CVE-2024-23078

Summary: CVE-2024-23078 affects JGraphT Core 1.5.2 due to a potential NullPointerException in the function ToleranceDoubleComparator::compare(Double, Double) , which (per IBM’s bulletin) could allow a remote attacker to cause a denial of service. The IBM Security Bulletin lists this CVE among mul...

PT-2024-19656

Name of the Vulnerable Software and Affected Versions JGraphT Core version 1.5.2 Description A NullPointerException was discovered in JGraphT Core via the component org.jgrapht.alg.util.ToleranceDoubleComparator::compareDouble, Double. However, the existence of this issue is disputed by multiple...

CVE-2024-23079

JGraphT Core v1.5.2 was discovered to contain a NullPointerException via the component org.jgrapht.alg.util.ToleranceDoubleComparator::compareDouble, Double. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerabilit...

CVE-2024-23079

CVE-2024-23079 is linked in IBM’s bulletin as a DoS vulnerability caused by a NullPointerException in the JGraphT Core component org.jgrapht.alg.util.ToleranceDoubleComparator::compare(Double, Double). IBM lists affected IBM Event Processing versions 1.1.2–1.1.7 and recommends upgrading to 1.1.8 ...

JGraphT 安全漏洞

JGraphT is a free Java class library open-sourced by JGraphT. It provides mathematical graph theory objects and algorithms. A security vulnerability exists in JGraphT v1.5.2, which stems from a null pointer exception contained in the component org.jgrapht.alg.util.ToleranceDoubleComparator...

Spring Modulith 0.3 released

Hot on the heels of Spring Boot 3.0.2, I am excited to announce the 0.3 release of Spring Modulith. The release is packed with improvements. We have tweaked a couple of things that might require your attention and a couple of adapting changes to your code. The most notable changes are: GH-114 – W...