Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2020-27828 — HIGH severity vulnerability | Release Alert

CVE-2020-27828

7.8

HIGHCVSS v3

Published

December 11, 2020

CVSS v2

6.8 MEDIUM

Affected

11 projects

Assigned by

Red Hat

Severity scale

010

Description

There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality, integrity, or application availability.

jasper-software/jasper

GitHubOfficial Repository for the JasPer Image Coding Toolkit

< 2.0.23NVD

Crates.ioBase library for interacting with Fedora web services

= 32, = 33NVD

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Placeholder for the fedora name

= 32, = 33NVD

Docker HubOfficial Docker builds of Fedora

= 32, = 33NVD

NPMDigital Repository Ireland - fedora backend operations

= 32, = 33NVD

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 32, = 33NVD

Python Package IndexAn asynchronous behavior-driven development framework

< 2.0.23NVD

NPMjasper template engine

< 2.0.23NVD

NuGet GalleryIn-memory command bus and asynchronous messaging framework

< 2.0.23NVD

tylerlaberge/Jasper

GitHubAn asynchronous behavior-driven development framework.

< 2.0.23NVD

RubyGemsJasper is an open source video management system for Ruby on Rails.

< 2.0.23NVD