au.com.mountain-pass:hyperstate (>=1, <=9), biz.dfch.j:activiti.wrapper (>=0.0.6, <=0.0.7) +1015 more potentially affected by CVE-2017-5648 via org.apache.tomcat.embed:tomcat-embed-core (>=8.0.1, <=8.0.41)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.0.1, =1, =0.0.6, =0.0.10, =2.0, =0.0.21, =0.0.21, =0.0.21, =0.0.25, =0.0.21, =0.0.21, =0.0.21, =0.0.21, =1.1, =1.1.2 and more Source cves: CVE-2017-5648 Source advisory: OSV:GHSA-3VX3-XF6Q-R5XP...

ch.ralscha:embeddedtc (>=0.0.1, <=0.0.9), ch.rasc:embeddedtc (>=1.0, <=1.27) +277 more potentially affected by CVE-2017-5648 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.0, <=7.0.75)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.0, =0.0.1, =1.0, =1.0, =2.0.19, =0.10.1, =1.0-release, =1.0-release, =0.1, =0.4, =1.0.0, =1.0.0, =1.0.1 - com.definesys.mpaas:query-weblogic 1.0.0 and more Source cves: CVE-2017-5648 Source advisory: GHSA-3VX3-XF6Q-R5XP...

com.amazonaws:aws-dynamodb-session-tomcat (2.0.4), com.att.nsa:msgrtr (0.0.5) +80 more potentially affected by CVE-2017-5648 via org.apache.tomcat:tomcat-catalina (>=8.0.1, <=8.0.41)

org.apache.tomcat:tomcat-catalina MAVEN version =8.0.1, =2.2.0, =0.9.1-beta3, =0.9.1-beta3, =1.7, =1.8.2, =2.1, =1.2, =16, =16, =16.3.0 and more Source cves: CVE-2017-5648 Source advisory: OSV:GHSA-3VX3-XF6Q-R5XP...

com.cloudera.oryx:oryx-lambda-serving (2.3.0), com.collaborne.operations:tomcat-remoteip-aws-valve (>=1.0.0, <=1.1.5) +53 more potentially affected by CVE-2017-5648 via org.apache.tomcat:tomcat-catalina (>=8.5.0, <=8.5.12)

org.apache.tomcat:tomcat-catalina MAVEN version =8.5.0, =1.0.0, =1.0.4, =1.8.2, =2.1, =1.9.5, =1.2.0, =0.5.0, =0.0.3, =0.0.5 and more Source cves: CVE-2017-5648 Source advisory: OSV:GHSA-3VX3-XF6Q-R5XP...

com.aol.microservices:micro-tomcat (>=0.83, <=0.91.11), com.aol.microservices:micro-tomcat-with-jersey (>=0.83, <=0.91.11) +9 more potentially affected by CVE-2017-5648 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.0.m17)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =0.83, =0.83, =0.1.0, =1.0.0, =1.0.0, =1.6-beta.2, =0.9.4, =9.0.0.m1, =9.0.0.m1, =9.0.0.m17 Source cves: CVE-2017-5648 Source advisory: OSV:GHSA-3VX3-XF6Q-R5XP...

com.aol.microservices:micro-tomcat (>=0.83, <=0.91.11), com.aol.microservices:micro-tomcat-with-jersey (>=0.83, <=0.91.11) +9 more potentially affected by CVE-2017-5648 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.0.m17)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =0.83, =0.83, =0.1.0, =1.0.0, =1.0.0, =1.6-beta.2, =0.9.4, =9.0.0.m1, =9.0.0.m1, =9.0.0.m17 Source cves: CVE-2017-5648 Source advisory: GHSA-3VX3-XF6Q-R5XP...

com.github.dblock.waffle:waffle-tomcat9 (1.8.1), com.github.waffle:waffle-tomcat9 (>=1.8.2, <=1.8.3) +13 more potentially affected by CVE-2017-5648 via org.apache.tomcat:tomcat-catalina (>=9.0.0.m1, <=9.0.0.m17)

org.apache.tomcat:tomcat-catalina MAVEN version =9.0.0.m1, =1.8.2, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m1, =9.0.0.m17 Source cves: CVE-2017-5648 Source advisory: OSV:GHSA-3VX3-XF6Q-R5XP...

ch.ralscha:embeddedtc (>=0.0.1, <=0.0.9), ch.rasc:embeddedtc (>=1.0, <=1.27) +277 more potentially affected by CVE-2017-5648 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.0, <=7.0.75)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.0, =0.0.1, =1.0, =1.0, =2.0.19, =0.10.1, =1.0-release, =1.0-release, =0.1, =0.4, =1.0.0, =1.0.0, =1.0.1 - com.definesys.mpaas:query-weblogic 1.0.0 and more Source cves: CVE-2017-5648 Source advisory: OSV:GHSA-3VX3-XF6Q-R5XP...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.3), org.jenkins-ci.main:jenkins-test-harness (1.520) +24 more potentially affected by CVE-2017-1000400 via org.jenkins-ci.main:jenkins-core (1.520)

org.jenkins-ci.main:jenkins-core MAVEN version 1.520 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin =0.0.1, =1.0.4, =1.0.4, =1.0.4, =2.0,...

org.jenkins-ci.lib:xtrigger-lib (>=0.34, <=0.35), org.jenkins-ci.main:jenkins-test-harness (1.590) +4 more potentially affected by CVE-2017-1000400 via org.jenkins-ci.main:jenkins-core (1.590)

org.jenkins-ci.main:jenkins-core MAVEN version 1.590 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.lib:xtrigger-lib =0.34, =3.0, =4.4 -...

org.jenkins-ci.main:jenkins-war (1.509.2.jenkins-14362-jzlib), org.jenkins-ci.main:maven-plugin (1.509.2.jenkins-14362-jzlib) potentially affected by CVE-2017-1000400 via org.jenkins-ci.main:jenkins-core (1.509.2.jenkins-14362-jzlib)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.2.jenkins-14362-jzlib is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.509.2.jenkins-14362-jzlib -...

org.jenkins-ci.main:jenkins-test-harness (1.489), org.jenkins-ci.main:jenkins-war (1.489) +9 more potentially affected by CVE-2017-1000400 via org.jenkins-ci.main:jenkins-core (1.489)

org.jenkins-ci.main:jenkins-core MAVEN version 1.489 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.489 - org.jenkins-ci.main:jenkins-war 1.489 -...

org.jenkins-ci.main:jenkins-test-harness (1.554.3.jenkins-18065-jenkins-23945), org.jenkins-ci.main:jenkins-war (1.554.3.jenkins-18065-jenkins-23945) potentially affected by CVE-2017-1000400 via org.jenkins-ci.main:jenkins-core (1.554.3.jenkins-18065-jenkins-23945)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.3.jenkins-18065-jenkins-23945 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness...

org.jenkins-ci.main:jenkins-test-harness (1.588), org.jenkins-ci.main:jenkins-war (1.588) +1 more potentially affected by CVE-2017-1000400 via org.jenkins-ci.main:jenkins-core (1.588)

org.jenkins-ci.main:jenkins-core MAVEN version 1.588 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.588 - org.jenkins-ci.main:jenkins-war 1.588 -...

org.jenkins-ci.main:jenkins-test-harness (1.619), org.jenkins-ci.main:jenkins-war (1.619) +4 more potentially affected by CVE-2017-1000400 via org.jenkins-ci.main:jenkins-core (1.619)

org.jenkins-ci.main:jenkins-core MAVEN version 1.619 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.619 - org.jenkins-ci.main:jenkins-war 1.619 -...

org.jenkins-ci.main:jenkins-test-harness (1.596.2), org.jenkins-ci.main:jenkins-war (1.596.2) +6 more potentially affected by CVE-2017-1000400 via org.jenkins-ci.main:jenkins-core (1.596.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.596.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.596.2 - org.jenkins-ci.main:jenkins-war 1.596.2 -...

org.jenkins-ci.main:jenkins-test-harness (1.517), org.jenkins-ci.main:jenkins-war (1.517) +5 more potentially affected by CVE-2017-1000400 via org.jenkins-ci.main:jenkins-core (1.517)

org.jenkins-ci.main:jenkins-core MAVEN version 1.517 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.517 - org.jenkins-ci.main:jenkins-war 1.517 -...

com.synopsys.arc.jenkinsci.plugins:cygwin-process-killer (0.1), org.jenkins-ci.main:jenkins-test-harness (1.528) +6 more potentially affected by CVE-2017-1000400 via org.jenkins-ci.main:jenkins-core (1.528)

org.jenkins-ci.main:jenkins-core MAVEN version 1.528 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.synopsys.arc.jenkinsci.plugins:cygwin-process-killer 0.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.578), org.jenkins-ci.main:jenkins-war (1.578) +2 more potentially affected by CVE-2017-1000400 via org.jenkins-ci.main:jenkins-core (1.578)

org.jenkins-ci.main:jenkins-core MAVEN version 1.578 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.578 - org.jenkins-ci.main:jenkins-war 1.578 -...

com.groupon.jenkins-ci.plugins:dotci-fig-template (>=1.0.1, <=1.0.2), com.groupon.jenkins.plugins:dotci-plugins-starter-pack (>=1.0.0, <=1.1.1) +6 more potentially affected by CVE-2017-1000400 via org.jenkins-ci.main:jenkins-core (1.518)

org.jenkins-ci.main:jenkins-core MAVEN version 1.518 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci-fig-template =1.0.1, =1.0.0, =1.1, =1.2 -...