003.1.el9eap",
"evidence": "/affected/40/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-stax2-api",
"evidence": "/affected/41/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.2.2-2.redhat_00003.1.el9eap",
"evidence": "/affected/41/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-sun-istack-commons",
"evidence": "/affected/42/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.1.2-2.redhat_00003.1.el9eap",
"evidence": "/affected/42/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-wildfly",
"evidence": "/affected/43/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:8.0.11-1.GA_redhat_00002.1.el9eap",
"evidence": "/affected/43/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-wildfly-elytron",
"evidence": "/affected/44/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.2.12-1.Final_redhat_00002.1.el9eap",
"evidence": "/affected/44/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-wildfly-elytron-tool",
"evidence": "/affected/45/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.2.12-1.Final_redhat_00002.1.el9eap",
"evidence": "/affected/45/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-wildfly-java-jdk11",
"evidence": "/affected/46/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:8.0.11-1.GA_redhat_00002.1.el9eap",
"evidence": "/affected/46/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-wildfly-java-jdk17",
"evidence": "/affected/47/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:8.0.11-1.GA_redhat_00002.1.el9eap",
"evidence": "/affected/47/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-wildfly-java-jdk21",
"evidence": "/affected/48/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:8.0.11-1.GA_redhat_00002.1.el9eap",
"evidence": "/affected/48/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-wildfly-modules",
"evidence": "/affected/49/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:8.0.11-1.GA_redhat_00002.1.el9eap",
"evidence": "/affected/49/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "eap8-yasson",
"evidence": "/affected/50/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.0.4-2.redhat_00004.1.el9eap",
"evidence": "/affected/50/ranges"
}
],
"affected_versions": []
}
],
"severity": "medium",
"structured": {
"id": "RHSA-2025:22775",
"aliases": [
"RHSA-2025:22775"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.0.2-2.redhat_00002.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-angus-activation",
"purl": "pkg:rpm/redhat/eap8-angus-activation",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.16.1-2.redhat_00002.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-apache-commons-io",
"purl": "pkg:rpm/redhat/eap8-apache-commons-io",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.0.1-5.redhat_00007.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-atinject",
"purl": "pkg:rpm/redhat/eap8-atinject",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.82.0-1.redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-bouncycastle",
"purl": "pkg:rpm/redhat/eap8-bouncycastle",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.82.0-1.redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-bouncycastle-jmail",
"purl": "pkg:rpm/redhat/eap8-bouncycastle-jmail",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.82.0-1.redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-bouncycastle-pg",
"purl": "pkg:rpm/redhat/eap8-bouncycastle-pg",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.82.0-1.redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-bouncycastle-pkix",
"purl": "pkg:rpm/redhat/eap8-bouncycastle-pkix",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.82.0-1.redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-bouncycastle-prov",
"purl": "pkg:rpm/redhat/eap8-bouncycastle-prov",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.82.0-1.redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-bouncycastle-util",
"purl": "pkg:rpm/redhat/eap8-bouncycastle-util",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:800.11.0-1.GA_redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-eap-product-conf-parent",
"purl": "pkg:rpm/redhat/eap8-eap-product-conf-parent",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:800.11.0-1.GA_redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-eap-product-conf-wildfly-ee-feature-pack",
"purl": "pkg:rpm/redhat/eap8-eap-product-conf-wildfly-ee-feature-pack",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:6.10.1.202505221210-1.r_redhat_00002.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-eclipse-jgit",
"purl": "pkg:rpm/redhat/eap8-eclipse-jgit",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.6.27-1.Final_redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-hal-console",
"purl": "pkg:rpm/redhat/eap8-hal-console",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:6.2.46-1.Final_redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-hibernate",
"purl": "pkg:rpm/redhat/eap8-hibernate",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:6.2.46-1.Final_redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-hibernate-core",
"purl": "pkg:rpm/redhat/eap8-hibernate-core",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:6.2.46-1.Final_redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-hibernate-envers",
"purl": "pkg:rpm/redhat/eap8-hibernate-envers",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:8.0.2-1.Final_redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-hibernate-validator",
"purl": "pkg:rpm/redhat/eap8-hibernate-validator",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:8.0.2-1.Final_redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-hibernate-validator-cdi",
"purl": "pkg:rpm/redhat/eap8-hibernate-validator-cdi",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.5.14-5.redhat_00016.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-httpcomponents-client",
"purl": "pkg:rpm/redhat/eap8-httpcomponents-client",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.4.16-6.redhat_00011.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-httpcomponents-core",
"purl": "pkg:rpm/redhat/eap8-httpcomponents-core",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.0.3-1.Final_redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-installation-manager-api",
"purl": "pkg:rpm/redhat/eap8-installation-manager-api",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.1.2-2.redhat_00003.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-istack-commons-runtime",
"purl": "pkg:rpm/redhat/eap8-istack-commons-runtime",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.1.2-2.redhat_00003.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-istack-commons-tools",
"purl": "pkg:rpm/redhat/eap8-istack-commons-tools",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.1.3-2.redhat_00002.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-jakarta-activation",
"purl": "pkg:rpm/redhat/eap8-jakarta-activation",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.1.1-5.redhat_00005.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-jakarta-annotation-api",
"purl": "pkg:rpm/redhat/eap8-jakarta-annotation-api",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.0.2-1.redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-jakarta-enterprise-concurrent",
"purl": "pkg:rpm/redhat/eap8-jakarta-enterprise-concurrent",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.1.0-5.redhat_00003.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-jakarta-interceptor-api",
"purl": "pkg:rpm/redhat/eap8-jakarta-interceptor-api",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.1.3-3.redhat_00003.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-jakarta-mail",
"purl": "pkg:rpm/redhat/eap8-jakarta-mail",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:6.0.0-6.redhat_00007.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-jakarta-servlet-api",
"purl": "pkg:rpm/redhat/eap8-jakarta-servlet-api",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.0.2-3.redhat_00006.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-jakarta-validation-api",
"purl": "pkg:rpm/redhat/eap8-jakarta-validation-api",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.1.0-5.redhat_00003.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-jakarta-ws-rs-api",
"purl": "pkg:rpm/redhat/eap8-jakarta-ws-rs-api",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.0.2-2.redhat_00003.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-jakarta-xml-bind-api",
"purl": "pkg:rpm/redhat/eap8-jakarta-xml-bind-api",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.0.2-1.Final_redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-jboss-el-api_5.0_spec",
"purl": "pkg:rpm/redhat/eap8-jboss-el-api_5.0_spec",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:7.3.6-1.Final_redhat_00001.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-jbossws-cxf",
"purl": "pkg:rpm/redhat/eap8-jbossws-cxf",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.0.5-3.redhat_00002.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-jctools",
"purl": "pkg:rpm/redhat/eap8-jctools",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.0.5-3.redhat_00002.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-jctools-core",
"purl": "pkg:rpm/redhat/eap8-jctools-core",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.1.7-3.redhat_00003.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-parsson",
"purl": "pkg:rpm/redhat/eap8-parsson",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.0.4-4.redhat_00005.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-reactive-streams",
"purl": "pkg:rpm/redhat/eap8-reactive-streams",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.2.21-4.redhat_00003.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-reactivex-rxjava2",
"purl": "pkg:rpm/redhat/eap8-reactivex-rxjava2",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.0.4-2.redhat_00002.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-saaj-impl",
"purl": "pkg:rpm/redhat/eap8-saaj-impl",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.1.0-3.redhat_00003.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-stax-ex",
"purl": "pkg:rpm/redhat/eap8-stax-ex",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.2.2-2.redhat_00003.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-stax2-api",
"purl": "pkg:rpm/redhat/eap8-stax2-api",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.1.2-2.redhat_00003.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-sun-istack-commons",
"purl": "pkg:rpm/redhat/eap8-sun-istack-commons",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:8.0.11-1.GA_redhat_00002.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-wildfly",
"purl": "pkg:rpm/redhat/eap8-wildfly",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.2.12-1.Final_redhat_00002.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-wildfly-elytron",
"purl": "pkg:rpm/redhat/eap8-wildfly-elytron",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.2.12-1.Final_redhat_00002.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-wildfly-elytron-tool",
"purl": "pkg:rpm/redhat/eap8-wildfly-elytron-tool",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:8.0.11-1.GA_redhat_00002.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-wildfly-java-jdk11",
"purl": "pkg:rpm/redhat/eap8-wildfly-java-jdk11",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:8.0.11-1.GA_redhat_00002.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-wildfly-java-jdk17",
"purl": "pkg:rpm/redhat/eap8-wildfly-java-jdk17",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:8.0.11-1.GA_redhat_00002.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-wildfly-java-jdk21",
"purl": "pkg:rpm/redhat/eap8-wildfly-java-jdk21",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:8.0.11-1.GA_redhat_00002.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-wildfly-modules",
"purl": "pkg:rpm/redhat/eap8-wildfly-modules",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.0.4-2.redhat_00004.1.el9eap"
}
]
}
],
"package": {
"name": "eap8-yasson",
"purl": "pkg:rpm/redhat/eap8-yasson",
"ecosystem": "Red Hat:jboss_enterprise_application_platform:8.0::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:22775.json"
}
}
],
"modified": "2026-10-17T10:30:56.677393549Z",
"provider": "osv",
"upstream": [
"CVE-2025-4949"
],
"references": [
"https://access.redhat.com/errata/RHSA-2025:22775",
"https://access.redhat.com/security/updates/classification/#moderate",
"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.0",
"https://access.redhat.com/articles/7120566",
"https://bugzilla.redhat.com/show_bug.cgi?id=2367730",
"https://issues.redhat.com/browse/JBEAP-28993",
"https://issues.redhat.com/browse/JBEAP-30584",
"https://issues.redhat.com/browse/JBEAP-30977",
"https://issues.redhat.com/browse/JBEAP-31001",
"https://issues.redhat.com/browse/JBEAP-31031",
"https://issues.redhat.com/browse/JBEAP-31074",
"https://issues.redhat.com/browse/JBEAP-31253",
"https://issues.redhat.com/browse/JBEAP-31260",
"https://issues.redhat.com/browse/JBEAP-31290",
"https://issues.redhat.com/browse/JBEAP-31339",
"https://issues.redhat.com/browse/JBEAP-31377",
"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22775.json",
"https://access.redhat.com/security/cve/CVE-2025-4949",
"https://www.cve.org/CVERecord?id=CVE-2025-4949",
"https://nvd.nist.gov/vuln/detail/CVE-2025-4949",
"https://gitlab.eclipse.org/security/cve-assignement/-/issues/64",
"https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/281",
"https://projects.eclipse.org/projects/technology.jgit/releases/7.2.1"
]
},
"related_cves": [
{
"value": "CVE-2025-4949",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 353188,
"published_at": "2025-12-05T10:08:27+00:00"
}