cc.uncarbon.framework:helio-starter-cloud (>=1.2.1, <=1.3.0), com.alibaba.nacos:nacos-client (>=2.0.0-alpha.1, <=2.0.0-beta) potentially affected by CVE-2021-44667 via com.alibaba.nacos:nacos-common (>=2.0.0-alpha.1, <=2.0.0-beta)

com.alibaba.nacos:nacos-common MAVEN version =2.0.0-alpha.1, =1.2.1, =2.0.0-alpha.1, =2.0.0-beta Source cves: CVE-2021-44667 Source advisory: GHSA-4GR7-QW2Q-JXH6...

com.alibaba.csp:sentinel-datasource-nacos (0.2.0), com.alibaba.csp:sentinel-demo-nacos-datasource (0.2.0) +4 more potentially affected by CVE-2021-44667 via com.alibaba.nacos:nacos-common (0.2.0)

com.alibaba.nacos:nacos-common MAVEN version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-common and may be impacted: - com.alibaba.csp:sentinel-datasource-nacos 0.2.0 - com.alibaba.csp:sentinel-demo-nacos-datasource...

com.alibaba.nacos:nacos-client (0.3.0-rc1) potentially affected by CVE-2021-44667 via com.alibaba.nacos:nacos-common (0.3.0-rc1)

com.alibaba.nacos:nacos-common MAVEN version 0.3.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-common and may be impacted: - com.alibaba.nacos:nacos-client 0.3.0-rc1 Source cves: CVE-2021-44667 Source advisory:...

cc.cc4414:cc-spring-cloud-starter (>=0.3.0, <=0.8.0), cc.cc4414:cc-spring-cloud-starter-gateway (>=0.5.0, <=0.8.0) +909 more potentially affected by CVE-2021-44667 via com.alibaba.nacos:nacos-common (>=0.1.0, <=1.4.4)

com.alibaba.nacos:nacos-common MAVEN version =0.1.0, =0.3.0, =0.5.0, =1.0.2, =1.0.0, =1.0.4.r, =1.1, =1.1, =1.0.0.release, =0.0.2.alpha, =0.0.2.alpha, =0.0.4.beta, =1.0.0, =1.0.0, =2.1.0 and more Source cves: CVE-2021-44667 Source advisory: MEND:CVE-2021-44667...

cc.uncarbon.framework:helio-starter-cloud (>=1.2.1, <=1.3.0), com.alibaba.nacos:nacos-client (>=2.0.0-alpha.1, <=2.0.0-beta) potentially affected by CVE-2021-44667 via com.alibaba.nacos:nacos-common (>=2.0.0-alpha.1, <=2.0.0-beta)

com.alibaba.nacos:nacos-common MAVEN version =2.0.0-alpha.1, =1.2.1, =2.0.0-alpha.1, =2.0.0-beta Source cves: CVE-2021-44667 Source advisory: MEND:CVE-2021-44667...

Insecure Access Control

nacos-common uses insecure access control. The vulnerability exists due to the lack of full access control environment...

com.alibaba.boot:nacos-config-spring-boot-starter (>=0.1.0-rc1, <=0.2.1), com.alibaba.boot:nacos-discovery-spring-boot-starter (>=0.1.0-rc1, <=0.2.1) +4 more potentially affected by CVE-2020-19676 via com.alibaba.nacos:nacos-common (0.2.1-rc1)

com.alibaba.nacos:nacos-common MAVEN version 0.2.1-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-common and may be impacted: - com.alibaba.boot:nacos-config-spring-boot-starter =0.1.0-rc1, =0.1.0-rc1, =0.1.0-rc1, =0.1.0-rc...

com.alibaba.nacos:nacos-client (0.3.0-rc1) potentially affected by CVE-2020-19676 via com.alibaba.nacos:nacos-common (0.3.0-rc1)

com.alibaba.nacos:nacos-common MAVEN version 0.3.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-common and may be impacted: - com.alibaba.nacos:nacos-client 0.3.0-rc1 Source cves: CVE-2020-19676 Source advisory:...

com.alibaba.nacos:nacos-client (>=0.6.0, <=0.6.1), com.alibaba.nacos:nacos-config (>=0.6.0, <=0.6.1) +7 more potentially affected by CVE-2020-19676 via com.alibaba.nacos:nacos-common (0.6.0)

com.alibaba.nacos:nacos-common MAVEN version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-common and may be impacted: - com.alibaba.nacos:nacos-client =0.6.0, =0.6.0, =0.6.0, =0.6.0, =5.5.0, =5.5.0, =5.5.0, =6.0.1 -...

com.alibaba.csp:sentinel-datasource-nacos (1.4.1), com.alibaba.nacos:nacos-client (0.6.2) +13 more potentially affected by CVE-2020-19676 via com.alibaba.nacos:nacos-common (0.6.2)

com.alibaba.nacos:nacos-common MAVEN version 0.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-common and may be impacted: - com.alibaba.csp:sentinel-datasource-nacos 1.4.1 - com.alibaba.nacos:nacos-client 0.6.2 -...

cn.iisme.cloud:iisme-demos-nacos-core (1.0.1), cn.iisme.cloud:iisme-demos-nacos-web (1.0.1) +34 more potentially affected by CVE-2020-19676 via com.alibaba.nacos:nacos-common (0.8.0)

com.alibaba.nacos:nacos-common MAVEN version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-common and may be impacted: - cn.iisme.cloud:iisme-demos-nacos-core 1.0.1 - cn.iisme.cloud:iisme-demos-nacos-web 1.0.1 -...

com.alibaba.nacos:nacos-client (0.8.1) potentially affected by CVE-2020-19676 via com.alibaba.nacos:nacos-common (0.8.1)

com.alibaba.nacos:nacos-common MAVEN version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-common and may be impacted: - com.alibaba.nacos:nacos-client 0.8.1 Source cves: CVE-2020-19676 Source advisory:...

com.alibaba.nacos:nacos-client (0.9.0), org.nutz:nutzboot-starter-nacos-config-client (>=2.3.1.v20190318, <=2.3.7.v20190731) potentially affected by CVE-2020-19676 via com.alibaba.nacos:nacos-common (0.9.0)

com.alibaba.nacos:nacos-common MAVEN version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-common and may be impacted: - com.alibaba.nacos:nacos-client 0.9.0 - org.nutz:nutzboot-starter-nacos-config-client...

cc.cc4414:cc-spring-cloud-starter (>=0.3.0, <=0.7.0), cc.cc4414:cc-spring-cloud-starter-gateway (>=0.5.0, <=0.7.0) +244 more potentially affected by CVE-2020-19676 via com.alibaba.nacos:nacos-common (>=1.0.0-rc1, <=1.2.0-beta.1)

com.alibaba.nacos:nacos-common MAVEN version =1.0.0-rc1, =0.3.0, =0.5.0, =1.1, =1.1, =0.1.3, =1.00, =a.1.1.2, =a.1.1.2, =c.0.0.5 - cn.wizzer.app:wk-nb-service-cms 5.2.8-nacos - cn.wizzer.app:wk-nb-service-sys 5.2.8-nacos and more Source cves: CVE-2020-19676 Source advisory: GHSA-QF76-PR7X-H7R4...

com.alibaba.csp:sentinel-datasource-nacos (0.2.0), com.alibaba.csp:sentinel-demo-nacos-datasource (0.2.0) +4 more potentially affected by CVE-2020-19676 via com.alibaba.nacos:nacos-common (0.2.0)

com.alibaba.nacos:nacos-common MAVEN version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-common and may be impacted: - com.alibaba.csp:sentinel-datasource-nacos 0.2.0 - com.alibaba.csp:sentinel-demo-nacos-datasource...

com.alibaba.csp:sentinel-datasource-nacos (1.4.0), com.alibaba.nacos:nacos-client (0.2.1) potentially affected by CVE-2020-19676 via com.alibaba.nacos:nacos-common (0.2.1)

com.alibaba.nacos:nacos-common MAVEN version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-common and may be impacted: - com.alibaba.csp:sentinel-datasource-nacos 1.4.0 - com.alibaba.nacos:nacos-client 0.2.1 Source cves:...

com.alibaba.csp:sentinel-datasource-nacos (1.3.0-ga), com.alibaba.nacos:nacos-client (0.3.0) +9 more potentially affected by CVE-2020-19676 via com.alibaba.nacos:nacos-common (0.3.0)

com.alibaba.nacos:nacos-common MAVEN version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-common and may be impacted: - com.alibaba.csp:sentinel-datasource-nacos 1.3.0-ga - com.alibaba.nacos:nacos-client 0.3.0 -...

cc.cc4414:cc-spring-cloud-starter (>=0.3.0, <=0.7.0), cc.cc4414:cc-spring-cloud-starter-gateway (>=0.5.0, <=0.7.0) +244 more potentially affected by CVE-2020-19676 via com.alibaba.nacos:nacos-common (>=1.0.0-rc1, <=1.2.0-beta.1)

com.alibaba.nacos:nacos-common MAVEN version =1.0.0-rc1, =0.3.0, =0.5.0, =1.1, =1.1, =0.1.3, =1.00, =a.1.1.2, =a.1.1.2, =c.0.0.5 - cn.wizzer.app:wk-nb-service-cms 5.2.8-nacos - cn.wizzer.app:wk-nb-service-sys 5.2.8-nacos and more Source cves: CVE-2020-19676 Source advisory: OSV:GHSA-QF76-PR7X-H7R...

cc.cc4414:cc-spring-cloud-starter (>=0.3.0, <=0.8.0), cc.cc4414:cc-spring-cloud-starter-gateway (>=0.5.0, <=0.8.0) +436 more potentially affected by CVE-2021-29441 +1 more via com.alibaba.nacos:nacos-common (>=0.1.0, <=1.4.0)

com.alibaba.nacos:nacos-common MAVEN version =0.1.0, =0.3.0, =0.5.0, =1.0.0, =1.1, =1.1, =0.0.2.alpha, =0.0.2.alpha, =1.0.8, =1.4.0, =2021.6.0 - cn.iisme.cloud:iisme-demos-nacos-core 1.0.1 - cn.iisme.cloud:iisme-demos-nacos-web 1.0.1 - cn.iisme.cloud:iisme-gateway-nacos 1.0.1 -...

com.alibaba.nacos:nacos-client (0.5.0), com.alibaba.nacos:nacos-config (0.5.0) +7 more potentially affected by CVE-2021-29441 +1 more via com.alibaba.nacos:nacos-common (0.5.0)

com.alibaba.nacos:nacos-common MAVEN version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-common and may be impacted: - com.alibaba.nacos:nacos-client 0.5.0 - com.alibaba.nacos:nacos-config 0.5.0 -...