at.porscheinformatik.tapestry:tapestry-csrf-protection (>=2.0.0.RELEASE <=3.0.1.RELEASE), br.com.arsmachina:tapestry-url-rewriter (>=1.0.1 <=2.0.0) +133 more potentially affected by CVE-2022-31781 via org.apache.tapestry:tapestry-core (>=5.0.10 <=5.8.1)

org.apache.tapestry:tapestry-core MAVEN version =5.0.10, =2.0.0.RELEASE, =1.0.1, =0.9.11, =0.9.13, =1.0.4, =0.1.1, =0.8.6, =0.8.6, =0.9, =1.3, =3.0, =0.8.9, =1.3, =0.8.9, =0.9-obsolete and more Source cves: CVE-2022-31781 Source advisory: OSV:GHSA-227G-7CVV-6FF3...

CVE-2022-31781

CVE-2022-31781 affects Apache Tapestry up to version 5.8.1. It is a Regular Expression Denial of Service (ReDoS) vulnerability in how the ContentType class handles Content Types, where crafted inputs may cause catastrophic backtracking and exponential-time processing. The issue is triggered only ...