ai.mattmann.mnemosyne:cas-crawler (1.11.0), ai.mattmann.mnemosyne:cas-filemgr (1.11.0) +623 more potentially affected by CVE-2022-23596 via com.github.junrar:junrar (>=0.7, <=7.4.0)

com.github.junrar:junrar MAVEN version =0.7, =3.6.1, =3.11.0, =1.0.0, =1.0.0, =1.0.4 and more Source cves: CVE-2022-23596 Source advisory: MEND:CVE-2022-23596...

CVE-2022-23596 Infinite loop in junrar

Junrar is an open source java RAR archive library. In affected versions A carefully crafted RAR archive can trigger an infinite loop while extracting said archive. The impact depends solely on how the application uses the library, and whether files can be provided by malignant users. The problem ...

CVE-2022-23596

CVE-2022-23596 affects the Junrar Java RAR archive library. A carefully crafted RAR archive can trigger an infinite loop during extraction, with impact depending on how the library is used by the application. The fix is available in version 7.4.1. Remediation: upgrade to 7.4.1 or later (no public...

cn.org.expect:modest-build (1.0.4), cn.org.expect:modest-compress (>=1.0.0, <=1.0.4) +119 more potentially affected by CVE-2022-23596 via com.github.junrar:junrar (7.4.0)

com.github.junrar:junrar MAVEN version 7.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.junrar:junrar and may be impacted: - cn.org.expect:modest-build 1.0.4 - cn.org.expect:modest-compress =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0...

com.checkmarx.maven:checkmarx-maven-plugin (9.00.3), com.checkmarx:cx-client-common (>=2021.1.135, <=2023.1.7) +19 more potentially affected by CVE-2022-23596 via com.github.junrar:junrar (1.0.1)

com.github.junrar:junrar MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.junrar:junrar and may be impacted: - com.checkmarx.maven:checkmarx-maven-plugin 9.00.3 - com.checkmarx:cx-client-common =2021.1.135, =20.0.10,...

cn.org.expect:modest-build (1.0.4), cn.org.expect:modest-compress (>=1.0.0, <=1.0.4) +119 more potentially affected by CVE-2022-23596 via com.github.junrar:junrar (7.4.0)

com.github.junrar:junrar MAVEN version 7.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.junrar:junrar and may be impacted: - cn.org.expect:modest-build 1.0.4 - cn.org.expect:modest-compress =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0...

cloud.testload:jmeter-clickhouse-listener (2.00), com.bobpaulin.jmeter:aws-include-controller-plugin (0.0.1) +99 more potentially affected by CVE-2022-23596 via com.github.junrar:junrar (2.0.0)

com.github.junrar:junrar MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.junrar:junrar and may be impacted: - cloud.testload:jmeter-clickhouse-listener 2.00 - com.bobpaulin.jmeter:aws-include-controller-plugin 0.0.1 -...

ai.stainless:grails-tika (0.1.0), com.antkorwin:mimetype (>=0.1, <=0.2) +113 more potentially affected by CVE-2022-23596 via com.github.junrar:junrar (4.0.0)

com.github.junrar:junrar MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.junrar:junrar and may be impacted: - ai.stainless:grails-tika 0.1.0 - com.antkorwin:mimetype =0.1, =0.1.2, =0.2.0, =0.7.0 and more Source cves:...

ai.mattmann.mnemosyne:cas-crawler (1.11.0), ai.mattmann.mnemosyne:cas-filemgr (1.11.0) +415 more potentially affected by CVE-2022-23596 via com.github.junrar:junrar (0.7)

com.github.junrar:junrar MAVEN version 0.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.junrar:junrar and may be impacted: - ai.mattmann.mnemosyne:cas-crawler 1.11.0 - ai.mattmann.mnemosyne:cas-filemgr 1.11.0 - ai.mattmann.mnemosyne:cas-p...