graphhopper 资源管理错误漏洞

graphhopper is a software application. A fast and memory efficient Java routing engine, released under the Apache License 2.0. A security vulnerability exists in GraphHopper prior to versions 2.0 and 2.4. An attacker could use this vulnerability to cause a denial of service of the program...

com.graphhopper:graphhopper-android (>=0.4.0 <=0.11.0), org.mapsforge:mapsforge-map-android (>=0.7.0 <=0.9.1) +5 more potentially affected by CVE-2017-1000498 via com.caverock:androidsvg (=1.2.2-beta-1)

com.caverock:androidsvg MAVEN version =1.2.2-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on com.caverock:androidsvg and may be impacted: - com.graphhopper:graphhopper-android =0.4.0, =0.7.0, =0.7.0, =0.6.0, =0.6.0, =5.4, =6.0.3 Source cves:...