CVE-2022-31183

fs2 is a compositional, streaming I/O library for Scala. When establishing a server-mode TLSSocket using fs2-io on Node.js, the parameter requestCert = true is ignored, peer certificate verification is skipped, and the connection proceeds. The vulnerability is limited to: 1. fs2-io running on...

au.id.tmm.fetch:fetch-aws-textract_3 (>=0.2.0, <=0.4.0), au.id.tmm.fetch:fetch-cache_3 (>=0.2.0, <=0.4.0) +283 more potentially affected by CVE-2022-31183 via co.fs2:fs2-io_3 (>=3.1.0, <=3.2.10)

co.fs2:fs2-io3 MAVEN version =3.1.0, =0.2.0, =0.2.0, =0.2.0, =3.1-2-8dabe12, =0.30.0, =0.31.0, =0.10.0, =0.0-a75a626, =0.0-a75a626, =0.0-a75a626, =0.0-a75a626, =0.1-a9d8da5, =0.1-7624644 and more Source cves: CVE-2022-31183 Source advisory: MEND:CVE-2022-31183...

CVE-2022-31183 mTLS client verification is skipped in fs2 on Node.js

fs2 is a compositional, streaming I/O library for Scala. When establishing a server-mode TLSSocket using fs2-io on Node.js, the parameter requestCert = true is ignored, peer certificate verification is skipped, and the connection proceeds. The vulnerability is limited to: 1. fs2-io running on...

CVE-2022-31183 mTLS client verification is skipped in fs2 on Node.js

fs2 is a compositional, streaming I/O library for Scala. When establishing a server-mode TLSSocket using fs2-io on Node.js, the parameter requestCert = true is ignored, peer certificate verification is skipped, and the connection proceeds. The vulnerability is limited to: 1. fs2-io running on...

CVE-2022-31183 mTLS client verification is skipped in fs2 on Node.js

fs2 is a compositional, streaming I/O library for Scala. When establishing a server-mode TLSSocket using fs2-io on Node.js, the parameter requestCert = true is ignored, peer certificate verification is skipped, and the connection proceeds. The vulnerability is limited to: 1. fs2-io running on...

au.id.tmm.fetch:fetch-aws-textract_2.13 (>=0.1.0, <=0.4.0), au.id.tmm.fetch:fetch-cache_2.13 (>=0.1.0, <=0.4.0) +381 more potentially affected by CVE-2022-31183 via co.fs2:fs2-io_2.13 (>=3.1.0, <=3.2.10)

co.fs2:fs2-io2.13 MAVEN version =3.1.0, =0.1.0, =0.1.0, =0.1.0, =3.1-2-8dabe12, =0.30.0, =0.31.0, =0.4.0, =0.9.0, =0.9.0, =0.0-a75a626, =0.0-a75a626, =0.0-a75a626, =0.1-7d4b1e7 and more Source cves: CVE-2022-31183 Source advisory: MEND:CVE-2022-31183...

co.fs2:fs2-protocols_sjs1_2.13 (>=3.1-2-8dabe12, <=3.2.10), com.47deg:energy-monitor-persistence-app_sjs1_2.13 (0.2.0) +59 more potentially affected by CVE-2022-31183 via co.fs2:fs2-io_sjs1_2.13 (>=3.1.0, <=3.2.10)

co.fs2:fs2-iosjs12.13 MAVEN version =3.1.0, =3.1-2-8dabe12, =0.0-a75a626, =0.0-a75a626, =0.1-0b4f7b6, =0.11.0, =0.0.0-3-cca5341b, =0.0.0-3-cca5341b, =0.4.2, =0.0.1, =0.18.3, =0.23.0, =0.23.1 and more Source cves: CVE-2022-31183 Source advisory: MEND:CVE-2022-31183...

co.fs2:fs2-protocols_sjs1_3 (>=3.1-2-8dabe12, <=3.2.10), com.47deg:energy-monitor-persistence-app_sjs1_3 (0.2.0) +62 more potentially affected by CVE-2022-31183 via co.fs2:fs2-io_sjs1_3 (>=3.1.0, <=3.2.10)

co.fs2:fs2-iosjs13 MAVEN version =3.1.0, =3.1-2-8dabe12, =0.0-a75a626, =0.0-a75a626, =0.1-a9d8da5, =0.1-a9d8da5, =0.1-a9d8da5, =0.0-a49e826, =0.11.0, =0.0.0-3-cca5341b, =0.0.0-3-cca5341b, =0.4.1, =0.2.0, =0.5.2 and more Source cves: CVE-2022-31183 Source advisory: MEND:CVE-2022-31183...

au.id.tmm.fetch:fetch-aws-textract_3 (>=0.2.0, <=0.4.0), au.id.tmm.fetch:fetch-cache_3 (>=0.2.0, <=0.4.0) +283 more potentially affected by CVE-2022-31183 via co.fs2:fs2-io_3 (>=3.1.0, <=3.2.10)

co.fs2:fs2-io3 MAVEN version =3.1.0, =0.2.0, =0.2.0, =0.2.0, =3.1-2-8dabe12, =0.30.0, =0.31.0, =0.10.0, =0.0-a75a626, =0.0-a75a626, =0.0-a75a626, =0.0-a75a626, =0.1-a9d8da5, =0.1-7624644 and more Source cves: CVE-2022-31183 Source advisory: OSV:GHSA-2CPX-6PQP-WF35...

ch.j3t:zio-prefetcher_2.12 (0.8.0-rc6), co.fs2:fs2-protocols_2.12 (>=3.1-2-8dabe12, <=3.2.10) +253 more potentially affected by CVE-2022-31183 via co.fs2:fs2-io_2.12 (>=3.1.0, <=3.2.10)

co.fs2:fs2-io2.12 MAVEN version =3.1.0, =3.1-2-8dabe12, =0.30.0, =0.31.0, =0.4.0, =0.9.0, =0.9.0, =0.1-f497734, =0.1-f497734, =0.1-f497734, =0.1-f497734, =0.31.1, =0.31.1, =0.31.2 - com.banno:vault4s2.12 9.1.0 - com.compstak:circe-geojson-http4s2.12 11.0.0 and more Source cves: CVE-2022-31183...

au.id.tmm.fetch:fetch-aws-textract_3 (>=0.2.0, <=0.4.0), au.id.tmm.fetch:fetch-cache_3 (>=0.2.0, <=0.4.0) +283 more potentially affected by CVE-2022-31183 via co.fs2:fs2-io_3 (>=3.1.0, <=3.2.10)

co.fs2:fs2-io3 MAVEN version =3.1.0, =0.2.0, =0.2.0, =0.2.0, =3.1-2-8dabe12, =0.30.0, =0.31.0, =0.10.0, =0.0-a75a626, =0.0-a75a626, =0.0-a75a626, =0.0-a75a626, =0.1-a9d8da5, =0.1-7624644 and more Source cves: CVE-2022-31183 Source advisory: GHSA-2CPX-6PQP-WF35...

co.fs2:fs2-protocols_sjs1_2.13 (>=3.1-2-8dabe12, <=3.2.10), com.47deg:energy-monitor-persistence-app_sjs1_2.13 (0.2.0) +59 more potentially affected by CVE-2022-31183 via co.fs2:fs2-io_sjs1_2.13 (>=3.1.0, <=3.2.10)

co.fs2:fs2-iosjs12.13 MAVEN version =3.1.0, =3.1-2-8dabe12, =0.0-a75a626, =0.0-a75a626, =0.1-0b4f7b6, =0.11.0, =0.0.0-3-cca5341b, =0.0.0-3-cca5341b, =0.4.2, =0.0.1, =0.18.3, =0.23.0, =0.23.1 and more Source cves: CVE-2022-31183 Source advisory: OSV:GHSA-2CPX-6PQP-WF35...

co.fs2:fs2-protocols_sjs1_3 (>=3.1-2-8dabe12, <=3.2.10), com.47deg:energy-monitor-persistence-app_sjs1_3 (0.2.0) +62 more potentially affected by CVE-2022-31183 via co.fs2:fs2-io_sjs1_3 (>=3.1.0, <=3.2.10)

co.fs2:fs2-iosjs13 MAVEN version =3.1.0, =3.1-2-8dabe12, =0.0-a75a626, =0.0-a75a626, =0.1-a9d8da5, =0.1-a9d8da5, =0.1-a9d8da5, =0.0-a49e826, =0.11.0, =0.0.0-3-cca5341b, =0.0.0-3-cca5341b, =0.4.1, =0.2.0, =0.5.2 and more Source cves: CVE-2022-31183 Source advisory: GHSA-2CPX-6PQP-WF35...