io.ratpack:ratpack-codahale-metrics (0.9.1), io.ratpack:ratpack-groovy (0.9.1) +11 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (0.9.1)

io.ratpack:ratpack-core MAVEN version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.1 - io.ratpack:ratpack-groovy 0.9.1 - io.ratpack:ratpack-groovy-test 0.9....

io.ratpack:ratpack-codahale-metrics (0.9.13), io.ratpack:ratpack-config (0.9.13) +17 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (0.9.13)

io.ratpack:ratpack-core MAVEN version 0.9.13 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.13 - io.ratpack:ratpack-config 0.9.13 - io.ratpack:ratpack-groovy 0.9.13...

io.ratpack:ratpack-codahale-metrics (0.9.14), io.ratpack:ratpack-config (0.9.14) +17 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (0.9.14)

io.ratpack:ratpack-core MAVEN version 0.9.14 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.14 - io.ratpack:ratpack-config 0.9.14 - io.ratpack:ratpack-groovy 0.9.14...

io.ratpack:ratpack-codahale-metrics (0.9.15), io.ratpack:ratpack-config (0.9.15) +17 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (0.9.15)

io.ratpack:ratpack-core MAVEN version 0.9.15 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.15 - io.ratpack:ratpack-config 0.9.15 - io.ratpack:ratpack-groovy 0.9.15...

com.bertramlabs.plugins:ratpack-asset-pipeline (>=2.2.7, <=2.3.8), io.ratpack:ratpack-codahale-metrics (0.9.17) +17 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (0.9.17)

io.ratpack:ratpack-core MAVEN version 0.9.17 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - com.bertramlabs.plugins:ratpack-asset-pipeline =2.2.7, =2.3.8 - io.ratpack:ratpack-codahale-metrics 0.9.17 -...

com.bertramlabs.plugins:ratpack-asset-pipeline (>=2.5.2, <=4.3.0), com.bytekast.serverless-local-apigateway:com.bytekast.serverless-local-apigateway.gradle.plugin (>=0.4-snapshot, <=0.5) +85 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (>=1.0.0-rc-1, <=1.9.0-rc-2)

io.ratpack:ratpack-core MAVEN version =1.0.0-rc-1, =2.5.2, =0.4-snapshot, =0.0.1, =0.0.1, =0.0.2, =1.0.0, =1.2, =1.2, =1.3, =1.1, =1.1, =1.5, =1.1, =1.8 and more Source cves: CVE-2021-29479 Source advisory: GHSA-W6RQ-6H34-VH7Q...

io.ratpack:ratpack-codahale-metrics (0.9.2), io.ratpack:ratpack-groovy (0.9.2) +12 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (0.9.2)

io.ratpack:ratpack-core MAVEN version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.2 - io.ratpack:ratpack-groovy 0.9.2 - io.ratpack:ratpack-groovy-test 0.9....

io.ratpack:ratpack-codahale-metrics (0.9.10), io.ratpack:ratpack-groovy (0.9.10) +16 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (0.9.10)

io.ratpack:ratpack-core MAVEN version 0.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.10 - io.ratpack:ratpack-groovy 0.9.10 - io.ratpack:ratpack-groovy-test...

io.ratpack:ratpack-codahale-metrics (0.9.11), io.ratpack:ratpack-groovy (0.9.11) +16 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (0.9.11)

io.ratpack:ratpack-core MAVEN version 0.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.11 - io.ratpack:ratpack-groovy 0.9.11 - io.ratpack:ratpack-groovy-test...

io.ratpack:ratpack-codahale-metrics (0.9.12), io.ratpack:ratpack-groovy (0.9.12) +15 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (0.9.12)

io.ratpack:ratpack-core MAVEN version 0.9.12 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.12 - io.ratpack:ratpack-groovy 0.9.12 - io.ratpack:ratpack-groovy-test...

io.ratpack:ratpack-codahale-metrics (0.9.13), io.ratpack:ratpack-config (0.9.13) +17 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (0.9.13)

io.ratpack:ratpack-core MAVEN version 0.9.13 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.13 - io.ratpack:ratpack-config 0.9.13 - io.ratpack:ratpack-groovy 0.9.13...

io.ratpack:ratpack-codahale-metrics (0.9.14), io.ratpack:ratpack-config (0.9.14) +17 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (0.9.14)

io.ratpack:ratpack-core MAVEN version 0.9.14 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.14 - io.ratpack:ratpack-config 0.9.14 - io.ratpack:ratpack-groovy 0.9.14...

io.ratpack:ratpack-codahale-metrics (0.9.15), io.ratpack:ratpack-config (0.9.15) +17 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (0.9.15)

io.ratpack:ratpack-core MAVEN version 0.9.15 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.15 - io.ratpack:ratpack-config 0.9.15 - io.ratpack:ratpack-groovy 0.9.15...

com.bertramlabs.plugins:ratpack-asset-pipeline (>=2.5.2, <=4.3.0), com.bytekast.serverless-local-apigateway:com.bytekast.serverless-local-apigateway.gradle.plugin (>=0.4-snapshot, <=0.5) +85 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (>=1.0.0-rc-1, <=1.9.0-rc-2)

io.ratpack:ratpack-core MAVEN version =1.0.0-rc-1, =2.5.2, =0.4-snapshot, =0.0.1, =0.0.1, =0.0.2, =1.0.0, =1.2, =1.2, =1.3, =1.1, =1.1, =1.5, =1.1, =1.8 and more Source cves: CVE-2021-29485 Source advisory: OSV:GHSA-HC33-32VW-RPP9...

com.bertramlabs.plugins:ratpack-asset-pipeline (>=2.5.2, <=4.3.0), com.bytekast.serverless-local-apigateway:com.bytekast.serverless-local-apigateway.gradle.plugin (>=0.4-snapshot, <=0.5) +85 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (>=1.0.0-rc-1, <=1.9.0-rc-2)

io.ratpack:ratpack-core MAVEN version =1.0.0-rc-1, =2.5.2, =0.4-snapshot, =0.0.1, =0.0.1, =0.0.2, =1.0.0, =1.2, =1.2, =1.3, =1.1, =1.1, =1.5, =1.1, =1.8 and more Source cves: CVE-2021-29485 Source advisory: GHSA-HC33-32VW-RPP9...

com.bertramlabs.plugins:ratpack-asset-pipeline (>=2.2.7, <=4.3.0), com.bytekast.serverless-local-apigateway:com.bytekast.serverless-local-apigateway.gradle.plugin (>=0.4-snapshot, <=0.5) +90 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (>=0.9.0, <=1.9.0-rc-2)

io.ratpack:ratpack-core MAVEN version =0.9.0, =2.2.7, =0.4-snapshot, =0.0.1, =0.0.1, =0.0.2, =1.0.0, =1.2, =1.2, =1.3, =1.1, =1.1, =1.5, =1.1, =1.8 and more Source cves: CVE-2021-29485 Source advisory: MEND:CVE-2021-29485...

com.bertramlabs.plugins:ratpack-asset-pipeline (>=2.2.7, <=4.3.0), com.bytekast.serverless-local-apigateway:com.bytekast.serverless-local-apigateway.gradle.plugin (>=0.4-snapshot, <=0.5) +90 more potentially affected by CVE-2021-29479 via io.ratpack:ratpack-core (>=0.9.0, <=1.9.0-rc-2)

io.ratpack:ratpack-core MAVEN version =0.9.0, =2.2.7, =0.4-snapshot, =0.0.1, =0.0.1, =0.0.2, =1.0.0, =1.2, =1.2, =1.3, =1.1, =1.1, =1.5, =1.1, =1.8 and more Source cves: CVE-2021-29479 Source advisory: MEND:CVE-2021-29479...

Cross site scripting

All versions of io.ratpack:ratpack-core from 0.9.10 inclusive and before 1.7.6 are vulnerable to Cross-site Scripting XSS. This affects the development mode error handler when an exception message contains untrusted data. Note the production mode error handler is not vulnerable - so for this to b...

CVE-2019-10770

The CVE-2019-10770 entry affects io.ratpack:ratpack-core. The vulnerability is an XSS in the development mode error handler when an exception message contains untrusted data; the production-mode error handler is not vulnerable. Affected versions are Ratpack-core 0.9.10 up to, but not including, 1...

CVE-2019-10770

All versions of io.ratpack:ratpack-core from 0.9.10 inclusive and before 1.7.6 are vulnerable to Cross-site Scripting XSS. This affects the development mode error handler when an exception message contains untrusted data. Note the production mode error handler is not vulnerable - so for this to b...