com.alipay.sofa:sofa-boot-jacoco-report (3.22.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.22.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.22.0 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.18.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.18.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.18.0 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:rpc-sofa-boot-plugin (>=5.4.4, <=5.5.3), com.alipay.sofa:sofa-tracer-sample-with-sofarpc (>=2.1.0, <=3.0.3) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (>=5.4.0, <=5.5.3)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version =5.4.0, =5.4.4, =2.1.0, =3.0.3 Source cves: CVE-2024-23636 Source advisory: GHSA-7Q8P-9953-PXVR...

com.alipay.sofa:sofa-boot-jacoco-report (3.25.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.25.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.25.0 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:rpc-sofa-boot-plugin (>=5.4.4, <=5.5.3), com.alipay.sofa:sofa-tracer-sample-with-sofarpc (>=2.1.0, <=3.0.3) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (>=5.4.0, <=5.5.3)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version =5.4.0, =5.4.4, =2.1.0, =3.0.3 Source cves: CVE-2024-23636 Source advisory: OSV:GHSA-7Q8P-9953-PXVR...

com.alipay.sofa:sofa-boot-jacoco-report (3.21.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.21.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.21.0 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.19.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.19.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.19.0 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.18.1) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.18.1)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.18.1 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.24.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.24.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.24.0 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.20.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.20.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.20.0 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.23.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.23.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.23.0 Source cves: CVE-2024-23636 Source...

com.jfinal:jfinal-undertow (2.0), com.jfinal:jfinal-weixin (2.5) +5 more potentially affected by CVE-2024-22496 via com.jfinal:jfinal (4.8)

com.jfinal:jfinal MAVEN version 4.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 2.0 - com.jfinal:jfinal-weixin 2.5 - io.jboot:jboot =2.3.1, =3.1.0, =3.5.8.v20191228-release, =0.0.1...

com.github.artislong:jfinal-spring-boot-starter (>=1.0, <=2.1), com.jfinal:jfinal-undertow (1.9) potentially affected by CVE-2024-22496 via com.jfinal:jfinal (4.4)

com.jfinal:jfinal MAVEN version 4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.artislong:jfinal-spring-boot-starter =1.0, =2.1 - com.jfinal:jfinal-undertow 1.9 Source cves: CVE-2024-22496 Source...

com.kurzdigital:keycloak-admin-wrapper (>=0.9.11, <=0.10.3), com.pleosoft:pleosoft-spring-boot-starter (1.0.5-release) +105 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (4.8.3.final)

org.keycloak:keycloak-core MAVEN version 4.8.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.kurzdigital:keycloak-admin-wrapper =0.9.11, =1.1.0, =1.2.2, =1.2.2, =7.1.0.m5, =7.1.0.m5,...

ai.djl.spring:djl-spring-boot-starter-autoconfigure (0.26), ai.djl.spring:djl-spring-boot-starter-mxnet-auto (0.26) +2738 more potentially affected by CVE-2024-22233 via org.springframework:spring-core (6.1.2)

org.springframework:spring-core MAVEN version 6.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - ai.djl.spring:djl-spring-boot-starter-autoconfigure 0.26 -...

Memory corruption

In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring MVC Spring Security 6.1....

Spring Framework server Web DoS Vulnerability

In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: Typically, Spring Boot applications need the...

Vulnerability fixed in VMware Tanzu Spring Framework

VMWare Tanzu has fixed a vulnerability in Spring Framework. An unauthenticated malicious person could exploit the vulnerability to cause a denial-of-service on an application running in the framework. The prerequisite for successful exploitation is that the application uses of the...

com.jfinal:jfinal-undertow (2.0), com.jfinal:jfinal-weixin (2.5) +5 more potentially affected by CVE-2024-22492 via com.jfinal:jfinal (4.8)

com.jfinal:jfinal MAVEN version 4.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 2.0 - com.jfinal:jfinal-weixin 2.5 - io.jboot:jboot =2.3.1, =3.1.0, =3.5.8.v20191228-release, =0.0.1...

com.github.artislong:jfinal-spring-boot-starter (>=1.0, <=2.1), com.jfinal:jfinal-undertow (1.9) potentially affected by CVE-2024-22492 via com.jfinal:jfinal (4.4)

com.jfinal:jfinal MAVEN version 4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.github.artislong:jfinal-spring-boot-starter =1.0, =2.1 - com.jfinal:jfinal-undertow 1.9 Source cves: CVE-2024-22492 Source...