asia.stampy:stampy-all (1.0-release), asia.stampy:stampy-examples (1.0-release) +2197 more potentially affected by CVE-2021-41973 via org.apache.mina:mina-core (>=2.0.0-m1, <=2.0.21)

org.apache.mina:mina-core MAVEN version =2.0.0-m1, =1.0.1.release, =1.1.8.release, =1.1.5.release, =2.7.4.0, =1.0.0.release, =1.0.0.release, =1.0.0.release, =1.0.2.release, =1.0.3.release - cn.javaboot:nacos-address 1.4.1 - cn.javaboot:nacos-console 1.4.1 - cn.javaboot:nacos-distribution 1.4.1 -...

mina-core: Retaining an open socket in close_notify SSL-TLS leading to Information disclosure.

A cryptographic protocol integrity flaw was discovered in Apache Mina. The closure of a TLS session would not always result in closure of the socket, allowing the conversation to continue in clear text. This could undermine the confidentiality of a connection and potentially disclose sensitive...