org.apache.tuscany.sca:tuscany-feature-web20 (>=2.0-beta1, <=2.0-m5.1), org.apache.tuscany.sca:tuscany-implementation-widget-runtime-dojo (>=2.0-beta1, <=2.0-m5.1) +1 more potentially affected by CVE-2010-2274 via org.dojotoolkit:dojo (1.3.0)

org.dojotoolkit:dojo MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.dojotoolkit:dojo and may be impacted: - org.apache.tuscany.sca:tuscany-feature-web20 =2.0-beta1, =2.0-beta1, =1.6, =2.0-m5.1 Source cves: CVE-2010-2274 Source...

GHSA-23VV-V25H-QWQW Improper Input Validation in Apache Axis2

Apache Axis2 before 1.5.2, as used in IBM WebSphere Application Server WAS 7.0 through 7.0.0.12, IBM Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, IBM Feature Pack for Web 2.0 1.0.1.0, Apache Synapse, Apache ODE, Apache Tuscany, Apache Geronimo, and other products, does not properly...

Improper Input Validation in Apache Axis2

Apache Axis2 before 1.5.2, as used in IBM WebSphere Application Server WAS 7.0 through 7.0.0.12, IBM Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, IBM Feature Pack for Web 2.0 1.0.1.0, Apache Synapse, Apache ODE, Apache Tuscany, Apache Geronimo, and other products, does not properly...