[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2023-44483":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T14:55:33.319Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":24,"aliases":25,"duplicate_of":9,"upstream":27,"downstream":28,"duplicates":45,"related":46,"reserved_at":9,"published_at":57,"modified_at":58,"state":59,"summary":60,"references_raw":69,"kevs":106,"epss":107,"epss_history":110,"metrics":376,"affected":384},"CVE-2023-44483","All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-532","Insertion of Sensitive Information into Log File","The product writes sensitive information to a log file.","weakness","Incomplete","Base","Medium",[20],{"id":21,"name":22,"techniques":23},"CAPEC-215","Fuzzing for application mapping",[],[],[26],"GHSA-xfrj-6vvc-3xm2",[],[29,31,33,35,37,39,41,43],{"_key":30},"RHSA-2024:0710",{"_key":32},"RHSA-2024:0711",{"_key":34},"RHSA-2024:0712",{"_key":36},"DEBIAN-CVE-2023-44483",{"_key":38},"RHSA-2024:0798",{"_key":40},"RHSA-2024:0799",{"_key":42},"RHSA-2024:0800",{"_key":44},"UBUNTU-CVE-2023-44483",[],[47,49,51,53,55],{"_key":48},"CGA-453V-GV28-777P",{"_key":50},"CGA-682V-C9WH-7M2F",{"_key":52},"CGA-9F93-54G3-H45W",{"_key":54},"CGA-MCC2-JCP7-FH6P",{"_key":56},"CGA-WCW4-JVMH-JQ2Q","2023-10-20T09:23:53.483Z","2025-11-03T21:49:47.169Z","Modified",{"cisa_kev":61,"cisa_ransomware":61,"cisa_vendor":9,"epss_severity":62,"epss_score":63,"severity":64,"severity_score":65,"severity_version":66,"severity_source":67,"severity_vector":68,"severity_status":59},false,"low",0.00173,"medium",6.5,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",[70,79,84,88,93,98,102],{"url":71,"sources":72,"tags":75},"https://lists.apache.org/thread/vmqbp9mfxtrf0kmbnnmbn3h9j6dr9q55",[73,67,74],"cve.org","osv_maven",[76,77,78],"Vendor Advisory","Mailing List","WEB",{"url":80,"sources":81,"tags":82},"http://www.openwall.com/lists/oss-security/2023/10/20/5",[73,67,74],[77,83,78],"Third Party Advisory",{"url":85,"sources":86,"tags":87},"https://security.netapp.com/advisory/ntap-20241108-0002/",[73,67],[],{"url":89,"sources":90,"tags":91},"https://nvd.nist.gov/vuln/detail/CVE-2023-44483",[74],[92],"Advisory",{"url":94,"sources":95,"tags":96},"https://github.com/apache/santuario-java",[74],[97],"PACKAGE",{"url":99,"sources":100,"tags":101},"https://santuario.apache.org/secadv.data/CVE-2023-44483.txt.asc?version=1&modificationDate=1697782758000&api=v2",[74],[78],{"url":103,"sources":104,"tags":105},"https://security.netapp.com/advisory/ntap-20241108-0002",[74],[78],[],{"date":108,"score":63,"percentile":109},"2026-06-04",0.38479,[111,115,118,121,125,128,131,134,137,140,143,146,149,152,155,159,162,165,169,172,175,178,181,184,186,189,192,195,198,201,204,207,210,213,216,219,222,224,227,230,233,235,238,241,244,247,250,252,255,257,260,263,266,269,272,275,277,280,283,286,289,292,295,298,301,304,307,310,313,315,318,321,324,327,329,332,335,338,341,344,347,350,352,355,358,361,364,367,370,373],{"date":112,"score":113,"percentile":114},"2025-11-04",0.0014,0.34709,{"date":116,"score":113,"percentile":117},"2025-11-05",0.34698,{"date":119,"score":113,"percentile":120},"2025-11-06",0.34696,{"date":122,"score":123,"percentile":124},"2025-11-07",0.00169,0.38619,{"date":126,"score":123,"percentile":127},"2025-11-08",0.38615,{"date":129,"score":123,"percentile":130},"2025-11-09",0.38599,{"date":132,"score":123,"percentile":133},"2025-11-10",0.38562,{"date":135,"score":123,"percentile":136},"2025-11-11",0.38581,{"date":138,"score":123,"percentile":139},"2025-11-12",0.38622,{"date":141,"score":123,"percentile":142},"2025-11-13",0.38637,{"date":144,"score":123,"percentile":145},"2025-11-14",0.38636,{"date":147,"score":123,"percentile":148},"2025-11-15",0.38631,{"date":150,"score":123,"percentile":151},"2025-11-16",0.3861,{"date":153,"score":123,"percentile":154},"2025-11-17",0.38586,{"date":156,"score":157,"percentile":158},"2025-11-18",0.00575,0.66201,{"date":160,"score":157,"percentile":161},"2025-11-19",0.66208,{"date":163,"score":157,"percentile":164},"2025-11-20",0.66203,{"date":166,"score":167,"percentile":168},"2025-11-21",0.00174,0.39133,{"date":170,"score":167,"percentile":171},"2025-11-22",0.39135,{"date":173,"score":167,"percentile":174},"2025-11-23",0.39105,{"date":176,"score":123,"percentile":177},"2025-11-24",0.38552,{"date":179,"score":123,"percentile":180},"2025-11-25",0.38564,{"date":182,"score":123,"percentile":183},"2025-11-26",0.38557,{"date":185,"score":123,"percentile":180},"2025-11-27",{"date":187,"score":123,"percentile":188},"2025-11-28",0.38538,{"date":190,"score":123,"percentile":191},"2025-11-29",0.38511,{"date":193,"score":123,"percentile":194},"2025-11-30",0.38495,{"date":196,"score":123,"percentile":197},"2025-12-01",0.38616,{"date":199,"score":123,"percentile":200},"2025-12-02",0.38627,{"date":202,"score":123,"percentile":203},"2025-12-03",0.38626,{"date":205,"score":123,"percentile":206},"2025-12-04",0.38491,{"date":208,"score":123,"percentile":209},"2025-12-05",0.38524,{"date":211,"score":123,"percentile":212},"2025-12-06",0.38523,{"date":214,"score":123,"percentile":215},"2025-12-07",0.38501,{"date":217,"score":123,"percentile":218},"2025-12-08",0.38515,{"date":220,"score":123,"percentile":221},"2025-12-09",0.38556,{"date":223,"score":123,"percentile":127},"2025-12-10",{"date":225,"score":123,"percentile":226},"2025-12-11",0.38645,{"date":228,"score":123,"percentile":229},"2025-12-12",0.38678,{"date":231,"score":123,"percentile":232},"2025-12-13",0.38653,{"date":234,"score":123,"percentile":197},"2025-12-14",{"date":236,"score":123,"percentile":237},"2025-12-15",0.3859,{"date":239,"score":123,"percentile":240},"2025-12-16",0.38625,{"date":242,"score":123,"percentile":243},"2025-12-17",0.38668,{"date":245,"score":123,"percentile":246},"2025-12-18",0.38718,{"date":248,"score":123,"percentile":249},"2025-12-19",0.38739,{"date":251,"score":123,"percentile":246},"2025-12-20",{"date":253,"score":123,"percentile":254},"2025-12-21",0.38672,{"date":256,"score":123,"percentile":226},"2025-12-22",{"date":258,"score":123,"percentile":259},"2025-12-23",0.38648,{"date":261,"score":123,"percentile":262},"2025-12-24",0.38665,{"date":264,"score":123,"percentile":265},"2025-12-25",0.38717,{"date":267,"score":123,"percentile":268},"2025-12-26",0.38699,{"date":270,"score":123,"percentile":271},"2025-12-27",0.38715,{"date":273,"score":123,"percentile":274},"2025-12-28",0.38618,{"date":276,"score":123,"percentile":154},"2025-12-29",{"date":278,"score":123,"percentile":279},"2025-12-30",0.38574,{"date":281,"score":123,"percentile":282},"2025-12-31",0.38639,{"date":284,"score":123,"percentile":285},"2026-01-01",0.38791,{"date":287,"score":123,"percentile":288},"2026-01-02",0.38766,{"date":290,"score":123,"percentile":291},"2026-01-03",0.38763,{"date":293,"score":123,"percentile":294},"2026-01-04",0.38596,{"date":296,"score":123,"percentile":297},"2026-01-05",0.38568,{"date":299,"score":123,"percentile":300},"2026-01-06",0.38573,{"date":302,"score":123,"percentile":303},"2026-01-07",0.38593,{"date":305,"score":123,"percentile":306},"2026-01-08",0.3862,{"date":308,"score":123,"percentile":309},"2026-01-09",0.38611,{"date":311,"score":123,"percentile":312},"2026-01-10",0.38613,{"date":314,"score":123,"percentile":237},"2026-01-11",{"date":316,"score":123,"percentile":317},"2026-01-12",0.38539,{"date":319,"score":123,"percentile":320},"2026-01-13",0.38517,{"date":322,"score":123,"percentile":323},"2026-01-14",0.3857,{"date":325,"score":123,"percentile":326},"2026-01-15",0.3856,{"date":328,"score":123,"percentile":136},"2026-01-16",{"date":330,"score":123,"percentile":331},"2026-01-17",0.38553,{"date":333,"score":123,"percentile":334},"2026-01-18",0.38499,{"date":336,"score":123,"percentile":337},"2026-01-19",0.38468,{"date":339,"score":123,"percentile":340},"2026-01-20",0.38451,{"date":342,"score":123,"percentile":343},"2026-01-21",0.38435,{"date":345,"score":123,"percentile":346},"2026-01-22",0.38429,{"date":348,"score":123,"percentile":349},"2026-01-23",0.38488,{"date":351,"score":123,"percentile":194},"2026-01-24",{"date":353,"score":123,"percentile":354},"2026-01-25",0.38446,{"date":356,"score":123,"percentile":357},"2026-01-26",0.38384,{"date":359,"score":123,"percentile":360},"2026-01-27",0.38381,{"date":362,"score":123,"percentile":363},"2026-01-28",0.38359,{"date":365,"score":123,"percentile":366},"2026-01-29",0.38338,{"date":368,"score":123,"percentile":369},"2026-01-30",0.3834,{"date":371,"score":123,"percentile":372},"2026-01-31",0.38346,{"date":374,"score":123,"percentile":375},"2026-02-01",0.38449,[377,382],{"source":67,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":378,"cvss_v4_0":9},{"baseScore":65,"baseSeverity":379,"vectorString":68,"impactScore":380,"exploitabilityScore":381},"MEDIUM",6,7.2,{"source":74,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":383,"cvss_v4_0":9},{"baseScore":65,"baseSeverity":9,"vectorString":68,"impactScore":380,"exploitabilityScore":381},[385,406,420],{"ecosystem":9,"name":386,"vendor":387,"product":388,"cpe_part":389,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":390},"Apache Santuario","apache software foundation","apache santuario","a",[391,398,402],{"version":392,"is_range":393,"range_type":73,"version_start":394,"version_start_type":395,"version_end":396,"version_end_type":397,"fixed_in":9},">= 2.2, \u003C 2.2.6",true,"2.2","including","2.2.6","excluding",{"version":399,"is_range":393,"range_type":73,"version_start":400,"version_start_type":395,"version_end":401,"version_end_type":397,"fixed_in":9},">= 2.3, \u003C 2.3.4","2.3","2.3.4",{"version":403,"is_range":393,"range_type":73,"version_start":404,"version_start_type":395,"version_end":405,"version_end_type":397,"fixed_in":9},">= 3.0, \u003C 3.0.3","3.0","3.0.3",{"ecosystem":9,"name":407,"vendor":408,"product":409,"cpe_part":389,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":410},"santuario xml security for java","apache","santuario_xml_security_for_java",[411,414,417],{"version":412,"is_range":393,"range_type":413,"version_start":9,"version_start_type":9,"version_end":396,"version_end_type":397,"fixed_in":9},"lt2.2.6","cpe",{"version":415,"is_range":393,"range_type":413,"version_start":416,"version_start_type":395,"version_end":401,"version_end_type":397,"fixed_in":9},"gte2.3.0_lt2.3.4","2.3.0",{"version":418,"is_range":393,"range_type":413,"version_start":419,"version_start_type":395,"version_end":405,"version_end_type":397,"fixed_in":9},"gte3.0.0_lt3.0.3","3.0.0",{"ecosystem":421,"name":422,"vendor":423,"product":424,"cpe_part":9,"purl_type":425,"purl_namespace":423,"purl_name":424,"source":9,"versions":426},"Maven","org.apache.santuario:xmlsec","org.apache.santuario","xmlsec","maven",[427,430,432],{"version":428,"is_range":393,"range_type":429,"version_start":416,"version_start_type":395,"version_end":401,"version_end_type":397,"fixed_in":9},"gte2_3_0_lt2_3_4","ecosystem",{"version":431,"is_range":393,"range_type":429,"version_start":9,"version_start_type":9,"version_end":396,"version_end_type":397,"fixed_in":9},"lt2_2_6",{"version":433,"is_range":393,"range_type":429,"version_start":419,"version_start_type":395,"version_end":405,"version_end_type":397,"fixed_in":9},"gte3_0_0_lt3_0_3"]