org.microjservice.lark:lark-api (>=0.1.0, <=0.1.3) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.5.3)

io.micronaut:micronaut-http-server-netty MAVEN version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - org.microjservice.lark:lark-api =0.1.0, =0.1.3 Source cves: CVE-2024-23639 Sour...

io.micronaut.configuration:micronaut-security-ldap (1.3.0.rc1), io.micronaut.configuration:micronaut-security-oauth2 (1.3.0.rc1) +6 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.3.0.rc1)

io.micronaut:micronaut-http-server MAVEN version 1.3.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-security-ldap 1.3.0.rc1 -...

com.slack.api:bolt-micronaut (>=1.10.0, <=1.15.0), io.micronaut.acme:micronaut-acme (>=3.0.0, <=3.0.1) +1 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.5.12)

io.micronaut:micronaut-http-server-netty MAVEN version 2.5.12 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut =1.10.0, =3.0.0, =3.0.1 -...

io.micronaut:micronaut-function-web (1.2.2), io.micronaut:micronaut-http-server-netty (1.2.2) +1 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.2.2)

io.micronaut:micronaut-http-server MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut:micronaut-function-web 1.2.2 - io.micronaut:micronaut-http-server-netty 1.2.2 ...

com.agorapulse:micronaut-slack-http (>=1.0.0-micronaut-2.0, <=1.0.4-micronaut-2.0), io.activated.reduction:reduction-micronaut (>=1.0.2.10, <=1.0.2.12) +2 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.5.13)

io.micronaut:micronaut-http-server MAVEN version 2.5.13 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - com.agorapulse:micronaut-slack-http =1.0.0-micronaut-2.0, =1.0.2.10, =1.0.2.12 -...

com.slack.api:bolt-micronaut (1.9.0) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.5.9)

io.micronaut:micronaut-http-server-netty MAVEN version 2.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut 1.9.0 Source cves: CVE-2024-23639 Source advisory:...

com.slack.api:bolt-micronaut (1.8.1), io.micronaut.graphql:micronaut-hello-world-groovy (2.3.1) +3 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.5.4)

io.micronaut:micronaut-http-server-netty MAVEN version 2.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut 1.8.1 -...

com.slack.api:bolt-micronaut (1.0.8), info.novatec:micronaut-camunda-bpm-feature (0.3.1) +8 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (1.3.5)

io.micronaut:micronaut-http-server-netty MAVEN version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut 1.0.8 - info.novatec:micronaut-camunda-bpm-feature...

io.micronaut:micronaut-function-web (1.3.1), io.micronaut:micronaut-http-server-netty (1.3.1) +1 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.3.1)

io.micronaut:micronaut-http-server MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut:micronaut-function-web 1.3.1 - io.micronaut:micronaut-http-server-netty 1.3.1 ...

io.micronaut:micronaut-function-web (2.1.1), io.micronaut:micronaut-http-server-netty (2.1.1) +1 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.1.1)

io.micronaut:micronaut-http-server MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut:micronaut-function-web 2.1.1 - io.micronaut:micronaut-http-server-netty 2.1.1 ...

com.slack.api:bolt-micronaut (1.7.1), net.javacrumbs.shedlock:shedlock-micronaut (>=4.22.0, <=4.22.1) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server-netty (2.4.1)

io.micronaut:micronaut-http-server-netty MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server-netty and may be impacted: - com.slack.api:bolt-micronaut 1.7.1 - net.javacrumbs.shedlock:shedlock-micronaut...

io.micronaut:micronaut-function-web (2.4.3), io.micronaut:micronaut-http-server-netty (2.4.3) potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.4.3)

io.micronaut:micronaut-http-server MAVEN version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut:micronaut-function-web 2.4.3 - io.micronaut:micronaut-http-server-netty 2.4.3...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-1172)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2024-1143)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-1192)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-23452

Request smuggling vulnerability in HTTP server in Apache bRPC 0.9.51.7.0 on all platforms allows attacker to smuggle request. Vulnerability Cause Description： The httpparser does not comply with the RFC-7230 HTTP 1.1 specification. Attack scenario: If a message is received with both a...

Cross site request forgery (csrf)

Request smuggling vulnerability in HTTP server in Apache bRPC 0.9.51.7.0 on all platforms allows attacker to smuggle request. Vulnerability Cause Description: The httpparser does not comply with the RFC-7230 HTTP 1.1 specification. Attack scenario: If a message is received with both a...

CVE-2024-23452

Apache bRPC’s HTTP server (versions 0.9.5–1.7.0) is affected by a request-smuggling issue caused by non-compliance of the http_parser with RFC 7230 when handling messages with both Transfer-Encoding and Content-Length. In the described scenario, a frontend server using TE can cause a backend bRPC...

CVE-2024-23452 Apache bRPC: HTTP request smuggling vulnerability

Request smuggling vulnerability in HTTP server in Apache bRPC 0.9.51.7.0 on all platforms allows attacker to smuggle request. Vulnerability Cause Description： The httpparser does not comply with the RFC-7230 HTTP 1.1 specification. Attack scenario: If a message is received with both a...

EulerOS 2.0 SP9 : curl (EulerOS-SA-2024-1172)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - This flaw allows a malicious HTTP server to set 'super cookies' in curl that are then passed back to more origins than what is otherwise allowed o...