CVE-2023-36480

CVE-2023-36480 affects the Aerospike Java Client. The vulnerability arises from unsafe deserialization of server-provided data: messages may contain Java objects that the client deserializes via JBLOB payloads using Java’s ObjectInputStream, without sufficient validation. This can lead to Remote ...

com.aerospike:aerospike-connect-inbound-sdk (=1.2.1), com.aerospike:aerospike-document-api (>=1.2.0 <=2.0.0) +20 more potentially affected by CVE-2023-36480 via com.aerospike:aerospike-client (>=6.0.0 <=6.1.9)

com.aerospike:aerospike-client MAVEN version =6.0.0, =1.2.0, =1.6.0, =6.1.0, =2.1.0, =0.8.0, =0.8.0, =0.8.0, =3.5.0, =0.8.0, =1.1, =2.2.0, =3.0.0-RC8 - io.github.reugn:aerospike-client-kotlin =0.4.0 - io.github.reugn:aerospike-core2.12 =0.5.0 and more Source cves: CVE-2023-36480 Source advisory:...

com.aerospike:aerospike-connect-inbound-sdk (>=0.9.7 <=1.2.0), com.aerospike:aerospike-document-api (>=0.5.0 <=1.1.3) +36 more potentially affected by CVE-2023-36480 via com.aerospike:aerospike-client (>=5.0.0 <=5.1.9)

com.aerospike:aerospike-client MAVEN version =5.0.0, =0.9.7, =0.5.0, =1.0.0, =5.0.3, =1.1.0, =0.7.0, =0.7.0, =0.7.0, =3.0.0, =0.7.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2023-36480 Source advisory: OSV:GHSA-JJ95-55CR-9597...