Improper Input Validation in async-http-client

Async Http Client aka async-http-client before 2.0.35 can be tricked into connecting to a host different from the one extracted by java.net.URI if a '?' character occurs in a fragment identifier. Similar bugs were previously identified in cURL CVE-2016-8624 and Oracle Java 8 java.net.URL...

org.grails:gorm-hibernate4-spring-boot (1.0.0.m1), org.grails:grails-datastore-gorm (>=3.0.0.release, <=3.0.1.release) +28 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.3.6)

org.grails:grails-core MAVEN version 2.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:gorm-hibernate4-spring-boot 1.0.0.m1 - org.grails:grails-datastore-gorm =3.0.0.release, =3.0.0.release,...

org.grails:gorm-hibernate4-spring-boot (>=1.0.0.rc1, <=1.0.0.rc2), org.grails:gorm-mongodb-spring-boot (>=1.0.0.m1, <=1.0.0.rc1) +30 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.3.7)

org.grails:grails-core MAVEN version 2.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:gorm-hibernate4-spring-boot =1.0.0.rc1, =1.0.0.m1, =3.0.2.release, =3.0.2.release, =3.0.2.release,...

org.grails:grails-logging (2.4.0.m1), org.grails:grails-plugin-async (2.4.0.m1) +19 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.4.0.m1)

org.grails:grails-core MAVEN version 2.4.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-logging 2.4.0.m1 - org.grails:grails-plugin-async 2.4.0.m1 - org.grails:grails-plugin-codecs...

org.grails:grails-dependencies (2.4.0.rc1), org.grails:grails-encoder (2.4.0.rc1) +33 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.4.0.rc1)

org.grails:grails-core MAVEN version 2.4.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.4.0.rc1 - org.grails:grails-encoder 2.4.0.rc1 -...

org.grails:grails-dependencies (2.4.1), org.grails:grails-encoder (2.4.1) +32 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.4.1)

org.grails:grails-core MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.4.1 - org.grails:grails-encoder 2.4.1 - org.grails:grails-logging 2.4.1 -...

org.grails:grails-dependencies (2.5.0), org.grails:grails-encoder (2.5.0) +33 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.5.0)

org.grails:grails-core MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.5.0 - org.grails:grails-encoder 2.5.0 - org.grails:grails-logging 2.5.0 -...

org.grails:grails-dependencies (2.5.2), org.grails:grails-encoder (2.5.2) +33 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.5.2)

org.grails:grails-core MAVEN version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.5.2 - org.grails:grails-encoder 2.5.2 - org.grails:grails-logging 2.5.2 -...

org.grails:grails-datastore-gorm (>=2.0.5.release, <=2.0.7.release), org.grails:grails-datastore-gorm-hibernate (>=2.0.5.release, <=2.0.7.release) +27 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.3.4)

org.grails:grails-core MAVEN version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-datastore-gorm =2.0.5.release, =2.0.5.release, =2.0.5.release, =2.0.0-m01, =2.0.5.release,...

org.grails:grails-datastore-gorm (3.1.2.release), org.grails:grails-datastore-gorm-hibernate (3.1.2.release) +29 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.3.9)

org.grails:grails-core MAVEN version 2.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-datastore-gorm 3.1.2.release - org.grails:grails-datastore-gorm-hibernate 3.1.2.release -...

org.grails:grails-datastore-gorm-grails2-support (>=6.1.0.release, <=6.1.9.release), org.grails:grails-datastore-gorm-grails2-test (>=6.1.0.release, <=6.1.9.release) +35 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.5.6)

org.grails:grails-core MAVEN version 2.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-datastore-gorm-grails2-support =6.1.0.release, =6.1.0.release, =6.1.9.release -...

org.grails:grails-logging (2.3.0.rc2), org.grails:grails-plugin-async (2.3.0.rc2) +19 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.3.0.rc2)

org.grails:grails-core MAVEN version 2.3.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-logging 2.3.0.rc2 - org.grails:grails-plugin-async 2.3.0.rc2 - org.grails:grails-plugin-codec...

org.grails:grails-datastore-gorm (2.0.4.release), org.grails:grails-datastore-gorm-hibernate (2.0.4.release) +26 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.3.3)

org.grails:grails-core MAVEN version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-datastore-gorm 2.0.4.release - org.grails:grails-datastore-gorm-hibernate 2.0.4.release -...

org.grails:grails-datastore-gorm (2.0.2.release), org.grails:grails-datastore-gorm-hibernate (2.0.2.release) +28 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.3.1)

org.grails:grails-core MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-datastore-gorm 2.0.2.release - org.grails:grails-datastore-gorm-hibernate 2.0.2.release -...

Apache Tomcat Race Condition vulnerability

If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could result in a user seeing a response intended for a different user. An additional issue was present in the NIO and NIO2 connectors that did not...

GHSA-6V52-MJ5R-7J2M Apache Tomcat Race Condition vulnerability

If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could result in a user seeing a response intended for a different user. An additional issue was present in the NIO and NIO2 connectors that did not...

openSUSE Security Update : tomcat (openSUSE-2018-1129)

This update for tomcat to version 9.0.10 fixes the following issues : Security issues fixed : - CVE-2018-1336: An improper handing of overflow in the UTF-8 decoder with supplementary characters could have lead to an infinite loop in the decoder causing a Denial of Service bsc1102400. -...

Security update for tomcat (moderate)

This update for tomcat to version 9.0.10 fixes the following issues: Security issues fixed: - CVE-2018-1336: An improper handing of overflow in the UTF-8 decoder with supplementary characters could have lead to an infinite loop in the decoder causing a Denial of Service bsc1102400. - CVE-2018-801...

tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up

If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could result in a user seeing a response intended for a different user. An additional issue was present in the NIO and NIO2 connectors that did not...

The World’s Most Popular Coding Language Happens to be Most Hackers’ Weapon of Choice

Python will soon be the world’s most prevalent coding language. That’s quite a statement, but if you look at its simplicity, flexibility and the relative ease with which folks pick it up, it’s not hard to see why The Economist recently touted it as the soon-to-be most used language, globally...