org.ryoframework.core:ryo-application-micronaut (>=1.1.1, <=1.3.1) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (1.1.2)

io.micronaut:micronaut-http-server-netty MAVEN version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - org.ryoframework.core:ryo-application-micronaut =1.1.1, =1.3.1 Source cves:...

io.micronaut:micronaut-function-web (1.2.4), io.micronaut:micronaut-http-server-netty (1.2.4) +1 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.2.4)

io.micronaut:micronaut-http-server MAVEN version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut:micronaut-function-web 1.2.4 - io.micronaut:micronaut-http-server-netty 1.2.4 ...

com.slack.api:bolt-micronaut (>=1.2.0-rc1, <=1.2.1) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.0.3)

io.micronaut:micronaut-http-server-netty MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut =1.2.0-rc1, =1.2.1 Source cves: CVE-2024-23639...

com.slack.api:bolt-micronaut (>=1.10.0-rc1, <=1.10.0-rc2) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.5.11)

io.micronaut:micronaut-http-server-netty MAVEN version 2.5.11 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut =1.10.0-rc1, =1.10.0-rc2 Source cves:...

com.agorapulse:micronaut-slack-http (>=1.0.1-micronaut-3.0, <=1.0.4-micronaut-3.0), com.exactpro.th2:th2-cr-converter (>=1.3.0, <=1.3.1) +98 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (>=3.0.0-m1, <=3.8.2)

io.micronaut:micronaut-http-server MAVEN version =3.0.0-m1, =1.0.1-micronaut-3.0, =1.3.0, =2.0.0, =2.4.0, =1.16.0, =0.7.0, =0.0.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.2.1 and more Source cves: CVE-2024-23639 Source advisory: OSV:GHSA-583G-G682-CRXF...

com.slack.api:bolt-micronaut (1.0.7), io.micronaut.azure:micronaut-azure-function-http (1.0.0.m1) +10 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.3.4)

io.micronaut:micronaut-http-server MAVEN version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - com.slack.api:bolt-micronaut 1.0.7 - io.micronaut.azure:micronaut-azure-function-http...

com.slack.api:bolt-micronaut (1.9.0) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.5.9)

io.micronaut:micronaut-http-server-netty MAVEN version 2.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut 1.9.0 Source cves: CVE-2024-23639 Source advisory:...

io.micronaut.configuration:micronaut-security-ldap (1.1.0.rc1), io.micronaut:micronaut-function-web (1.1.0.rc1) +6 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.1.0.rc1)

io.micronaut:micronaut-http-server MAVEN version 1.1.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-security-ldap 1.1.0.rc1 -...

com.slack.api:bolt-micronaut (>=1.4.1, <=1.4.2), io.micronaut:micronaut-function-web (2.2.1) +2 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.2.1)

io.micronaut:micronaut-http-server MAVEN version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - com.slack.api:bolt-micronaut =1.4.1, =1.4.2 - io.micronaut:micronaut-function-web 2.2.1 -...

io.micronaut:micronaut-function-web (1.2.7), io.micronaut:micronaut-http-server-netty (1.2.7) +1 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.2.7)

io.micronaut:micronaut-http-server MAVEN version 1.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut:micronaut-function-web 1.2.7 - io.micronaut:micronaut-http-server-netty 1.2.7 ...

io.micronaut.configuration:micronaut-security-ldap (1.0.5), io.micronaut:micronaut-function-web (1.0.5) +6 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.0.5)

io.micronaut:micronaut-http-server MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-security-ldap 1.0.5 -...

io.micronaut.configuration:micronaut-security-ldap (1.1.0.m1), io.micronaut:micronaut-function-web (1.1.0.m1) +6 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.1.0.m1)

io.micronaut:micronaut-http-server MAVEN version 1.1.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-security-ldap 1.1.0.m1 -...

io.micronaut:micronaut-function-web (1.1.1), io.micronaut:micronaut-http-server-netty (1.1.1) +3 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.1.1)

io.micronaut:micronaut-http-server MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut:micronaut-function-web 1.1.1 - io.micronaut:micronaut-http-server-netty 1.1.1 ...

com.github.jasontypescodes:mn-config-based-auth (0.1.0), io.archimedesfw.security:archimedes-security (>=0.0.1, <=0.0.2) +13 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.4.2)

io.micronaut:micronaut-http-server MAVEN version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - com.github.jasontypescodes:mn-config-based-auth 0.1.0 -...

io.micronaut.configuration:micronaut-multitenancy-gorm (>=2.0.0.m1, <=2.0.0.m3), io.micronaut.configuration:micronaut-security-ldap (2.0.0.m2) +14 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.0.0.m3)

io.micronaut:micronaut-http-server MAVEN version 2.0.0.m3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-multitenancy-gorm =2.0.0.m1, =2.0.0.m3 -...

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2024-1143)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-1172)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-1192)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-23452

Request smuggling vulnerability in HTTP server in Apache bRPC 0.9.51.7.0 on all platforms allows attacker to smuggle request. Vulnerability Cause Description： The httpparser does not comply with the RFC-7230 HTTP 1.1 specification. Attack scenario: If a message is received with both a...

Cross site request forgery (csrf)

Request smuggling vulnerability in HTTP server in Apache bRPC 0.9.51.7.0 on all platforms allows attacker to smuggle request. Vulnerability Cause Description: The httpparser does not comply with the RFC-7230 HTTP 1.1 specification. Attack scenario: If a message is received with both a...