CVE-2021-28099

In Netflix OSS Hollow, since the Files.existsparent is run before creating the directories, an attacker can pre-create these directories with wide permissions. Additionally, since an insecure source of randomness is used, the file names to be created can be deterministically calculated...

com.netflix.hollow:hollow-diff-ui (3.4.0), com.netflix.hollow:hollow-explorer-ui (3.4.0) +4 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (3.4.0)

com.netflix.hollow:hollow MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 3.4.0 - com.netflix.hollow:hollow-explorer-ui 3.4.0 -...

com.netflix.hollow:hollow-diff-ui (2.6.3), com.netflix.hollow:hollow-explorer-ui (2.6.3) +3 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (2.6.3)

com.netflix.hollow:hollow MAVEN version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 2.6.3 - com.netflix.hollow:hollow-explorer-ui 2.6.3 -...

com.netflix.hollow:hollow-diff-ui (4.8.0), com.netflix.hollow:hollow-explorer-ui (4.8.0) +5 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (4.8.0)

com.netflix.hollow:hollow MAVEN version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 4.8.0 - com.netflix.hollow:hollow-explorer-ui 4.8.0 -...

com.netflix.hollow:hollow-diff-ui (4.7.7), com.netflix.hollow:hollow-explorer-ui (4.7.7) +5 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (4.7.7)

com.netflix.hollow:hollow MAVEN version 4.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 4.7.7 - com.netflix.hollow:hollow-explorer-ui 4.7.7 -...

com.netflix.hollow:hollow-diff-ui (2.0.5), com.netflix.hollow:hollow-jsonadapter (2.0.5) +1 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (2.0.5)

com.netflix.hollow:hollow MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 2.0.5 - com.netflix.hollow:hollow-jsonadapter 2.0.5 -...

com.github.igorperikov:hollow-maven-plugin (0.1.1), com.netflix.hollow:hollow-diff-ui (2.3.1) +4 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (2.3.1)

com.netflix.hollow:hollow MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.github.igorperikov:hollow-maven-plugin 0.1.1 - com.netflix.hollow:hollow-diff-ui 2.3.1 -...

com.netflix.hollow:hollow-diff-ui (2.6.6), com.netflix.hollow:hollow-explorer-ui (2.6.6) +3 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (2.6.6)

com.netflix.hollow:hollow MAVEN version 2.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 2.6.6 - com.netflix.hollow:hollow-explorer-ui 2.6.6 -...

com.netflix.hollow:hollow-diff-ui (2.11.1), com.netflix.hollow:hollow-explorer-ui (2.11.1) +3 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (2.11.1)

com.netflix.hollow:hollow MAVEN version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 2.11.1 - com.netflix.hollow:hollow-explorer-ui 2.11.1 -...

com.netflix.hollow:hollow-diff-ui (3.4.1), com.netflix.hollow:hollow-explorer-ui (3.4.1) +4 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (3.4.1)

com.netflix.hollow:hollow MAVEN version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 3.4.1 - com.netflix.hollow:hollow-explorer-ui 3.4.1 -...

com.netflix.hollow:hollow-diff-ui (4.2.3), com.netflix.hollow:hollow-explorer-ui (4.2.3) +4 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (4.2.3)

com.netflix.hollow:hollow MAVEN version 4.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 4.2.3 - com.netflix.hollow:hollow-explorer-ui 4.2.3 -...

com.netflix.hollow:hollow-diff-ui (4.7.2), com.netflix.hollow:hollow-explorer-ui (4.7.2) +5 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (4.7.2)

com.netflix.hollow:hollow MAVEN version 4.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 4.7.2 - com.netflix.hollow:hollow-explorer-ui 4.7.2 -...

com.netflix.hollow:hollow-diff-ui (4.7.3), com.netflix.hollow:hollow-explorer-ui (4.7.3) +5 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (4.7.3)

com.netflix.hollow:hollow MAVEN version 4.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 4.7.3 - com.netflix.hollow:hollow-explorer-ui 4.7.3 -...

com.netflix.hollow:hollow-diff-ui (4.7.8), com.netflix.hollow:hollow-explorer-ui (4.7.8) +5 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (4.7.8)

com.netflix.hollow:hollow MAVEN version 4.7.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 4.7.8 - com.netflix.hollow:hollow-explorer-ui 4.7.8 -...

com.netflix.hollow:hollow-diff-ui (5.0.2), com.netflix.hollow:hollow-explorer-ui (5.0.2) +5 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (5.0.2)

com.netflix.hollow:hollow MAVEN version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 5.0.2 - com.netflix.hollow:hollow-explorer-ui 5.0.2 -...

com.netflix.hollow:hollow-diff-ui (5.0.3), com.netflix.hollow:hollow-explorer-ui (5.0.3) +5 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (5.0.3)

com.netflix.hollow:hollow MAVEN version 5.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 5.0.3 - com.netflix.hollow:hollow-explorer-ui 5.0.3 -...

com.netflix.hollow:hollow-diff-ui (5.0.8), com.netflix.hollow:hollow-explorer-ui (5.0.8) +5 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (5.0.8)

com.netflix.hollow:hollow MAVEN version 5.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 5.0.8 - com.netflix.hollow:hollow-explorer-ui 5.0.8 -...

com.netflix.hollow:hollow-diff-ui (5.1.1), com.netflix.hollow:hollow-explorer-ui (5.1.1) +5 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (5.1.1)

com.netflix.hollow:hollow MAVEN version 5.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 5.1.1 - com.netflix.hollow:hollow-explorer-ui 5.1.1 -...

com.netflix.hollow:hollow-diff-ui (5.2.3), com.netflix.hollow:hollow-explorer-ui (5.2.3) +5 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (5.2.3)

com.netflix.hollow:hollow MAVEN version 5.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 5.2.3 - com.netflix.hollow:hollow-explorer-ui 5.2.3 -...

com.netflix.hollow:hollow-diff-ui (5.2.4), com.netflix.hollow:hollow-explorer-ui (5.2.4) +5 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (5.2.4)

com.netflix.hollow:hollow MAVEN version 5.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 5.2.4 - com.netflix.hollow:hollow-explorer-ui 5.2.4 -...