com.bertramlabs.plugins:ratpack-asset-pipeline (>=2.2.7, <=2.3.8), io.ratpack:ratpack-codahale-metrics (0.9.17) +17 more potentially affected by CVE-2019-10770 via io.ratpack:ratpack-core (0.9.17)

io.ratpack:ratpack-core MAVEN version 0.9.17 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - com.bertramlabs.plugins:ratpack-asset-pipeline =2.2.7, =2.3.8 - io.ratpack:ratpack-codahale-metrics 0.9.17 -...

io.ratpack:ratpack-codahale-metrics (0.9.13), io.ratpack:ratpack-config (0.9.13) +17 more potentially affected by CVE-2019-10770 via io.ratpack:ratpack-core (0.9.13)

io.ratpack:ratpack-core MAVEN version 0.9.13 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.13 - io.ratpack:ratpack-config 0.9.13 - io.ratpack:ratpack-groovy 0.9.13...

com.bertramlabs.plugins:ratpack-asset-pipeline (>=2.5.2, <=4.3.0), com.bytekast.serverless-local-apigateway:com.bytekast.serverless-local-apigateway.gradle.plugin (>=0.4-snapshot, <=0.5) +82 more potentially affected by CVE-2019-10770 via io.ratpack:ratpack-core (>=1.0.0-rc-1, <=1.7.5)

io.ratpack:ratpack-core MAVEN version =1.0.0-rc-1, =2.5.2, =0.4-snapshot, =0.0.1, =0.0.1, =0.0.2, =1.0.0, =1.2, =1.2, =1.3, =1.1, =1.1, =1.5, =1.1, =1.8 and more Source cves: CVE-2019-10770 Source advisory: GHSA-R2WF-Q3X4-HRV9...

io.ratpack:ratpack-codahale-metrics (0.9.3), io.ratpack:ratpack-groovy (0.9.3) +14 more potentially affected by CVE-2019-10770 via io.ratpack:ratpack-core (0.9.3)

io.ratpack:ratpack-core MAVEN version 0.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.3 - io.ratpack:ratpack-groovy 0.9.3 - io.ratpack:ratpack-groovy-test 0.9....

com.bertramlabs.plugins:ratpack-asset-pipeline (2.5.1), io.jdev.miniprofiler:miniprofiler-ratpack (>=0.5, <=0.5.1) +18 more potentially affected by CVE-2019-10770 via io.ratpack:ratpack-core (0.9.19)

io.ratpack:ratpack-core MAVEN version 0.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - com.bertramlabs.plugins:ratpack-asset-pipeline 2.5.1 - io.jdev.miniprofiler:miniprofiler-ratpack =0.5, =0.5.1 -...

io.ratpack:ratpack-codahale-metrics (0.9.16), io.ratpack:ratpack-groovy (0.9.16) +16 more potentially affected by CVE-2019-10770 via io.ratpack:ratpack-core (0.9.16)

io.ratpack:ratpack-core MAVEN version 0.9.16 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.16 - io.ratpack:ratpack-groovy 0.9.16 - io.ratpack:ratpack-groovy-test...

io.ratpack:ratpack-codahale-metrics (0.9.2), io.ratpack:ratpack-groovy (0.9.2) +12 more potentially affected by CVE-2019-10770 via io.ratpack:ratpack-core (0.9.2)

io.ratpack:ratpack-core MAVEN version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.2 - io.ratpack:ratpack-groovy 0.9.2 - io.ratpack:ratpack-groovy-test 0.9....

GHSA-R2WF-Q3X4-HRV9 Default development error handler in Ratpack is vulnerable to HTML content injection (XSS)

Versions of Ratpack from 0.9.10 through 1.7.5 are vulnerable to CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' aka. XSS in the development error handler. An attacker can utilize this to perform XSS when an exception message contains untrusted data. As a...

Cross-site Scripting (XSS)

Overview io.ratpack:ratpack-core is a simple, capable, toolkit for creating high performance web applications. Affected versions of this package are vulnerable to Cross-site Scripting XSS. This affects the development mode error handler when an exception message contains untrusted data. Note the...

io.ratpack:ratpack-codahale-metrics (0.9.3), io.ratpack:ratpack-groovy (0.9.3) +14 more potentially affected by CVE-2019-17513 via io.ratpack:ratpack-core (0.9.3)

io.ratpack:ratpack-core MAVEN version 0.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.3 - io.ratpack:ratpack-groovy 0.9.3 - io.ratpack:ratpack-groovy-test 0.9....

com.bertramlabs.plugins:ratpack-asset-pipeline (2.5.1), io.jdev.miniprofiler:miniprofiler-ratpack (>=0.5, <=0.5.1) +18 more potentially affected by CVE-2019-17513 via io.ratpack:ratpack-core (0.9.19)

io.ratpack:ratpack-core MAVEN version 0.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - com.bertramlabs.plugins:ratpack-asset-pipeline 2.5.1 - io.jdev.miniprofiler:miniprofiler-ratpack =0.5, =0.5.1 -...

com.bertramlabs.plugins:ratpack-asset-pipeline (>=2.3.11, <=2.4.3), io.ratpack:ratpack-codahale-metrics (0.9.18) +17 more potentially affected by CVE-2019-17513 via io.ratpack:ratpack-core (0.9.18)

io.ratpack:ratpack-core MAVEN version 0.9.18 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - com.bertramlabs.plugins:ratpack-asset-pipeline =2.3.11, =2.4.3 - io.ratpack:ratpack-codahale-metrics 0.9.18 -...

io.ratpack:ratpack-codahale-metrics (0.9.1), io.ratpack:ratpack-groovy (0.9.1) +11 more potentially affected by CVE-2019-17513 via io.ratpack:ratpack-core (0.9.1)

io.ratpack:ratpack-core MAVEN version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.1 - io.ratpack:ratpack-groovy 0.9.1 - io.ratpack:ratpack-groovy-test 0.9....

io.ratpack:ratpack-core vulnerable to Improper Neutralization of Special Elements in Output ('Injection')

CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Response Splitting' Versions of Ratpack 0.9.1 through and including 1.7.4 are vulnerable to HTTP Response Splitting, if untrusted and unsanitized data is used to populate the headers of an HTTP response. An attacker can...

io.ratpack:ratpack-codahale-metrics (0.9.7), io.ratpack:ratpack-groovy (0.9.7) +15 more potentially affected by CVE-2019-17513 via io.ratpack:ratpack-core (0.9.7)

io.ratpack:ratpack-core MAVEN version 0.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.7 - io.ratpack:ratpack-groovy 0.9.7 - io.ratpack:ratpack-groovy-test 0.9....

com.bertramlabs.plugins:ratpack-asset-pipeline (>=2.5.2, <=4.3.0), com.bytekast.serverless-local-apigateway:com.bytekast.serverless-local-apigateway.gradle.plugin (>=0.4-snapshot, <=0.5) +82 more potentially affected by CVE-2019-17513 via io.ratpack:ratpack-core (>=1.0.0-rc-1, <=1.7.4)

io.ratpack:ratpack-core MAVEN version =1.0.0-rc-1, =2.5.2, =0.4-snapshot, =0.0.1, =0.0.1, =0.0.2, =1.0.0, =1.2, =1.2, =1.3, =1.1, =1.1, =1.5, =1.1, =1.8 and more Source cves: CVE-2019-17513 Source advisory: GHSA-MVQP-Q37C-WF9J...

io.ratpack:ratpack-codahale-metrics (0.9.6), io.ratpack:ratpack-groovy (0.9.6) +15 more potentially affected by CVE-2019-17513 via io.ratpack:ratpack-core (0.9.6)

io.ratpack:ratpack-core MAVEN version 0.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.6 - io.ratpack:ratpack-groovy 0.9.6 - io.ratpack:ratpack-groovy-test 0.9....

io.ratpack:ratpack-codahale-metrics (0.9.9), io.ratpack:ratpack-groovy (0.9.9) +16 more potentially affected by CVE-2019-17513 via io.ratpack:ratpack-core (0.9.9)

io.ratpack:ratpack-core MAVEN version 0.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.9 - io.ratpack:ratpack-groovy 0.9.9 - io.ratpack:ratpack-groovy-test 0.9....

com.bertramlabs.plugins:ratpack-asset-pipeline (>=2.2.7, <=2.3.8), io.ratpack:ratpack-codahale-metrics (0.9.17) +17 more potentially affected by CVE-2019-17513 via io.ratpack:ratpack-core (0.9.17)

io.ratpack:ratpack-core MAVEN version 0.9.17 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - com.bertramlabs.plugins:ratpack-asset-pipeline =2.2.7, =2.3.8 - io.ratpack:ratpack-codahale-metrics 0.9.17 -...

io.ratpack:ratpack-codahale-metrics (0.9.2), io.ratpack:ratpack-groovy (0.9.2) +12 more potentially affected by CVE-2019-17513 via io.ratpack:ratpack-core (0.9.2)

io.ratpack:ratpack-core MAVEN version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.2 - io.ratpack:ratpack-groovy 0.9.2 - io.ratpack:ratpack-groovy-test 0.9....