com.hazelcast:hazelcast-build-utils (3.12.9), com.hazelcast:hazelcast-client (3.12.9) +35 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.12.9)

com.hazelcast:hazelcast MAVEN version 3.12.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.12.9 - com.hazelcast:hazelcast-client 3.12.9 -...

cloud.piranha.extension:piranha-extension-hazelcast (>=23.6.0, <=23.11.0), com.bucket4j:bucket4j-hazelcast (>=8.5.0, <=8.9.0) +516 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (>=5.3.0, <=5.3.4)

com.hazelcast:hazelcast MAVEN version =5.3.0, =23.6.0, =8.5.0, =8.5.0, =1.1.15, =3.1.7, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.4 and more Source cves: CVE-2023-45860 Source advisory: OSV:GHSA-8H4X-XVJP-VF99...

Hazelcast Platform permission checking in CSV File Source connector

Impact In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector. This issue arises from inadequate permission checking, which could enable unauthorized clients to access data from files stored on a member's filesystem. Patches Fix...

com.hazelcast:hazelcast-build-utils (4.0.4), com.hazelcast:hazelcast-spring (4.0.4) potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (4.0.4)

com.hazelcast:hazelcast MAVEN version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.0.4 - com.hazelcast:hazelcast-spring 4.0.4 Source cves: CVE-2023-45860 Sour...

com.efluid.oss:efluid-datagate-app (>=3.1.22, <=5.1.6), com.efluid.oss:efluid-datagate-app-cucumber (>=3.1.22, <=5.1.6) +8 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (4.1.5)

com.hazelcast:hazelcast MAVEN version 4.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.efluid.oss:efluid-datagate-app =3.1.22, =3.1.22, =2.5.1, =3.11.2, =3.13.0 Source cves: CVE-2023-45860 Source...

cloud.piranha.extension:piranha-extension-hazelcast (>=21.11.0, <=22.11.0), cloud.piranha:debug (>=22.3.0, <=22.11.0) +254 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (>=5.0-beta-1, <=5.1.7)

com.hazelcast:hazelcast MAVEN version =5.0-beta-1, =21.11.0, =22.3.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.8.1 and more Source cves: CVE-2023-45860 Source advisory: GHSA-8H4X-XVJP-VF99...

com.efluid.oss:efluid-datagate-app (>=5.1.7, <=5.1.14), com.efluid.oss:efluid-datagate-app-cucumber (>=5.1.7, <=5.1.14) +8 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (4.1.8)

com.hazelcast:hazelcast MAVEN version 4.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.efluid.oss:efluid-datagate-app =5.1.7, =5.1.7, =4.32.0, =3.11.5, =3.11.7 Source cves: CVE-2023-45860 Source...

com.erudika:para-cache-hazelcast (1.30.0), com.hazelcast:hazelcast-build-utils (3.10.4) +28 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.10.4)

com.hazelcast:hazelcast MAVEN version 3.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.erudika:para-cache-hazelcast 1.30.0 - com.hazelcast:hazelcast-build-utils 3.10.4 -...

com.hazelcast:hazelcast-client (3.1.4), com.hazelcast:hazelcast-cloud (3.1.4) +6 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.1.4)

com.hazelcast:hazelcast MAVEN version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.1.4 - com.hazelcast:hazelcast-cloud 3.1.4 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-build-utils (4.2.1), com.hazelcast:hazelcast-hibernate5 (2.2.1) +35 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (4.2.1)

com.hazelcast:hazelcast MAVEN version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.2.1 - com.hazelcast:hazelcast-hibernate5 2.2.1 -...

com.bestellensoftware:jsync.io (>=1.10.0, <=1.10.1), com.erudika:para-server (>=1.18.2, <=1.18.3) +38 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.6.1)

com.hazelcast:hazelcast MAVEN version 3.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.bestellensoftware:jsync.io =1.10.0, =1.18.2, =1.18.3 - com.github.automately:automately-core 1.11.0 -...

com.hazelcast:hazelcast-client (3.1.6), com.hazelcast:hazelcast-cloud (3.1.6) +12 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.1.6)

com.hazelcast:hazelcast MAVEN version 3.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.1.6 - com.hazelcast:hazelcast-cloud 3.1.6 - com.hazelcast:hazelcast-hibernate...

cloud.piranha.extension:piranha-extension-hazelcast (>=23.6.0, <=23.11.0), com.bucket4j:bucket4j-hazelcast (>=8.5.0, <=8.9.0) +516 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (>=5.3.0, <=5.3.4)

com.hazelcast:hazelcast MAVEN version =5.3.0, =23.6.0, =8.5.0, =8.5.0, =1.1.15, =3.1.7, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.4 and more Source cves: CVE-2023-45860 Source advisory: GHSA-8H4X-XVJP-VF99...

com.buession.cas:buession-cas-session (>=2.3.0, <=2.3.2), com.buession.cas:buession-cas-session-hazelcast (>=2.3.0, <=2.3.2) +19 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (4.1.10)

com.hazelcast:hazelcast MAVEN version 4.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.buession.cas:buession-cas-session =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =3.15.17,...

cloud.piranha.extension:piranha-extension-hazelcast (>=22.12.0, <=23.4.0), cloud.piranha:debug (>=22.12.0, <=23.1.0) +210 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (>=5.2.0, <=5.2.4)

com.hazelcast:hazelcast MAVEN version =5.2.0, =22.12.0, =22.12.0, =23.1.0 - cn.vertxup:aeon-ambient 0.9.0 - cn.vertxup:aeon-aurora 0.9.0 - cn.vertxup:aeon-code 0.9.0 - cn.vertxup:aeon-cosmos 0.9.0 - cn.vertxup:aeon-ecology 0.9.0 - cn.vertxup:aeon-edge 0.9.0 - cn.vertxup:aeon-eternal 0.9.0 -...

com.hazelcast:hazelcast-client (3.1.7), com.hazelcast:hazelcast-cloud (3.1.7) +8 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.1.7)

com.hazelcast:hazelcast MAVEN version 3.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.1.7 - com.hazelcast:hazelcast-cloud 3.1.7 - com.hazelcast:hazelcast-hibernate...

com.corundumstudio.socketio:netty-socketio (>=1.7.10, <=1.7.18), com.hazelcast:hazelcast-build-utils (3.4.3) +8 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.4.3)

com.hazelcast:hazelcast MAVEN version 3.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.corundumstudio.socketio:netty-socketio =1.7.10, =1.7.18 - com.hazelcast:hazelcast-build-utils 3.4.3 -...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=1.0.7, <=2.0.3), com.github.wu191287278:spring-boot-starter-dubbo (>=1.5.3, <=1.5.33) +8 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.7.7)

com.hazelcast:hazelcast MAVEN version 3.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter =1.0.7, =1.5.3, =0.2.0, =0.2.0, =0.2.0, =0.2.0,...

com.hazelcast:hazelcast-all (1.9.3), com.hazelcast:hazelcast-client (1.9.3) +106 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (1.9.3)

com.hazelcast:hazelcast MAVEN version 1.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.3 - com.hazelcast:hazelcast-client 1.9.3 - com.hazelcast:hazelcast-hibernate 1.9....

com.englishtown:vertx-mod-hk2 (>=1.0.0-beta1, <=1.0.0-beta5), com.englishtown:vertx-mod-jersey (>=1.0.0-beta1, <=1.0.0-beta5) +11 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (2.5.1)

com.hazelcast:hazelcast MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.englishtown:vertx-mod-hk2 =1.0.0-beta1, =1.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1, =1.0.0-beta1, =2.0.0-beta1,...