EUVD-2020-0436

Malware in sbrugna...

EUVD-2020-0381

Malware in sbrugna...

CVE-2020-7647

CVE-2020-7647 affects io.jooby:jooby and org.jooby:jooby. Two directory traversal vectors exist: (1) when sharing a File System directory (assets("/static/**", Paths.get("static"))) the loader may fall back to classpath resources, enabling access to files outside the web root (e.g., configuration...

CVE-2020-7622

CVE-2020-7622 affects io.jooby:jooby-netty before 1.6.9 and before 2.2.1, where DefaultHttpHeaders is set to false and header validation is disabled, enabling HTTP Response Splitting as described in public advisories. Exploitation status is not provided in the docs. Impact is a potential for abus...