com.github.edgar615:spring-boot-util-jwt (>=0.0.1, <=0.0.2), com.github.edgar615:spring-boot-util-web (>=0.1.0, <=0.1.3) +34 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.0.37)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.37 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.edgar615:spring-boot-util-jwt =0.0.1, =0.1.0, =2.0.0, =3.0.0-rc.2...

com.netflix.genie:genie-app (>=3.0.0-rc.1, <=4.3.17), com.netflix.genie:genie-security (>=4.0.0-rc.1, <=4.0.0-rc.31) +3 more potentially affected by CVE-2024-4701 via com.netflix.genie:genie-web (>=0.22, <=4.3.17)

com.netflix.genie:genie-web MAVEN version =0.22, =3.0.0-rc.1, =4.0.0-rc.1, =4.0.0-rc.92, =4.0.0-rc.1, =0.22, =1.0.1 Source cves: CVE-2024-4701 Source advisory: MEND:CVE-2024-4701...

Path Traversal

com.netflix.genie: genie-web is vulnerable to Path Traversal. The vulnerability is caused by improper filename validation in the saveAttachments method within LocalFileSystemAttachmentServiceImpl.java, due to missing checks to prevent a filename from starting with ... An attacker can upload a fil...

com.netflix.genie:genie-web-int-tests (0.24) potentially affected by CVE-2024-4701 via com.netflix.genie:genie-web (0.24)

com.netflix.genie:genie-web MAVEN version 0.24 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.genie:genie-web and may be impacted: - com.netflix.genie:genie-web-int-tests 0.24 Source cves: CVE-2024-4701 Source advisory:...

com.netflix.genie:genie-web-int-tests (1.0.0) potentially affected by CVE-2024-4701 via com.netflix.genie:genie-web (1.0.0)

com.netflix.genie:genie-web MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.genie:genie-web and may be impacted: - com.netflix.genie:genie-web-int-tests 1.0.0 Source cves: CVE-2024-4701 Source advisory:...

com.netflix.genie:genie-web-int-tests (1.0.1) potentially affected by CVE-2024-4701 via com.netflix.genie:genie-web (1.0.1)

com.netflix.genie:genie-web MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.genie:genie-web and may be impacted: - com.netflix.genie:genie-web-int-tests 1.0.1 Source cves: CVE-2024-4701 Source advisory:...

com.netflix.genie:genie-app (3.0.0-rc.2) potentially affected by CVE-2024-4701 via com.netflix.genie:genie-web (3.0.0-rc.2)

com.netflix.genie:genie-web MAVEN version 3.0.0-rc.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.genie:genie-web and may be impacted: - com.netflix.genie:genie-app 3.0.0-rc.2 Source cves: CVE-2024-4701 Source advisory:...

com.netflix.genie:genie-app (3.0.0-rc.4) potentially affected by CVE-2024-4701 via com.netflix.genie:genie-web (3.0.0-rc.4)

com.netflix.genie:genie-web MAVEN version 3.0.0-rc.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.genie:genie-web and may be impacted: - com.netflix.genie:genie-app 3.0.0-rc.4 Source cves: CVE-2024-4701 Source advisory:...

com.netflix.genie:genie-app (3.0.0-rc.5) potentially affected by CVE-2024-4701 via com.netflix.genie:genie-web (3.0.0-rc.5)

com.netflix.genie:genie-web MAVEN version 3.0.0-rc.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.genie:genie-web and may be impacted: - com.netflix.genie:genie-app 3.0.0-rc.5 Source cves: CVE-2024-4701 Source advisory:...

com.netflix.genie:genie-app (3.0.0-rc.6) potentially affected by CVE-2024-4701 via com.netflix.genie:genie-web (3.0.0-rc.6)

com.netflix.genie:genie-web MAVEN version 3.0.0-rc.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.genie:genie-web and may be impacted: - com.netflix.genie:genie-app 3.0.0-rc.6 Source cves: CVE-2024-4701 Source advisory:...

com.netflix.genie:genie-app (3.0.0-rc.7) potentially affected by CVE-2024-4701 via com.netflix.genie:genie-web (3.0.0-rc.7)

com.netflix.genie:genie-web MAVEN version 3.0.0-rc.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.genie:genie-web and may be impacted: - com.netflix.genie:genie-app 3.0.0-rc.7 Source cves: CVE-2024-4701 Source advisory:...

com.netflix.genie:genie-app (3.0.0-rc.10) potentially affected by CVE-2024-4701 via com.netflix.genie:genie-web (3.0.0-rc.10)

com.netflix.genie:genie-web MAVEN version 3.0.0-rc.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.genie:genie-web and may be impacted: - com.netflix.genie:genie-app 3.0.0-rc.10 Source cves: CVE-2024-4701 Source advisory:...

com.netflix.genie:genie-app (3.0.0-rc.11) potentially affected by CVE-2024-4701 via com.netflix.genie:genie-web (3.0.0-rc.11)

com.netflix.genie:genie-web MAVEN version 3.0.0-rc.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.genie:genie-web and may be impacted: - com.netflix.genie:genie-app 3.0.0-rc.11 Source cves: CVE-2024-4701 Source advisory:...

com.netflix.genie:genie-app (3.0.0-rc.12) potentially affected by CVE-2024-4701 via com.netflix.genie:genie-web (3.0.0-rc.12)

com.netflix.genie:genie-web MAVEN version 3.0.0-rc.12 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.genie:genie-web and may be impacted: - com.netflix.genie:genie-app 3.0.0-rc.12 Source cves: CVE-2024-4701 Source advisory:...

com.netflix.genie:genie-app (3.0.0-rc.13) potentially affected by CVE-2024-4701 via com.netflix.genie:genie-web (3.0.0-rc.13)

com.netflix.genie:genie-web MAVEN version 3.0.0-rc.13 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.genie:genie-web and may be impacted: - com.netflix.genie:genie-app 3.0.0-rc.13 Source cves: CVE-2024-4701 Source advisory:...

com.netflix.genie:genie-app (3.0.0-rc.14) potentially affected by CVE-2024-4701 via com.netflix.genie:genie-web (3.0.0-rc.14)

com.netflix.genie:genie-web MAVEN version 3.0.0-rc.14 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.genie:genie-web and may be impacted: - com.netflix.genie:genie-app 3.0.0-rc.14 Source cves: CVE-2024-4701 Source advisory:...

com.netflix.genie:genie-app (3.0.0-rc.15) potentially affected by CVE-2024-4701 via com.netflix.genie:genie-web (3.0.0-rc.15)

com.netflix.genie:genie-web MAVEN version 3.0.0-rc.15 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.genie:genie-web and may be impacted: - com.netflix.genie:genie-app 3.0.0-rc.15 Source cves: CVE-2024-4701 Source advisory:...

com.netflix.genie:genie-app (3.0.0-rc.16) potentially affected by CVE-2024-4701 via com.netflix.genie:genie-web (3.0.0-rc.16)

com.netflix.genie:genie-web MAVEN version 3.0.0-rc.16 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.genie:genie-web and may be impacted: - com.netflix.genie:genie-app 3.0.0-rc.16 Source cves: CVE-2024-4701 Source advisory:...

com.netflix.genie:genie-app (3.0.0-rc.17) potentially affected by CVE-2024-4701 via com.netflix.genie:genie-web (3.0.0-rc.17)

com.netflix.genie:genie-web MAVEN version 3.0.0-rc.17 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.genie:genie-web and may be impacted: - com.netflix.genie:genie-app 3.0.0-rc.17 Source cves: CVE-2024-4701 Source advisory:...

com.netflix.genie:genie-app (3.0.0-rc.18) potentially affected by CVE-2024-4701 via com.netflix.genie:genie-web (3.0.0-rc.18)

com.netflix.genie:genie-web MAVEN version 3.0.0-rc.18 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.genie:genie-web and may be impacted: - com.netflix.genie:genie-app 3.0.0-rc.18 Source cves: CVE-2024-4701 Source advisory:...