ai.hyacinth.framework:core-service-bus-support (>=0.5.0, <=0.5.24), cc.vihackerframework:vihacker-kafka-starter (>=1.0.4.r, <=1.0.6.r) +815 more potentially affected by CVE-2022-22963 via org.springframework.cloud:spring-cloud-function-context (>=1.0.0.release, <=3.1.6)

org.springframework.cloud:spring-cloud-function-context MAVEN version =1.0.0.release, =0.5.0, =1.0.4.r, =1.0.6.r - ch.voulgarakis:spring-cloud-stream-binder-jms 1.0.0.release - city.smartb.f2:f2-spring-boot-starter-function 0.1.0 - city.smartb.f2:f2-spring-boot-starter-function-http 0.1.0 -...

Remote Code Execution

spring-cloud-function-context is vulnerable to remote code execution. The routing functionality allows a user to provide a malicious SpEL as a routing-expression which would allow arbitrary OS commands to be executed remotely...

CVE-2017-11698

Heap-based buffer overflow in the getpage function in lib/dbm/src/hpage.c in Mozilla Network Security Services NSS allows context-dependent attackers to have unspecified impact using a crafted cert8.db file...

CVE-2015-8789

Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size" followed by another element of an upper level in an EBML document...