io.jooby:jooby-jstachio (3.0.0.m9), io.jstach:jstachio-jmustache (0.17.0) +5 more potentially affected by CVE-2023-33962 via io.jstach:jstachio (0.17.0)

io.jstach:jstachio MAVEN version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.jstach:jstachio and may be impacted: - io.jooby:jooby-jstachio 3.0.0.m9 - io.jstach:jstachio-jmustache 0.17.0 - io.jstach:jstachio-spring 0.17.0 -...

io.mangoo:mangooio-core (>=2.0.0-rc2, <=2.0.0-rc3), io.mangoo:mangooio-integration-test (>=2.0.0-rc2, <=2.0.0-rc3) +24 more potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.3.9.final)

io.undertow:undertow-core MAVEN version 1.3.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.mangoo:mangooio-core =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =0.12.0, =0.12.0, =0.13.1 -...

io.mangoo:mangooio-core (>=2.0.0-rc2, <=2.0.0-rc3), io.mangoo:mangooio-integration-test (>=2.0.0-rc2, <=2.0.0-rc3) +24 more potentially affected by CVE-2021-3690 via io.undertow:undertow-core (1.3.9.final)

io.undertow:undertow-core MAVEN version 1.3.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.mangoo:mangooio-core =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =0.12.0, =0.12.0, =0.13.1 -...

io.skullabs.kikaha:kikaha-core (>=2.0.0-beta1, <=2.0.0-beta4), io.skullabs.kikaha:kikaha-db (>=2.0.0-beta1, <=2.0.0-beta4) +11 more potentially affected by CVE-2021-3629 via io.undertow:undertow-core (1.3.20.final)

io.undertow:undertow-core MAVEN version 1.3.20.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.skullabs.kikaha:kikaha-core =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1,...

io.mangoo:mangooio-core (>=2.0.0-rc2, <=2.0.0-rc3), io.mangoo:mangooio-integration-test (>=2.0.0-rc2, <=2.0.0-rc3) +24 more potentially affected by CVE-2021-3597 via io.undertow:undertow-core (1.3.9.final)

io.undertow:undertow-core MAVEN version 1.3.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.mangoo:mangooio-core =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =0.12.0, =0.12.0, =0.13.1 -...

io.skullabs.kikaha:kikaha-core (>=2.0.0-beta1, <=2.0.0-beta4), io.skullabs.kikaha:kikaha-db (>=2.0.0-beta1, <=2.0.0-beta4) +11 more potentially affected by CVE-2021-3597 via io.undertow:undertow-core (1.3.20.final)

io.undertow:undertow-core MAVEN version 1.3.20.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.skullabs.kikaha:kikaha-core =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1,...

io.undertow:undertow-servlet (1.4.9.final), io.undertow:undertow-websockets-jsr (1.4.9.final) +1 more potentially affected by CVE-2020-1757 via io.undertow:undertow-core (1.4.9.final)

io.undertow:undertow-core MAVEN version 1.4.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.9.final - io.undertow:undertow-websockets-jsr 1.4.9.final -...

io.mangoo:mangooio-core (>=2.0.0-rc2, <=2.0.0-rc3), io.mangoo:mangooio-integration-test (>=2.0.0-rc2, <=2.0.0-rc3) +24 more potentially affected by CVE-2020-1757 via io.undertow:undertow-core (1.3.9.final)

io.undertow:undertow-core MAVEN version 1.3.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.mangoo:mangooio-core =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =0.12.0, =0.12.0, =0.13.1 -...

io.mangoo:mangooio-core (>=2.0.0-rc2, <=2.0.0-rc3), io.mangoo:mangooio-integration-test (>=2.0.0-rc2, <=2.0.0-rc3) +24 more potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.3.9.final)

io.undertow:undertow-core MAVEN version 1.3.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.mangoo:mangooio-core =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =0.12.0, =0.12.0, =0.13.1 -...

io.skullabs.kikaha:kikaha-core (>=2.0.0-beta1, <=2.0.0-beta4), io.skullabs.kikaha:kikaha-db (>=2.0.0-beta1, <=2.0.0-beta4) +11 more potentially affected by CVE-2019-14888 via io.undertow:undertow-core (1.3.20.final)

io.undertow:undertow-core MAVEN version 1.3.20.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.skullabs.kikaha:kikaha-core =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1,...

com.jakehschwartz:finatra-swagger_2.12 (18.8.0), com.whisk:finatra-swagger_2.12 (18.9.1-whisk) +3 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.14.2)

org.webjars:swagger-ui MAVEN version 3.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - com.jakehschwartz:finatra-swagger2.12 18.8.0 - com.whisk:finatra-swagger2.12 18.9.1-whisk - io.virtualan:idaiserve...

org.apache.syncope.fit:syncope-fit-build-tools (>=2.0.9, <=2.1.0), org.jooby:jooby-apitool (>=1.5.0, <=1.6.9) +1 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.17.1)

org.webjars:swagger-ui MAVEN version 3.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - org.apache.syncope.fit:syncope-fit-build-tools =2.0.9, =1.5.0, =1.5.0, =1.6.9 Source cves: CVE-2018-25031 Source...

org.jooby:jooby-apitool (>=1.2.0, <=1.2.3), org.jooby:jooby-maven-plugin (>=1.2.0, <=1.2.3) +1 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.1.6)

org.webjars:swagger-ui MAVEN version 3.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - org.jooby:jooby-apitool =1.2.0, =1.2.0, =1.2.0, =1.2.3 Source cves: CVE-2018-25031 Source advisory:...

io.undertow:undertow-servlet (1.4.9.final), io.undertow:undertow-websockets-jsr (1.4.9.final) +1 more potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.4.9.final)

io.undertow:undertow-core MAVEN version 1.4.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.9.final - io.undertow:undertow-websockets-jsr 1.4.9.final -...

io.mangoo:mangooio-core (>=2.0.0-rc2, <=2.0.0-rc3), io.mangoo:mangooio-integration-test (>=2.0.0-rc2, <=2.0.0-rc3) +24 more potentially affected by CVE-2020-10705 via io.undertow:undertow-core (1.3.9.final)

io.undertow:undertow-core MAVEN version 1.3.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.mangoo:mangooio-core =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =0.12.0, =0.12.0, =0.13.1 -...

io.skullabs.kikaha:kikaha-core (>=2.0.0-beta1, <=2.0.0-beta4), io.skullabs.kikaha:kikaha-db (>=2.0.0-beta1, <=2.0.0-beta4) +11 more potentially affected by CVE-2020-10719 via io.undertow:undertow-core (1.3.20.final)

io.undertow:undertow-core MAVEN version 1.3.20.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.skullabs.kikaha:kikaha-core =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1,...

io.undertow:undertow-servlet (1.4.9.final), io.undertow:undertow-websockets-jsr (1.4.9.final) +1 more potentially affected by CVE-2020-10719 via io.undertow:undertow-core (1.4.9.final)

io.undertow:undertow-core MAVEN version 1.4.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.9.final - io.undertow:undertow-websockets-jsr 1.4.9.final -...

GHSA-PX9H-X66R-8MPC path traversal in Jooby

Impact Access to sensitive information available from classpath. Patches Patched version: 1.6.7 and 2.8.2 Commit 1.x: https://github.com/jooby-project/jooby/commit/34f526028e6cd0652125baa33936ffb6a8a4a009 Commit 2.x:...

org.jooby:jooby-akka (1.4.0), org.jooby:jooby-apitool (1.4.0) +87 more potentially affected by CVE-2020-7647 via org.jooby:jooby (1.4.0)

org.jooby:jooby MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:jooby-akka 1.4.0 - org.jooby:jooby-apitool 1.4.0 - org.jooby:jooby-assets 1.4.0 - org.jooby:jooby-assets-autoprefixer...

org.jooby:jooby-akka (1.6.3), org.jooby:jooby-apitool (1.6.3) +84 more potentially affected by CVE-2020-7647 via org.jooby:jooby (1.6.3)

org.jooby:jooby MAVEN version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:jooby-akka 1.6.3 - org.jooby:jooby-apitool 1.6.3 - org.jooby:jooby-assets 1.6.3 - org.jooby:jooby-assets-autoprefixer...