jooby

∞ do more, more easily Jooby a modular micro web framework for Java and Kotlin: Java: import org.jooby.Jooby; public class App extends Jooby get"/", - "Hey Jooby!"; public static void mainfinal String args runApp::new, args; Kotlin: import org.jooby. class App: Kooby get "Hello Jooby!" fun...

org.jooby:jooby-pac4j (>=1.3.0, <=1.6.9), org.pac4j:pac4j-cas (1.9.9) +12 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (1.9.9)

org.pac4j:pac4j-core MAVEN version 1.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.jooby:jooby-pac4j =1.3.0, =1.6.9 - org.pac4j:pac4j-cas 1.9.9 - org.pac4j:pac4j-config 1.9.9 - org.pac4j:pac4j-gae...

io.jooby:jooby-pac4j (>=2.9.3, <=2.9.4), org.apereo.cas:cas-server-core (6.3.0-rc5) +348 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (4.2.0)

org.pac4j:pac4j-core MAVEN version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.jooby:jooby-pac4j =2.9.3, =2.9.4 - org.apereo.cas:cas-server-core 6.3.0-rc5 - org.apereo.cas:cas-server-core-audit...

io.buji:buji-pac4j (5.0.1), io.jooby:jooby-pac4j (2.8.4) +346 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (4.0.1)

org.pac4j:pac4j-core MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.buji:buji-pac4j 5.0.1 - io.jooby:jooby-pac4j 2.8.4 - org.apereo.cas:cas-server-core 6.2.0-rc5 -...

io.mangoo:mangooio-core (>=2.0.0-rc2, <=2.0.0-rc3), io.mangoo:mangooio-integration-test (>=2.0.0-rc2, <=2.0.0-rc3) +24 more potentially affected by CVE-2024-4027 via io.undertow:undertow-core (1.3.9.final)

io.undertow:undertow-core MAVEN version 1.3.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.mangoo:mangooio-core =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =0.12.0, =0.12.0, =0.13.1 -...

io.undertow:undertow-servlet (1.4.9.final), io.undertow:undertow-websockets-jsr (1.4.9.final) +1 more potentially affected by CVE-2024-4027 via io.undertow:undertow-core (1.4.9.final)

io.undertow:undertow-core MAVEN version 1.4.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.9.final - io.undertow:undertow-websockets-jsr 1.4.9.final -...

io.skullabs.kikaha:kikaha-core (>=2.0.0-beta1, <=2.0.0-beta4), io.skullabs.kikaha:kikaha-db (>=2.0.0-beta1, <=2.0.0-beta4) +11 more potentially affected by CVE-2024-4027 via io.undertow:undertow-core (1.3.20.final)

io.undertow:undertow-core MAVEN version 1.3.20.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.skullabs.kikaha:kikaha-core =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1,...

CVE-2020-7647

All versions before 1.6.7 and all versions after 2.0.0 inclusive and before 2.8.2 of io.jooby:jooby and org.jooby:jooby are vulnerable to Directory Traversal via two separate vectors...

io.undertow:undertow-servlet (1.4.9.final), io.undertow:undertow-websockets-jsr (1.4.9.final) +1 more potentially affected by CVE-2025-12543 via io.undertow:undertow-core (1.4.9.final)

io.undertow:undertow-core MAVEN version 1.4.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.9.final - io.undertow:undertow-websockets-jsr 1.4.9.final -...

io.skullabs.kikaha:kikaha-core (>=2.0.0-beta1, <=2.0.0-beta4), io.skullabs.kikaha:kikaha-db (>=2.0.0-beta1, <=2.0.0-beta4) +11 more potentially affected by CVE-2025-12543 via io.undertow:undertow-core (1.3.20.final)

io.undertow:undertow-core MAVEN version 1.3.20.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.skullabs.kikaha:kikaha-core =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1,...

io.skullabs.kikaha:kikaha-core (>=2.0.0-beta1, <=2.0.0-beta4), io.skullabs.kikaha:kikaha-db (>=2.0.0-beta1, <=2.0.0-beta4) +11 more potentially affected by CVE-2024-3884 via io.undertow:undertow-core (1.3.20.final)

io.undertow:undertow-core MAVEN version 1.3.20.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.skullabs.kikaha:kikaha-core =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1,...

EUVD-2019-0631

Malware in sbrugna...

EUVD-2025-9309

Malicious code in bioql PyPI...

io.undertow:undertow-servlet (1.4.9.final), io.undertow:undertow-websockets-jsr (1.4.9.final) +1 more potentially affected by CVE-2025-9784 via io.undertow:undertow-core (1.4.9.final)

io.undertow:undertow-core MAVEN version 1.4.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.9.final - io.undertow:undertow-websockets-jsr 1.4.9.final -...

io.skullabs.kikaha:kikaha-core (>=2.0.0-beta1, <=2.0.0-beta4), io.skullabs.kikaha:kikaha-db (>=2.0.0-beta1, <=2.0.0-beta4) +11 more potentially affected by CVE-2025-9784 via io.undertow:undertow-core (1.3.20.final)

io.undertow:undertow-core MAVEN version 1.3.20.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.skullabs.kikaha:kikaha-core =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1,...

CVE-2019-15477

Jooby before 1.6.4 has XSS via the default error handler...

CVE-2025-31129

Jooby is a web framework for Java and Kotlin. The pac4j io.jooby.internal.pac4j.SessionStoreImplget module deserializes untrusted data. This vulnerability is fixed in 2.17.0 2.x and 3.7.0 3.x...

CVE-2025-31129

Jooby is a web framework for Java and Kotlin. The pac4j io.jooby.internal.pac4j.SessionStoreImplget module deserializes untrusted data. This vulnerability is fixed in 2.17.0 2.x and 3.7.0 3.x...

CVE-2025-31129

Jooby is a web framework for Java and Kotlin. The pac4j io.jooby.internal.pac4j.SessionStoreImplget module deserializes untrusted data. This vulnerability is fixed in 2.17.0 2.x and 3.7.0 3.x...

CVE-2025-31129 jooby-pac4j: deserialization of untrusted data

Jooby is a web framework for Java and Kotlin. The pac4j io.jooby.internal.pac4j.SessionStoreImplget module deserializes untrusted data. This vulnerability is fixed in 2.17.0 2.x and 3.7.0 3.x...