com.clever-cloud:biscuit-pulsar (>=3.5.0, <=3.7.1), fr.maif:otoroshi_2.12 (>=16.17.0, <=16.22.0) potentially affected by CVE-2024-41948 via org.biscuitsec:biscuit (>=3.0.0, <=3.0.1)

org.biscuitsec:biscuit MAVEN version =3.0.0, =3.5.0, =16.17.0, =16.22.0 Source cves: CVE-2024-41948 Source advisory: OSV:GHSA-5HCJ-RWM6-XMW4...

com.clever-cloud:biscuit-pulsar (>=3.5.0, <=3.7.1), fr.maif:otoroshi_2.12 (>=16.17.0, <=16.22.0) potentially affected by CVE-2024-41948 via org.biscuitsec:biscuit (>=3.0.0, <=3.0.1)

org.biscuitsec:biscuit MAVEN version =3.0.0, =3.5.0, =16.17.0, =16.22.0 Source cves: CVE-2024-41948 Source advisory: GHSA-5HCJ-RWM6-XMW4...

com.clever-cloud:biscuit-pulsar (>=2.2.2, <=2.3.0), org.apache.pulsar:pulsar-broker-auth-athenz (>=2.8.0, <=2.8.3) +3 more potentially affected by CVE-2022-33683 via org.apache.pulsar:pulsar-broker (>=2.8.0, <=2.8.3)

org.apache.pulsar:pulsar-broker MAVEN version =2.8.0, =2.2.2, =2.8.0, =2.8.0, =2.8.0, =2.8.0, =2.8.3 Source cves: CVE-2022-33683 Source advisory: OSV:GHSA-J3QW-G67Q-7M64...

com.clever-cloud:biscuit-pulsar (>=2.2.2, <=2.3.0), org.apache.pulsar:pulsar-broker-auth-athenz (>=2.8.0, <=2.8.3) +3 more potentially affected by CVE-2022-33682 via org.apache.pulsar:pulsar-broker (>=2.8.0, <=2.8.3)

org.apache.pulsar:pulsar-broker MAVEN version =2.8.0, =2.2.2, =2.8.0, =2.8.0, =2.8.0, =2.8.0, =2.8.3 Source cves: CVE-2022-33682 Source advisory: OSV:GHSA-JVF3-MFXV-JCQR...

com.clever-cloud:biscuit-pulsar (>=2.3.2, <=3.2.0), com.github.shoothzj:test-pulsar (>=3.1.7, <=3.1.11) +4 more potentially affected by CVE-2022-33682 via org.apache.pulsar:pulsar-broker (>=2.9.0, <=2.9.2)

org.apache.pulsar:pulsar-broker MAVEN version =2.9.0, =2.3.2, =3.1.7, =2.9.0, =2.9.0, =2.9.0, =2.9.0, =2.9.2 Source cves: CVE-2022-33682 Source advisory: OSV:GHSA-JVF3-MFXV-JCQR...

com.chatroulette:neutron-circe_2.12 (0.0.2), com.chatroulette:neutron-circe_2.13 (>=0.0.2, <=0.0.9) +150 more potentially affected by CVE-2022-33681 via org.apache.pulsar:pulsar-client (>=2.0.0-rc1-incubating, <=2.7.4)

org.apache.pulsar:pulsar-client MAVEN version =2.0.0-rc1-incubating, =0.0.2, =0.0.1, =0.0.1, =1.2.1, =1.0.0.m1, =1.0.0.m1, =1.0.3, =2.4.0-m7, =2.4.0-m10 and more Source cves: CVE-2022-33681 Source advisory: GHSA-C5FP-X2H5-VJV7...

com.clever-cloud:biscuit-pulsar (>=2.3.2, <=3.2.0), com.github.shoothzj:test-pulsar (>=3.1.7, <=3.1.11) +4 more potentially affected by CVE-2022-33683 via org.apache.pulsar:pulsar-broker (>=2.9.0, <=2.9.2)

org.apache.pulsar:pulsar-broker MAVEN version =2.9.0, =2.3.2, =3.1.7, =2.9.0, =2.9.0, =2.9.0, =2.9.0, =2.9.2 Source cves: CVE-2022-33683 Source advisory: MEND:CVE-2022-33683...

com.clever-cloud:biscuit-pulsar (3.2.1), com.github.shoothzj:test-pulsar (>=3.1.12, <=3.1.15) +6 more potentially affected by CVE-2022-33683 via org.apache.pulsar:pulsar-broker (2.10.0)

org.apache.pulsar:pulsar-broker MAVEN version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-broker and may be impacted: - com.clever-cloud:biscuit-pulsar 3.2.1 - com.github.shoothzj:test-pulsar =3.1.12, =0.0.1, =1.0.0,...

com.clever-cloud:biscuit-pulsar (>=2.2.2, <=2.3.0), org.apache.pulsar:pulsar-broker-auth-athenz (>=2.8.0, <=2.8.3) +3 more potentially affected by CVE-2022-33683 via org.apache.pulsar:pulsar-broker (>=2.8.0, <=2.8.3)

org.apache.pulsar:pulsar-broker MAVEN version =2.8.0, =2.2.2, =2.8.0, =2.8.0, =2.8.0, =2.8.0, =2.8.3 Source cves: CVE-2022-33683 Source advisory: MEND:CVE-2022-33683...

com.chatroulette:neutron-circe_2.12 (0.0.2), com.chatroulette:neutron-circe_2.13 (>=0.0.2, <=0.0.9) +163 more potentially affected by CVE-2022-33681 via org.apache.pulsar:pulsar-client (>=1.19.0-incubating, <=2.7.4)

org.apache.pulsar:pulsar-client MAVEN version =1.19.0-incubating, =0.0.2, =0.0.1, =0.0.1, =1.2.1, =1.0.0.m1, =1.0.0.m1, =1.0.3, =2.4.0-m7, =2.4.0-m10 and more Source cves: CVE-2022-33681 Source advisory: MEND:CVE-2022-33681...

com.clever-cloud:biscuit-pulsar (>=1.1.13, <=1.3.0), com.clever-cloud:integration-test (>=1.2.0, <=1.3.0) potentially affected by CVE-2022-31053 via com.clever-cloud:biscuit-java (0.2.7)

com.clever-cloud:biscuit-java MAVEN version 0.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.clever-cloud:biscuit-java and may be impacted: - com.clever-cloud:biscuit-pulsar =1.1.13, =1.2.0, =1.3.0 Source cves: CVE-2022-31053 Source advisory:...

com.clever-cloud:biscuit-pulsar (1.4.2) potentially affected by CVE-2022-31053 via com.clever-cloud:biscuit-java (0.3.0)

com.clever-cloud:biscuit-java MAVEN version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.clever-cloud:biscuit-java and may be impacted: - com.clever-cloud:biscuit-pulsar 1.4.2 Source cves: CVE-2022-31053 Source advisory:...

com.clever-cloud:biscuit-pulsar (2.3.2) potentially affected by CVE-2022-31053 via com.clever-cloud:biscuit-java (1.1.4)

com.clever-cloud:biscuit-java MAVEN version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.clever-cloud:biscuit-java and may be impacted: - com.clever-cloud:biscuit-pulsar 2.3.2 Source cves: CVE-2022-31053 Source advisory:...

com.clever-cloud:biscuit-pulsar (>=2.0.1, <=2.0.2) potentially affected by CVE-2022-31053 via com.clever-cloud:biscuit-java (1.1.1)

com.clever-cloud:biscuit-java MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.clever-cloud:biscuit-java and may be impacted: - com.clever-cloud:biscuit-pulsar =2.0.1, =2.0.2 Source cves: CVE-2022-31053 Source advisory:...

com.clever-cloud:biscuit-pulsar (>=2.0.3, <=2.3.0) potentially affected by CVE-2022-31053 via com.clever-cloud:biscuit-java (1.1.2)

com.clever-cloud:biscuit-java MAVEN version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.clever-cloud:biscuit-java and may be impacted: - com.clever-cloud:biscuit-pulsar =2.0.3, =2.3.0 Source cves: CVE-2022-31053 Source advisory:...

com.clever-cloud:biscuit-pulsar (1.4.6), com.clever-cloud:integration-test (1.4.6) potentially affected by CVE-2022-31053 via com.clever-cloud:biscuit-java (0.3.1)

com.clever-cloud:biscuit-java MAVEN version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.clever-cloud:biscuit-java and may be impacted: - com.clever-cloud:biscuit-pulsar 1.4.6 - com.clever-cloud:integration-test 1.4.6 Source cves:...