com.jayqqaa12:jbase (>=2.9.6, <=3.0.3), com.jfinal:jfinal-ext2 (>=2.0.3, <=2.0.4) +4 more potentially affected by CVE-2019-17352 via com.jfinal:jfinal (2.1)

com.jfinal:jfinal MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jayqqaa12:jbase =2.9.6, =2.0.3, =1.6, =1.7 - com.jflyfox:jflyfoxjfinal 4.0 - net.dreamlu:jfinal-assets 0.0.3 -...

com.github.sunlin901203:sunny (>=0.0.1, <=0.0.4), com.ibeetl:beetl (>=2.2.5, <=2.7.5) +8 more potentially affected by CVE-2019-17352 via com.jfinal:jfinal (2.0)

com.jfinal:jfinal MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.sunlin901203:sunny =0.0.1, =2.2.5, =1.0.0, =2.5, =1.3, =0.0.1, =0.0.1, =0.0.3 - net.xwzhou.commons:commons 0.0.2 -...

com.github.jieblog:jfinal-shiro (>=1.0, <=3.1.0), com.github.piaohao:act-jfinal (1.0) +9 more potentially affected by CVE-2019-17352 via com.jfinal:jfinal (3.1)

com.jfinal:jfinal MAVEN version 3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.jieblog:jfinal-shiro =1.0, =1.0-alpha2, =1.5.3, =1.0.0, =1.8.0, =1.8.2 Source cves: CVE-2019-17352 Source advisory:...

cn.dreampie:jfinal-dreampie (>=1.0, <=1.2.2), cn.dreampie:jfinal-lesscss (0.1) +8 more potentially affected by CVE-2019-17352 via com.jfinal:jfinal (1.9)

com.jfinal:jfinal MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.dreampie:jfinal-dreampie =1.0, =0.1, =0.1, =2.4.0, =3.1.3, =0.1, =0.0.1, =0.0.3 Source cves: CVE-2019-17352 Source advisory:...

cn.eova:eova (>=1.6-beta6, <=1.6.0), cn.zcltd.btg:btg-autoroute-jfinal (3.0.4) +12 more potentially affected by CVE-2019-17352 via com.jfinal:jfinal (3.4)

com.jfinal:jfinal MAVEN version 3.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.eova:eova =1.6-beta6, =0.0.2, =3.0.1, =1.3.0, =1.0.0, =2.3.0.v20180506-release, =2.3.0.v20180506-release,...

cn.fsdev:jfinal-mail-plugin (3.0), cn.yerl.web:spring-boot-starter-sso-client (1.0.0) +10 more potentially affected by CVE-2021-31649 via com.jfinal:jfinal (3.0)

com.jfinal:jfinal MAVEN version 3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.fsdev:jfinal-mail-plugin 3.0 - cn.yerl.web:spring-boot-starter-sso-client 1.0.0 - com.ejlchina:bean-searcher =1.1.1, =0.2,...

GHSA-H3J8-FR5Q-8RFR JFinal Java Deserialization Vulnerability

In applications using jfinal 4.9.08 and below, there is a deserialization vulnerability when using redis which can lead to remote code execution...

cn.eova:eova (>=1.6-beta6, <=1.6.0), cn.zcltd.btg:btg-autoroute-jfinal (3.0.4) +12 more potentially affected by CVE-2021-31649 via com.jfinal:jfinal (3.4)

com.jfinal:jfinal MAVEN version 3.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.eova:eova =1.6-beta6, =0.0.2, =3.0.1, =1.3.0, =1.0.0, =2.3.0.v20180506-release, =2.3.0.v20180506-release,...

cn.eova:eova (>=1.6-beta4, <=1.6-beta5), cn.zcltd.btg:btg-autoroute-jfinal (3.0.3) +11 more potentially affected by CVE-2021-31649 via com.jfinal:jfinal (3.3)

com.jfinal:jfinal MAVEN version 3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.eova:eova =1.6-beta4, =1.0, =2.0.4, =1.0.0, =0.0.1, =2.0.2.v20171129-release, =2.2.0.v20180405-release Source cves:...

cc.jweb:jweb-boot (>=1.0.0, <=1.0.1), cn.benma666:sql-jfinal (>=3.30.7-release, <=3.30.11-release) +33 more potentially affected by CVE-2021-31649 via com.jfinal:jfinal (>=4.0, <=4.9.08)

com.jfinal:jfinal MAVEN version =4.0, =1.0.0, =3.30.7-release, =1.0, =1.2.0, =2.0.4, =3.14.1.release, =3.0.2-release, =1.8, =2.4, =3.1 and more Source cves: CVE-2021-31649 Source advisory: GHSA-H3J8-FR5Q-8RFR...

cc.jweb:jweb-boot (>=1.0.0, <=1.0.1), cn.benma666:sql-jfinal (>=3.30.7-release, <=3.30.11-release) +33 more potentially affected by CVE-2021-31649 via com.jfinal:jfinal (>=4.0, <=4.9.08)

com.jfinal:jfinal MAVEN version =4.0, =1.0.0, =3.30.7-release, =1.0, =1.2.0, =2.0.4, =3.14.1.release, =3.0.2-release, =1.8, =2.4, =3.1 and more Source cves: CVE-2021-31649 Source advisory: OSV:GHSA-H3J8-FR5Q-8RFR...

cn.51daxia:zzz-websocket (>=1.0, <=1.1), com.github.grtechtv:enjoy-mapper (1.0.0) +17 more potentially affected by CVE-2021-31649 via com.jfinal:jfinal (3.8)

com.jfinal:jfinal MAVEN version 3.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.51daxia:zzz-websocket =1.0, =1.1 - com.github.grtechtv:enjoy-mapper 1.0.0 -...

cn.com.itez:jwinner-base (>=0.0.8, <=0.1.2), cn.com.itez:jwinner-core (>=0.0.8, <=0.1.2) +13 more potentially affected by CVE-2021-31649 via com.jfinal:jfinal (3.5)

com.jfinal:jfinal MAVEN version 3.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.com.itez:jwinner-base =0.0.8, =0.0.8, =0.0.8, =4.0.1, =1.0, =2018.9, =1.0, =1.7.0, =3.2.1.v20181024-release,...

com.github.subchen:jetbrick-template (>=1.0.0, <=1.2.6), com.github.zqq90.webit-script:webit-script (>=1.2.2, <=1.4.0) +3 more potentially affected by CVE-2021-31649 via com.jfinal:jfinal (1.5)

com.jfinal:jfinal MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.subchen:jetbrick-template =1.0.0, =1.2.2, =1.4.1, =2.0.0-beta, =2.7.0-beta Source cves: CVE-2021-31649 Source...

cn.eova:eova (>=1.6-beta2, <=1.6-beta3), cn.liangyuen:jfinal-slf4j (1.0) +7 more potentially affected by CVE-2021-31649 via com.jfinal:jfinal (3.2)

com.jfinal:jfinal MAVEN version 3.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.eova:eova =1.6-beta2, =1.0, =1.3, =2.0.0, =1.0.0.v20180413-release, =1.0.0.v20180413-release, =2.0.0.v20170824-release,...

com.github.sogyf:jfinal-app (0.0.9), org.beetl:beetl-core (>=2.0.2, <=2.2.3) potentially affected by CVE-2021-31649 via com.jfinal:jfinal (1.6)

com.jfinal:jfinal MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.sogyf:jfinal-app 0.0.9 - org.beetl:beetl-core =2.0.2, =2.2.3 Source cves: CVE-2021-31649 Source advisory:...

com.github.sunlin901203:sunny (>=0.0.1, <=0.0.4), com.ibeetl:beetl (>=2.2.5, <=2.7.5) +8 more potentially affected by CVE-2021-31649 via com.jfinal:jfinal (2.0)

com.jfinal:jfinal MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.sunlin901203:sunny =0.0.1, =2.2.5, =1.0.0, =2.5, =1.3, =0.0.1, =0.0.1, =0.0.3 - net.xwzhou.commons:commons 0.0.2 -...

cn.dreampie:jfinal-dreampie (>=1.0, <=1.2.2), cn.dreampie:jfinal-lesscss (0.1) +8 more potentially affected by CVE-2021-31649 via com.jfinal:jfinal (1.9)

com.jfinal:jfinal MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - cn.dreampie:jfinal-dreampie =1.0, =0.1, =0.1, =2.4.0, =3.1.3, =0.1, =0.0.1, =0.0.3 Source cves: CVE-2021-31649 Source advisory:...

com.jayqqaa12:jbase (>=2.9.6, <=3.0.3), com.jfinal:jfinal-ext2 (>=2.0.3, <=2.0.4) +4 more potentially affected by CVE-2021-31649 via com.jfinal:jfinal (2.1)

com.jfinal:jfinal MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jayqqaa12:jbase =2.9.6, =2.0.3, =1.6, =1.7 - com.jflyfox:jflyfoxjfinal 4.0 - net.dreamlu:jfinal-assets 0.0.3 -...

JFinal Java Deserialization Vulnerability

In applications using jfinal 4.9.08 and below, there is a deserialization vulnerability when using redis which can lead to remote code execution...