io.ratpack:ratpack-pac4j (0.9.19) potentially affected by CVE-2021-29480 via io.ratpack:ratpack-session (0.9.19)

io.ratpack:ratpack-session MAVEN version 0.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.19 Source cves: CVE-2021-29480 Source advisory: OSV:GHSA-2CC5-23R7-VC4V...

com.github.grooviter:gql-ratpack (0.5.0), io.ratpack:ratpack-pac4j (>=1.0.0-rc-1, <=1.9.0-rc-2) +3 more potentially affected by CVE-2021-29480 via io.ratpack:ratpack-session (>=1.0.0-rc-1, <=1.9.0-rc-2)

io.ratpack:ratpack-session MAVEN version =1.0.0-rc-1, =1.0.0-rc-1, =1.0.0-rc-1, =1.9.0-rc-1, =1.4.6, =3.0.0 Source cves: CVE-2021-29480 Source advisory: OSV:GHSA-2CC5-23R7-VC4V...

io.ratpack:ratpack-pac4j (0.9.7) potentially affected by CVE-2021-29480 via io.ratpack:ratpack-session (0.9.7)

io.ratpack:ratpack-session MAVEN version 0.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.7 Source cves: CVE-2021-29480 Source advisory: OSV:GHSA-2CC5-23R7-VC4V...

io.ratpack:ratpack-pac4j (0.9.8) potentially affected by CVE-2021-29480 via io.ratpack:ratpack-session (0.9.8)

io.ratpack:ratpack-session MAVEN version 0.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.8 Source cves: CVE-2021-29480 Source advisory: OSV:GHSA-2CC5-23R7-VC4V...

io.ratpack:ratpack-pac4j (0.9.4) potentially affected by CVE-2021-29480 via io.ratpack:ratpack-session (0.9.4)

io.ratpack:ratpack-session MAVEN version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.4 Source cves: CVE-2021-29480 Source advisory: OSV:GHSA-2CC5-23R7-VC4V...

io.ratpack:ratpack-pac4j (0.9.11) potentially affected by CVE-2021-29480 via io.ratpack:ratpack-session (0.9.11)

io.ratpack:ratpack-session MAVEN version 0.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.11 Source cves: CVE-2021-29480 Source advisory: OSV:GHSA-2CC5-23R7-VC4V...

io.ratpack:ratpack-pac4j (0.9.15) potentially affected by CVE-2021-29480 via io.ratpack:ratpack-session (0.9.15)

io.ratpack:ratpack-session MAVEN version 0.9.15 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.15 Source cves: CVE-2021-29480 Source advisory: OSV:GHSA-2CC5-23R7-VC4V...

com.github.grooviter:gql-ratpack (0.5.0), io.ratpack:ratpack-pac4j (>=1.0.0-rc-1, <=1.9.0-rc-2) +3 more potentially affected by CVE-2021-29480 via io.ratpack:ratpack-session (>=1.0.0-rc-1, <=1.9.0-rc-2)

io.ratpack:ratpack-session MAVEN version =1.0.0-rc-1, =1.0.0-rc-1, =1.0.0-rc-1, =1.9.0-rc-1, =1.4.6, =3.0.0 Source cves: CVE-2021-29480 Source advisory: GHSA-2CC5-23R7-VC4V...

com.github.grooviter:gql-ratpack (0.5.0), io.ratpack:ratpack-pac4j (>=1.0.0-rc-1, <=1.9.0-rc-2) +3 more potentially affected by CVE-2021-29481 via io.ratpack:ratpack-session (>=1.0.0-rc-1, <=1.9.0-rc-2)

io.ratpack:ratpack-session MAVEN version =1.0.0-rc-1, =1.0.0-rc-1, =1.0.0-rc-1, =1.9.0-rc-1, =1.4.6, =3.0.0 Source cves: CVE-2021-29481 Source advisory: OSV:GHSA-PHJ8-4CQ3-794G...

io.ratpack:ratpack-pac4j (0.9.4) potentially affected by CVE-2021-29481 via io.ratpack:ratpack-session (0.9.4)

io.ratpack:ratpack-session MAVEN version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.4 Source cves: CVE-2021-29481 Source advisory: OSV:GHSA-PHJ8-4CQ3-794G...

io.ratpack:ratpack-pac4j (0.9.7) potentially affected by CVE-2021-29481 via io.ratpack:ratpack-session (0.9.7)

io.ratpack:ratpack-session MAVEN version 0.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.7 Source cves: CVE-2021-29481 Source advisory: OSV:GHSA-PHJ8-4CQ3-794G...

GHSA-PHJ8-4CQ3-794G Unencrypted storage of client side sessions

Impact The default configuration of client side sessions results in unencrypted, but signed, data being set as cookie values. This means that if something sensitive goes into the session, it could be read by something with access to the cookies. Note: the documentation does point this out and...

io.ratpack:ratpack-pac4j (0.9.9) potentially affected by CVE-2021-29481 via io.ratpack:ratpack-session (0.9.9)

io.ratpack:ratpack-session MAVEN version 0.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.9 Source cves: CVE-2021-29481 Source advisory: OSV:GHSA-PHJ8-4CQ3-794G...

io.ratpack:ratpack-pac4j (0.9.15) potentially affected by CVE-2021-29481 via io.ratpack:ratpack-session (0.9.15)

io.ratpack:ratpack-session MAVEN version 0.9.15 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.15 Source cves: CVE-2021-29481 Source advisory: OSV:GHSA-PHJ8-4CQ3-794G...

io.ratpack:ratpack-pac4j (0.9.16) potentially affected by CVE-2021-29481 via io.ratpack:ratpack-session (0.9.16)

io.ratpack:ratpack-session MAVEN version 0.9.16 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.16 Source cves: CVE-2021-29481 Source advisory: OSV:GHSA-PHJ8-4CQ3-794G...

io.ratpack:ratpack-pac4j (0.9.8) potentially affected by CVE-2021-29481 via io.ratpack:ratpack-session (0.9.8)

io.ratpack:ratpack-session MAVEN version 0.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.8 Source cves: CVE-2021-29481 Source advisory: OSV:GHSA-PHJ8-4CQ3-794G...

io.ratpack:ratpack-pac4j (0.9.5) potentially affected by CVE-2021-29481 via io.ratpack:ratpack-session (0.9.5)

io.ratpack:ratpack-session MAVEN version 0.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.5 Source cves: CVE-2021-29481 Source advisory: OSV:GHSA-PHJ8-4CQ3-794G...

io.ratpack:ratpack-pac4j (0.9.18) potentially affected by CVE-2021-29481 via io.ratpack:ratpack-session (0.9.18)

io.ratpack:ratpack-session MAVEN version 0.9.18 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.18 Source cves: CVE-2021-29481 Source advisory: OSV:GHSA-PHJ8-4CQ3-794G...

com.github.grooviter:gql-ratpack (0.5.0), io.ratpack:ratpack-pac4j (>=1.0.0-rc-1, <=1.9.0-rc-2) +3 more potentially affected by CVE-2021-29481 via io.ratpack:ratpack-session (>=1.0.0-rc-1, <=1.9.0-rc-2)

io.ratpack:ratpack-session MAVEN version =1.0.0-rc-1, =1.0.0-rc-1, =1.0.0-rc-1, =1.9.0-rc-1, =1.4.6, =3.0.0 Source cves: CVE-2021-29481 Source advisory: GHSA-PHJ8-4CQ3-794G...

io.ratpack:ratpack-pac4j (0.9.6) potentially affected by CVE-2021-29481 via io.ratpack:ratpack-session (0.9.6)

io.ratpack:ratpack-session MAVEN version 0.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-session and may be impacted: - io.ratpack:ratpack-pac4j 0.9.6 Source cves: CVE-2021-29481 Source advisory: OSV:GHSA-PHJ8-4CQ3-794G...