org.grails:grails-datastore-gorm (2.0.4.release), org.grails:grails-datastore-gorm-hibernate (2.0.4.release) +26 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.3.3)

org.grails:grails-core MAVEN version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-datastore-gorm 2.0.4.release - org.grails:grails-datastore-gorm-hibernate 2.0.4.release -...

org.grails:grails-datastore-gorm (>=2.0.5.release, <=2.0.7.release), org.grails:grails-datastore-gorm-hibernate (>=2.0.5.release, <=2.0.7.release) +27 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.3.4)

org.grails:grails-core MAVEN version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-datastore-gorm =2.0.5.release, =2.0.5.release, =2.0.5.release, =2.0.0-m01, =2.0.5.release,...

org.grails:gorm-hibernate4-spring-boot (1.0.0.m1), org.grails:grails-datastore-gorm (>=3.0.0.release, <=3.0.1.release) +28 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.3.6)

org.grails:grails-core MAVEN version 2.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:gorm-hibernate4-spring-boot 1.0.0.m1 - org.grails:grails-datastore-gorm =3.0.0.release, =3.0.0.release,...

org.grails:gorm-hibernate4-spring-boot (>=1.0.0.rc1, <=1.0.0.rc2), org.grails:gorm-mongodb-spring-boot (>=1.0.0.m1, <=1.0.0.rc1) +30 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.3.7)

org.grails:grails-core MAVEN version 2.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:gorm-hibernate4-spring-boot =1.0.0.rc1, =1.0.0.m1, =3.0.2.release, =3.0.2.release, =3.0.2.release,...

org.grails:grails-datastore-gorm (3.1.2.release), org.grails:grails-datastore-gorm-hibernate (3.1.2.release) +29 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.3.9)

org.grails:grails-core MAVEN version 2.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-datastore-gorm 3.1.2.release - org.grails:grails-datastore-gorm-hibernate 3.1.2.release -...

org.grails:grails-logging (2.4.0.m1), org.grails:grails-plugin-async (2.4.0.m1) +19 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.4.0.m1)

org.grails:grails-core MAVEN version 2.4.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-logging 2.4.0.m1 - org.grails:grails-plugin-async 2.4.0.m1 - org.grails:grails-plugin-codecs...

org.grails:grails-dependencies (2.4.0.rc1), org.grails:grails-encoder (2.4.0.rc1) +33 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.4.0.rc1)

org.grails:grails-core MAVEN version 2.4.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.4.0.rc1 - org.grails:grails-encoder 2.4.0.rc1 -...

org.grails:grails-dependencies (2.4.1), org.grails:grails-encoder (2.4.1) +32 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.4.1)

org.grails:grails-core MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.4.1 - org.grails:grails-encoder 2.4.1 - org.grails:grails-logging 2.4.1 -...

org.grails:grails-dependencies (2.5.0), org.grails:grails-encoder (2.5.0) +33 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.5.0)

org.grails:grails-core MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.5.0 - org.grails:grails-encoder 2.5.0 - org.grails:grails-logging 2.5.0 -...

org.grails:grails-dependencies (2.5.2), org.grails:grails-encoder (2.5.2) +33 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.5.2)

org.grails:grails-core MAVEN version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.5.2 - org.grails:grails-encoder 2.5.2 - org.grails:grails-logging 2.5.2 -...

org.grails:grails-datastore-gorm-grails2-support (>=6.1.0.release, <=6.1.9.release), org.grails:grails-datastore-gorm-grails2-test (>=6.1.0.release, <=6.1.9.release) +35 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.5.6)

org.grails:grails-core MAVEN version 2.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-datastore-gorm-grails2-support =6.1.0.release, =6.1.0.release, =6.1.9.release -...

Apache Tomcat Race Condition vulnerability

If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could result in a user seeing a response intended for a different user. An additional issue was present in the NIO and NIO2 connectors that did not...

GHSA-6V52-MJ5R-7J2M Apache Tomcat Race Condition vulnerability

If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could result in a user seeing a response intended for a different user. An additional issue was present in the NIO and NIO2 connectors that did not...

openSUSE Security Update : tomcat (openSUSE-2018-1129)

This update for tomcat to version 9.0.10 fixes the following issues : Security issues fixed : - CVE-2018-1336: An improper handing of overflow in the UTF-8 decoder with supplementary characters could have lead to an infinite loop in the decoder causing a Denial of Service bsc1102400. -...

Security update for tomcat (moderate)

This update for tomcat to version 9.0.10 fixes the following issues: Security issues fixed: - CVE-2018-1336: An improper handing of overflow in the UTF-8 decoder with supplementary characters could have lead to an infinite loop in the decoder causing a Denial of Service bsc1102400. - CVE-2018-801...

tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up

If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could result in a user seeing a response intended for a different user. An additional issue was present in the NIO and NIO2 connectors that did not...

The World’s Most Popular Coding Language Happens to be Most Hackers’ Weapon of Choice

Python will soon be the world’s most prevalent coding language. That’s quite a statement, but if you look at its simplicity, flexibility and the relative ease with which folks pick it up, it’s not hard to see why The Economist recently touted it as the soon-to-be most used language, globally...

Prototype Pollution in async merge-object

The utilities function in all versions of the merge-object node module can be tricked into modifying the prototype of Object when the attacker can control part of the structure passed to this function. This can let an attacker add or modify existing properties that will exist on all objects...

openSUSE Security Update : tomcat (openSUSE-2018-1019)

This update for tomcat to 8.0.53 fixes the following issues : Security issue fixed : - CVE-2018-1336: An improper handing of overflow in the UTF-8 decoder with supplementary characters could have lead to an infinite loop in the decoder causing a Denial of Service bsc1102400. - CVE-2018-8034: The...

SUSE-SU-2018:2699-1 Security update for tomcat

This update for tomcat to 8.0.53 fixes the following issues: Security issue fixed: - CVE-2018-1336: An improper handing of overflow in the UTF-8 decoder with supplementary characters could have lead to an infinite loop in the decoder causing a Denial of Service bsc1102400. - CVE-2018-8034: The ho...