EUVD-2020-0274

Malware in sbrugna...

CVE-2019-10770

All versions of io.ratpack:ratpack-core from 0.9.10 inclusive and before 1.7.6 are vulnerable to Cross-site Scripting XSS. This affects the development mode error handler when an exception message contains untrusted data. Note the production mode error handler is not vulnerable - so for this to b...

io.ratpack:ratpack-codahale-metrics (0.9.10), io.ratpack:ratpack-groovy (0.9.10) +16 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (0.9.10)

io.ratpack:ratpack-core MAVEN version 0.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.10 - io.ratpack:ratpack-groovy 0.9.10 - io.ratpack:ratpack-groovy-test...

io.ratpack:ratpack-codahale-metrics (0.9.4), io.ratpack:ratpack-groovy (0.9.4) +14 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (0.9.4)

io.ratpack:ratpack-core MAVEN version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.4 - io.ratpack:ratpack-groovy 0.9.4 - io.ratpack:ratpack-groovy-test 0.9....

com.bertramlabs.plugins:ratpack-asset-pipeline (>=2.3.11, <=2.4.3), io.ratpack:ratpack-codahale-metrics (0.9.18) +17 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (0.9.18)

io.ratpack:ratpack-core MAVEN version 0.9.18 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - com.bertramlabs.plugins:ratpack-asset-pipeline =2.3.11, =2.4.3 - io.ratpack:ratpack-codahale-metrics 0.9.18 -...

io.ratpack:ratpack-codahale-metrics (0.9.3), io.ratpack:ratpack-groovy (0.9.3) +14 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (0.9.3)

io.ratpack:ratpack-core MAVEN version 0.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.3 - io.ratpack:ratpack-groovy 0.9.3 - io.ratpack:ratpack-groovy-test 0.9....

io.ratpack:ratpack-codahale-metrics (0.9.16), io.ratpack:ratpack-groovy (0.9.16) +16 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (0.9.16)

io.ratpack:ratpack-core MAVEN version 0.9.16 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.16 - io.ratpack:ratpack-groovy 0.9.16 - io.ratpack:ratpack-groovy-test...

com.bertramlabs.plugins:ratpack-asset-pipeline (2.5.1), io.jdev.miniprofiler:miniprofiler-ratpack (>=0.5, <=0.5.1) +18 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (0.9.19)

io.ratpack:ratpack-core MAVEN version 0.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - com.bertramlabs.plugins:ratpack-asset-pipeline 2.5.1 - io.jdev.miniprofiler:miniprofiler-ratpack =0.5, =0.5.1 -...

io.ratpack:ratpack-codahale-metrics (0.9.12), io.ratpack:ratpack-groovy (0.9.12) +15 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (0.9.12)

io.ratpack:ratpack-core MAVEN version 0.9.12 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.12 - io.ratpack:ratpack-groovy 0.9.12 - io.ratpack:ratpack-groovy-test...

io.ratpack:ratpack-codahale-metrics (0.9.11), io.ratpack:ratpack-groovy (0.9.11) +16 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (0.9.11)

io.ratpack:ratpack-core MAVEN version 0.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.11 - io.ratpack:ratpack-groovy 0.9.11 - io.ratpack:ratpack-groovy-test...

io.ratpack:ratpack-codahale-metrics (0.9.7), io.ratpack:ratpack-groovy (0.9.7) +15 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (0.9.7)

io.ratpack:ratpack-core MAVEN version 0.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.7 - io.ratpack:ratpack-groovy 0.9.7 - io.ratpack:ratpack-groovy-test 0.9....

io.ratpack:ratpack-codahale-metrics (0.9.0), io.ratpack:ratpack-groovy (0.9.0) +10 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (0.9.0)

io.ratpack:ratpack-core MAVEN version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.0 - io.ratpack:ratpack-groovy 0.9.0 - io.ratpack:ratpack-groovy-test 0.9....

io.ratpack:ratpack-codahale-metrics (0.9.5), io.ratpack:ratpack-groovy (0.9.5) +15 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (0.9.5)

io.ratpack:ratpack-core MAVEN version 0.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.5 - io.ratpack:ratpack-groovy 0.9.5 - io.ratpack:ratpack-groovy-test 0.9....

io.ratpack:ratpack-codahale-metrics (0.9.2), io.ratpack:ratpack-groovy (0.9.2) +12 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (0.9.2)

io.ratpack:ratpack-core MAVEN version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.2 - io.ratpack:ratpack-groovy 0.9.2 - io.ratpack:ratpack-groovy-test 0.9....

com.bertramlabs.plugins:ratpack-asset-pipeline (>=2.5.2, <=4.3.0), com.bytekast.serverless-local-apigateway:com.bytekast.serverless-local-apigateway.gradle.plugin (>=0.4-snapshot, <=0.5) +85 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (>=1.0.0-rc-1, <=1.9.0-rc-2)

io.ratpack:ratpack-core MAVEN version =1.0.0-rc-1, =2.5.2, =0.4-snapshot, =0.0.1, =0.0.1, =0.0.2, =1.0.0, =1.2, =1.2, =1.3, =1.1, =1.1, =1.5, =1.1, =1.8 and more Source cves: CVE-2021-29479 Source advisory: OSV:GHSA-W6RQ-6H34-VH7Q...

io.ratpack:ratpack-codahale-metrics (0.9.8), io.ratpack:ratpack-groovy (0.9.8) +15 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (0.9.8)

io.ratpack:ratpack-core MAVEN version 0.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.8 - io.ratpack:ratpack-groovy 0.9.8 - io.ratpack:ratpack-groovy-test 0.9....

io.ratpack:ratpack-codahale-metrics (0.9.15), io.ratpack:ratpack-config (0.9.15) +17 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (0.9.15)

io.ratpack:ratpack-core MAVEN version 0.9.15 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.15 - io.ratpack:ratpack-config 0.9.15 - io.ratpack:ratpack-groovy 0.9.15...

io.ratpack:ratpack-codahale-metrics (0.9.6), io.ratpack:ratpack-groovy (0.9.6) +15 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (0.9.6)

io.ratpack:ratpack-core MAVEN version 0.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.6 - io.ratpack:ratpack-groovy 0.9.6 - io.ratpack:ratpack-groovy-test 0.9....

io.ratpack:ratpack-codahale-metrics (0.9.9), io.ratpack:ratpack-groovy (0.9.9) +16 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (0.9.9)

io.ratpack:ratpack-core MAVEN version 0.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.9 - io.ratpack:ratpack-groovy 0.9.9 - io.ratpack:ratpack-groovy-test 0.9....

io.ratpack:ratpack-codahale-metrics (0.9.6), io.ratpack:ratpack-groovy (0.9.6) +15 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (0.9.6)

io.ratpack:ratpack-core MAVEN version 0.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.6 - io.ratpack:ratpack-groovy 0.9.6 - io.ratpack:ratpack-groovy-test 0.9....