org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc1) +22 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (7.0.0.rc1)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc1 - org.eclipse.jetty.aggregate:jetty-all-server...

GHSA-W3GH-G32M-CVHR High severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, org.apache.cxf.fediz:fediz-spring, org.apache.cxf.fediz:fediz-spring2, and org.apache.cxf.fediz:fediz-spring3

Versions of Apache CXF Fediz prior to 1.4.4 do not fully disable Document Type Declarations DTDs when either parsing the Identity Provider response in the application plugins, or in the Identity Provider itself when parsing certain XML-based parameters...

Moderate severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, and org.apache.cxf.fediz:fediz-spring2

Apache CXF Fediz ships with a number of container-specific plugins to enable WS-Federation for applications. A CSRF Cross Style Request Forgery style vulnerability has been found in the Spring 2, Spring 3, Jetty 8 and Jetty 9 plugins in Apache CXF Fediz prior to 1.4.0, 1.3.2 and 1.2.4...

GHSA-WHW7-H25V-9QVX Moderate severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, and org.apache.cxf.fediz:fediz-spring2

Apache CXF Fediz ships with a number of container-specific plugins to enable WS-Federation for applications. A CSRF Cross Style Request Forgery style vulnerability has been found in the Spring 2, Spring 3, Jetty 8 and Jetty 9 plugins in Apache CXF Fediz prior to 1.4.0, 1.3.2 and 1.2.4...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.7.2), org.keycloak:keycloak-adapter-core (1.9.3.final) +43 more potentially affected by CVE-2016-8629 via org.keycloak:keycloak-core (1.9.3.final)

org.keycloak:keycloak-core MAVEN version 1.9.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.7.2 - org.keycloak:keycloak-adapter-core 1.9.3.fin...

com.bekk.boss:maven-jetty-pluto-embedded (1.0.1), de.eonas.portal:opencmsportal (>=8.5.1.1, <=10.5.1.9) +32 more potentially affected by CVE-2015-3192 via org.springframework:spring-web (2.0.2)

org.springframework:spring-web MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.bekk.boss:maven-jetty-pluto-embedded 1.0.1 - de.eonas.portal:opencmsportal =8.5.1.1, =8.5.1.1,...

org.apache.camel:camel-example-cxf (1.6.2), org.apache.camel:camel-jetty (1.6.2) potentially affected by CVE-2015-5348 via org.apache.camel:camel-http (1.6.2)

org.apache.camel:camel-http MAVEN version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-http and may be impacted: - org.apache.camel:camel-example-cxf 1.6.2 - org.apache.camel:camel-jetty 1.6.2 Source cves: CVE-2015-5348...

org.apache.camel:camel-example-cxf (1.4.0) potentially affected by CVE-2015-5348 via org.apache.camel:camel-jetty (1.4.0)

org.apache.camel:camel-jetty MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-jetty and may be impacted: - org.apache.camel:camel-example-cxf 1.4.0 Source cves: CVE-2015-5348 Source advisory:...

org.apache.camel:camel-example-cxf (1.6.3), org.apache.camel:camel-jetty (1.6.3) potentially affected by CVE-2015-5348 via org.apache.camel:camel-http (1.6.3)

org.apache.camel:camel-http MAVEN version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-http and may be impacted: - org.apache.camel:camel-example-cxf 1.6.3 - org.apache.camel:camel-jetty 1.6.3 Source cves: CVE-2015-5348...

org.apache.camel:camel-example-cxf (1.6.0), org.apache.camel:camel-jetty (1.6.0) potentially affected by CVE-2015-5348 via org.apache.camel:camel-http (1.6.0)

org.apache.camel:camel-http MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-http and may be impacted: - org.apache.camel:camel-example-cxf 1.6.0 - org.apache.camel:camel-jetty 1.6.0 Source cves: CVE-2015-5348...

org.apache.camel:camel-example-cxf (1.6.1) potentially affected by CVE-2015-5348 via org.apache.camel:camel-jetty (1.6.1)

org.apache.camel:camel-jetty MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-jetty and may be impacted: - org.apache.camel:camel-example-cxf 1.6.1 Source cves: CVE-2015-5348 Source advisory:...

org.apache.camel:camel-example-cxf (1.6.2) potentially affected by CVE-2015-5348 via org.apache.camel:camel-jetty (1.6.2)

org.apache.camel:camel-jetty MAVEN version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-jetty and may be impacted: - org.apache.camel:camel-example-cxf 1.6.2 Source cves: CVE-2015-5348 Source advisory:...

com.data-artisans:flakka-sample-camel-java_2.10 (2.3-custom), com.data-artisans:flakka-sample-camel-java_2.11 (2.3-custom) +36 more potentially affected by CVE-2015-5348 via org.apache.camel:camel-jetty (>=2.0-m1, <=2.15.2)

org.apache.camel:camel-jetty MAVEN version =2.0-m1, =1.0, =2.3.7, =1.0, =2.3.7, =2.1.0, =2.1.0-rc4, =2.1.0-rc6 and more Source cves: CVE-2015-5348 Source advisory: OSV:GHSA-26V6-W6FW-RH94...

org.apache.camel:camel-jetty (1.3.0), org.apache.servicemix.camel:org.apache.servicemix.camel.component (4.0-m1) potentially affected by CVE-2015-5348 via org.apache.camel:camel-http (1.3.0)

org.apache.camel:camel-http MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-http and may be impacted: - org.apache.camel:camel-jetty 1.3.0 - org.apache.servicemix.camel:org.apache.servicemix.camel.component...

org.apache.activemq:apache-activemq (5.2.0), org.apache.camel:camel-example-cxf (1.5.0) potentially affected by CVE-2015-5348 via org.apache.camel:camel-jetty (1.5.0)

org.apache.camel:camel-jetty MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-jetty and may be impacted: - org.apache.activemq:apache-activemq 5.2.0 - org.apache.camel:camel-example-cxf 1.5.0 Source cves:...

org.apache.camel:camel-example-cxf (1.6.4), org.apache.camel:camel-jetty (1.6.4) potentially affected by CVE-2015-5348 via org.apache.camel:camel-http (1.6.4)

org.apache.camel:camel-http MAVEN version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-http and may be impacted: - org.apache.camel:camel-example-cxf 1.6.4 - org.apache.camel:camel-jetty 1.6.4 Source cves: CVE-2015-5348...

org.apache.servicemix.camel:org.apache.servicemix.camel.component (4.0-m1) potentially affected by CVE-2015-5348 via org.apache.camel:camel-jetty (1.3.0)

org.apache.camel:camel-jetty MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-jetty and may be impacted: - org.apache.servicemix.camel:org.apache.servicemix.camel.component 4.0-m1 Source cves: CVE-2015-5348...

org.apache.camel:camel-example-cxf (1.6.0) potentially affected by CVE-2015-5348 via org.apache.camel:camel-jetty (1.6.0)

org.apache.camel:camel-jetty MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-jetty and may be impacted: - org.apache.camel:camel-example-cxf 1.6.0 Source cves: CVE-2015-5348 Source advisory:...

org.apache.camel:camel-jetty (1.2.0) potentially affected by CVE-2015-5348 via org.apache.camel:camel-http (1.2.0)

org.apache.camel:camel-http MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-http and may be impacted: - org.apache.camel:camel-jetty 1.2.0 Source cves: CVE-2015-5348 Source advisory: OSV:GHSA-26V6-W6FW-RH94...

com.data-artisans:flakka-sample-camel-java_2.10 (2.3-custom), com.data-artisans:flakka-sample-camel-java_2.11 (2.3-custom) +36 more potentially affected by CVE-2015-5348 via org.apache.camel:camel-jetty (>=2.0-m1, <=2.15.2)

org.apache.camel:camel-jetty MAVEN version =2.0-m1, =1.0, =2.3.7, =1.0, =2.3.7, =2.1.0, =2.1.0-rc4, =2.1.0-rc6 and more Source cves: CVE-2015-5348 Source advisory: GHSA-26V6-W6FW-RH94...