io.ratpack:ratpack-pac4j (0.9.6) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-session (0.9.6)

io.ratpack:ratpack-session MAVEN version 0.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.6 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-groovy-test (0.9.10) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-groovy (0.9.10)

io.ratpack:ratpack-groovy MAVEN version 0.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-groovy and may be impacted: - io.ratpack:ratpack-groovy-test 0.9.10 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-groovy-test (0.9.18) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-groovy (0.9.18)

io.ratpack:ratpack-groovy MAVEN version 0.9.18 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-groovy and may be impacted: - io.ratpack:ratpack-groovy-test 0.9.18 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-pac4j (0.9.4) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-session (0.9.4)

io.ratpack:ratpack-session MAVEN version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.4 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

com.bytekast.serverless-local-apigateway:com.bytekast.serverless-local-apigateway.gradle.plugin (>=0.4-snapshot, <=0.5), gradle.plugin.com.bytekast:serverless-local-apigateway (>=0.4-snapshot, <=0.5) +1 more potentially affected by CVE-2019-11808 via io.ratpack:ratpack-groovy (>=1.0.0-rc-1, <=1.6.0)

io.ratpack:ratpack-groovy MAVEN version =1.0.0-rc-1, =0.4-snapshot, =0.4-snapshot, =1.0.0-rc-1, =1.6.0 Source cves: CVE-2019-11808 Source advisory: GHSA-54MG-VGRP-MWX9...

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Ratpack

Ratpack versions before 1.6.1 generate a session ID using a cryptographically weak PRNG in the JDK's ThreadLocalRandom. This means that if an attacker can determine a small window for the server start time and obtain a session ID value, they can theoretically determine the sequence of session IDs...

io.ratpack:ratpack-groovy-test (0.9.11) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-groovy (0.9.11)

io.ratpack:ratpack-groovy MAVEN version 0.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-groovy and may be impacted: - io.ratpack:ratpack-groovy-test 0.9.11 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-groovy-test (0.9.17) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-groovy (0.9.17)

io.ratpack:ratpack-groovy MAVEN version 0.9.17 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-groovy and may be impacted: - io.ratpack:ratpack-groovy-test 0.9.17 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-groovy-test (0.9.6) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-groovy (0.9.6)

io.ratpack:ratpack-groovy MAVEN version 0.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-groovy and may be impacted: - io.ratpack:ratpack-groovy-test 0.9.6 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-pac4j (0.9.10) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-session (0.9.10)

io.ratpack:ratpack-session MAVEN version 0.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.10 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-pac4j (0.9.16) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-session (0.9.16)

io.ratpack:ratpack-session MAVEN version 0.9.16 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.16 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-groovy-test (0.9.12) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-groovy (0.9.12)

io.ratpack:ratpack-groovy MAVEN version 0.9.12 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-groovy and may be impacted: - io.ratpack:ratpack-groovy-test 0.9.12 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-groovy-test (0.9.2) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-groovy (0.9.2)

io.ratpack:ratpack-groovy MAVEN version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-groovy and may be impacted: - io.ratpack:ratpack-groovy-test 0.9.2 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-groovy-test (0.9.8) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-groovy (0.9.8)

io.ratpack:ratpack-groovy MAVEN version 0.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-groovy and may be impacted: - io.ratpack:ratpack-groovy-test 0.9.8 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-groovy-test (0.9.16) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-groovy (0.9.16)

io.ratpack:ratpack-groovy MAVEN version 0.9.16 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-groovy and may be impacted: - io.ratpack:ratpack-groovy-test 0.9.16 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-groovy-test (0.9.14) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-groovy (0.9.14)

io.ratpack:ratpack-groovy MAVEN version 0.9.14 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-groovy and may be impacted: - io.ratpack:ratpack-groovy-test 0.9.14 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-groovy-test (0.9.9) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-groovy (0.9.9)

io.ratpack:ratpack-groovy MAVEN version 0.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-groovy and may be impacted: - io.ratpack:ratpack-groovy-test 0.9.9 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-pac4j (0.9.19) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-session (0.9.19)

io.ratpack:ratpack-session MAVEN version 0.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.19 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-groovy-test (0.9.7) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-groovy (0.9.7)

io.ratpack:ratpack-groovy MAVEN version 0.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-groovy and may be impacted: - io.ratpack:ratpack-groovy-test 0.9.7 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...

io.ratpack:ratpack-groovy-test (0.9.4) potentially affected by CVE-2019-11808 via io.ratpack:ratpack-groovy (0.9.4)

io.ratpack:ratpack-groovy MAVEN version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-groovy and may be impacted: - io.ratpack:ratpack-groovy-test 0.9.4 Source cves: CVE-2019-11808 Source advisory: OSV:GHSA-54MG-VGRP-MWX9...