io.github.artemy-osipov.thrift:rest-bridge-micronaut (0.4.0), net.javacrumbs.shedlock:shedlock-micronaut (4.23.0) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.4.2)

io.micronaut:micronaut-http-server-netty MAVEN version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - io.github.artemy-osipov.thrift:rest-bridge-micronaut 0.4.0 -...

com.slack.api:bolt-micronaut (1.8.0) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.5.1)

io.micronaut:micronaut-http-server-netty MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut 1.8.0 Source cves: CVE-2024-23639 Source advisory:...

pl.coderion:openfoodfacts-java-wrapper (0.9.3) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.5.5)

io.micronaut:micronaut-http-server-netty MAVEN version 2.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - pl.coderion:openfoodfacts-java-wrapper 0.9.3 Source cves: CVE-2024-23639 Source...

io.micronaut.acme:micronaut-acme (3.0.0-rc1), net.javacrumbs.shedlock:shedlock-micronaut (4.25.0) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.5.8)

io.micronaut:micronaut-http-server-netty MAVEN version 2.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - io.micronaut.acme:micronaut-acme 3.0.0-rc1 -...

com.slack.api:bolt-micronaut (>=1.10.0-rc1, <=1.10.0-rc2) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.5.11)

io.micronaut:micronaut-http-server-netty MAVEN version 2.5.11 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut =1.10.0-rc1, =1.10.0-rc2 Source cves:...

com.exactpro.th2:th2-cr-converter (>=1.3.0, <=1.3.1), com.slack.api:bolt-micronaut (>=1.16.0, <=1.27.3) +16 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (>=3.0.0-m3, <=3.8.0)

io.micronaut:micronaut-http-server-netty MAVEN version =3.0.0-m3, =1.3.0, =1.16.0, =0.1.0, =3.1.0, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =1.0.0-m2, =3.8.0, =1.0.0-m1, =3.0.0-m3, =3.0.0-alpha5, =3.0.0-alpha5, =3.0.0-beta1 and more Source cves: CVE-2024-23639 Source advisory: GHSA-583G-G682-CRXF...

io.micronaut.configuration:micronaut-multitenancy-gorm (1.0.0.rc3), io.micronaut.configuration:micronaut-security-ldap (1.0.0.rc3) +7 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.0.0.rc3)

io.micronaut:micronaut-http-server MAVEN version 1.0.0.rc3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-multitenancy-gorm 1.0.0.rc3 -...

io.micronaut.configuration:micronaut-multitenancy-gorm (1.0.0), io.micronaut.configuration:micronaut-security-ldap (1.0.0) +6 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.0.0)

io.micronaut:micronaut-http-server MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-multitenancy-gorm 1.0.0 -...

com.bertramlabs.plugins:asset-pipeline-micronaut (3.0.7), io.micronaut.configuration:micronaut-multitenancy-gorm (1.0.1) +8 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.0.1)

io.micronaut:micronaut-http-server MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - com.bertramlabs.plugins:asset-pipeline-micronaut 3.0.7 -...

io.micronaut.configuration:micronaut-multitenancy-gorm (>=1.0.2, <=1.1.0.rc1), io.micronaut.configuration:micronaut-security-ldap (1.0.2) +7 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.0.2)

io.micronaut:micronaut-http-server MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-multitenancy-gorm =1.0.2, =1.1.0.rc1 -...

io.micronaut.configuration:micronaut-multitenancy-gorm (1.0.3), io.micronaut.configuration:micronaut-security-ldap (1.0.3) +7 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.0.3)

io.micronaut:micronaut-http-server MAVEN version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-multitenancy-gorm 1.0.3 -...

io.micronaut.aws:micronaut-function-aws-api-proxy (>=1.1.0.m2, <=1.1.2), io.micronaut.aws:micronaut-function-aws-custom-runtime (>=1.1.0.m2, <=1.1.1) +11 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.0.4)

io.micronaut:micronaut-http-server MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.aws:micronaut-function-aws-api-proxy =1.1.0.m2, =1.1.0.m2, =1.1.0.rc2,...

io.micronaut.configuration:micronaut-security-ldap (1.0.5), io.micronaut:micronaut-function-web (1.0.5) +6 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.0.5)

io.micronaut:micronaut-http-server MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-security-ldap 1.0.5 -...

io.micronaut.configuration:micronaut-security-ldap (1.1.0.m1), io.micronaut:micronaut-function-web (1.1.0.m1) +6 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.1.0.m1)

io.micronaut:micronaut-http-server MAVEN version 1.1.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-security-ldap 1.1.0.m1 -...

io.micronaut.configuration:micronaut-security-ldap (1.1.0.rc1), io.micronaut:micronaut-function-web (1.1.0.rc1) +6 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.1.0.rc1)

io.micronaut:micronaut-http-server MAVEN version 1.1.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-security-ldap 1.1.0.rc1 -...

io.micronaut.configuration:micronaut-security-ldap (1.1.0.rc2), io.micronaut:micronaut-function-web (1.1.0.rc2) +6 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.1.0.rc2)

io.micronaut:micronaut-http-server MAVEN version 1.1.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-security-ldap 1.1.0.rc2 -...

io.micronaut:micronaut-function-web (1.1.1), io.micronaut:micronaut-http-server-netty (1.1.1) +3 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.1.1)

io.micronaut:micronaut-http-server MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut:micronaut-function-web 1.1.1 - io.micronaut:micronaut-http-server-netty 1.1.1 ...

io.micronaut.configuration:micronaut-multitenancy-gorm (>=1.1.1, <=1.1.3), io.micronaut:micronaut-function-web (1.1.2) +4 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.1.2)

io.micronaut:micronaut-http-server MAVEN version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-multitenancy-gorm =1.1.1, =1.1.1, =1.3.1 Source cves:...

com.hectorlopezfernandez.pebble:pebble-micronaut (>=1.0.0, <=1.1.0), io.micronaut:micronaut-function-web (1.1.3) +8 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.1.3)

io.micronaut:micronaut-http-server MAVEN version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - com.hectorlopezfernandez.pebble:pebble-micronaut =1.0.0, =1.1.3, =1.2.0.rc1 -...

io.micronaut.aws:micronaut-function-aws-api-proxy (>=1.3.0, <=1.3.9), io.micronaut.aws:micronaut-function-aws-custom-runtime (>=1.3.0, <=1.3.8) +9 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.1.4)

io.micronaut:micronaut-http-server MAVEN version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.aws:micronaut-function-aws-api-proxy =1.3.0, =1.3.0, =1.1.4, =1.2.0 -...