com.alipay.sofa:rpc-sofa-boot-plugin (>=5.4.4, <=5.5.3), com.alipay.sofa:sofa-tracer-sample-with-sofarpc (>=2.1.0, <=3.0.3) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (>=5.4.0, <=5.5.3)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version =5.4.0, =5.4.4, =2.1.0, =3.0.3 Source cves: CVE-2024-23636 Source advisory: GHSA-7Q8P-9953-PXVR...

com.alipay.sofa:rpc-sofa-boot-plugin (>=5.4.4, <=5.5.3), com.alipay.sofa:sofa-tracer-sample-with-sofarpc (>=2.1.0, <=3.0.3) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (>=5.4.0, <=5.5.3)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version =5.4.0, =5.4.4, =2.1.0, =3.0.3 Source cves: CVE-2024-23636 Source advisory: OSV:GHSA-7Q8P-9953-PXVR...

com.alipay.sofa:sofa-boot-jacoco-report (3.18.1) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.18.1)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.18.1 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.19.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.19.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.19.0 Source cves: CVE-2024-23636 Source...