path traversal in Jooby

Impact Access to sensitive information available from classpath. Patches Patched version: 1.6.7 and 2.8.2 Commit 1.x: https://github.com/jooby-project/jooby/commit/34f526028e6cd0652125baa33936ffb6a8a4a009 Commit 2.x:...

org.jooby:jooby-hbm (0.4.2), org.jooby:jooby-hbs (0.4.2) +2 more potentially affected by CVE-2020-7647 via org.jooby:jooby (0.4.2)

org.jooby:jooby MAVEN version 0.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:jooby-hbm 0.4.2 - org.jooby:jooby-hbs 0.4.2 - org.jooby:jooby-jackson 0.4.2 - org.jooby:jooby-jdbc 0.4.2 Source cves:...

org.jooby:coverage-report (0.6.0), org.jooby:jooby-camel (0.6.0) +19 more potentially affected by CVE-2020-7647 via org.jooby:jooby (0.6.0)

org.jooby:jooby MAVEN version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:coverage-report 0.6.0 - org.jooby:jooby-camel 0.6.0 - org.jooby:jooby-ehcache 0.6.0 - org.jooby:jooby-elasticsearch 0.6...

org.jooby:jooby-akka (1.6.5), org.jooby:jooby-apitool (1.6.5) +84 more potentially affected by CVE-2020-7647 via org.jooby:jooby (1.6.5)

org.jooby:jooby MAVEN version 1.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:jooby-akka 1.6.5 - org.jooby:jooby-apitool 1.6.5 - org.jooby:jooby-assets 1.6.5 - org.jooby:jooby-assets-autoprefixer...

org.jooby:coverage-report (0.9.1), org.jooby:jooby-aws (0.9.1) +26 more potentially affected by CVE-2020-7647 via org.jooby:jooby (0.9.1)

org.jooby:jooby MAVEN version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:coverage-report 0.9.1 - org.jooby:jooby-aws 0.9.1 - org.jooby:jooby-camel 0.9.1 - org.jooby:jooby-commons-email 0.9.1 -...

org.jooby:jooby-akka (1.3.0), org.jooby:jooby-apitool (1.3.0) +83 more potentially affected by CVE-2020-7647 via org.jooby:jooby (1.3.0)

org.jooby:jooby MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:jooby-akka 1.3.0 - org.jooby:jooby-apitool 1.3.0 - org.jooby:jooby-assets 1.3.0 - org.jooby:jooby-assets-autoprefixer...

org.jooby:coverage-report (1.0.0.cr7), org.jooby:jooby-akka (1.0.0.cr7) +64 more potentially affected by CVE-2020-7647 via org.jooby:jooby (1.0.0.cr7)

org.jooby:jooby MAVEN version 1.0.0.cr7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:coverage-report 1.0.0.cr7 - org.jooby:jooby-akka 1.0.0.cr7 - org.jooby:jooby-assets 1.0.0.cr7 -...

org.jooby:coverage-report (1.0.0.cr6), org.jooby:jooby-akka (1.0.0.cr6) +61 more potentially affected by CVE-2020-7647 via org.jooby:jooby (1.0.0.cr6)

org.jooby:jooby MAVEN version 1.0.0.cr6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:coverage-report 1.0.0.cr6 - org.jooby:jooby-akka 1.0.0.cr6 - org.jooby:jooby-assets 1.0.0.cr6 -...

org.jooby:jooby-hbm (0.2.1), org.jooby:jooby-hbs (0.2.1) +2 more potentially affected by CVE-2020-7647 via org.jooby:jooby (0.2.1)

org.jooby:jooby MAVEN version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:jooby-hbm 0.2.1 - org.jooby:jooby-hbs 0.2.1 - org.jooby:jooby-jackson 0.2.1 - org.jooby:jooby-jdbc 0.2.1 Source cves:...

org.jooby:coverage-report (0.10.0), org.jooby:jooby-akka (0.10.0) +30 more potentially affected by CVE-2020-7647 via org.jooby:jooby (0.10.0)

org.jooby:jooby MAVEN version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:coverage-report 0.10.0 - org.jooby:jooby-akka 0.10.0 - org.jooby:jooby-aws 0.10.0 - org.jooby:jooby-camel 0.10.0 -...

org.jooby:jooby-akka (1.5.0), org.jooby:jooby-apitool (1.5.0) +82 more potentially affected by CVE-2020-7647 via org.jooby:jooby (1.5.0)

org.jooby:jooby MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:jooby-akka 1.5.0 - org.jooby:jooby-apitool 1.5.0 - org.jooby:jooby-assets 1.5.0 - org.jooby:jooby-assets-autoprefixer...

org.jooby:coverage-report (0.12.0), org.jooby:jooby-akka (0.12.0) +45 more potentially affected by CVE-2020-7647 via org.jooby:jooby (0.12.0)

org.jooby:jooby MAVEN version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:coverage-report 0.12.0 - org.jooby:jooby-akka 0.12.0 - org.jooby:jooby-assets 0.12.0 - org.jooby:jooby-assets-babel...

org.jooby:coverage-report (0.16.0), org.jooby:jooby-akka (0.16.0) +53 more potentially affected by CVE-2020-7647 via org.jooby:jooby (0.16.0)

org.jooby:jooby MAVEN version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:coverage-report 0.16.0 - org.jooby:jooby-akka 0.16.0 - org.jooby:jooby-assets 0.16.0 - org.jooby:jooby-assets-babel...

org.jooby:coverage-report (0.8.2), org.jooby:jooby-aws (0.8.2) +25 more potentially affected by CVE-2020-7647 via org.jooby:jooby (0.8.2)

org.jooby:jooby MAVEN version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:coverage-report 0.8.2 - org.jooby:jooby-aws 0.8.2 - org.jooby:jooby-camel 0.8.2 - org.jooby:jooby-commons-email 0.8.2 -...

org.jooby:jooby-akka (1.1.1), org.jooby:jooby-assets (1.1.1) +81 more potentially affected by CVE-2020-7647 via org.jooby:jooby (1.1.1)

org.jooby:jooby MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:jooby-akka 1.1.1 - org.jooby:jooby-assets 1.1.1 - org.jooby:jooby-assets-autoprefixer 1.1.1 -...

org.jooby:coverage-report (0.9.2), org.jooby:jooby-aws (0.9.2) +28 more potentially affected by CVE-2020-7647 via org.jooby:jooby (0.9.2)

org.jooby:jooby MAVEN version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:coverage-report 0.9.2 - org.jooby:jooby-aws 0.9.2 - org.jooby:jooby-camel 0.9.2 - org.jooby:jooby-commons-email 0.9.2 -...

org.jooby:coverage-report (0.14.0), org.jooby:jooby-akka (0.14.0) +47 more potentially affected by CVE-2020-7647 via org.jooby:jooby (0.14.0)

org.jooby:jooby MAVEN version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:coverage-report 0.14.0 - org.jooby:jooby-akka 0.14.0 - org.jooby:jooby-assets 0.14.0 - org.jooby:jooby-assets-babel...

org.jooby:jooby-akka (1.4.1), org.jooby:jooby-apitool (1.4.1) +80 more potentially affected by CVE-2020-7647 via org.jooby:jooby (1.4.1)

org.jooby:jooby MAVEN version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:jooby-akka 1.4.1 - org.jooby:jooby-apitool 1.4.1 - org.jooby:jooby-assets 1.4.1 - org.jooby:jooby-assets-autoprefixer...

org.jooby:jooby-akka (1.0.3), org.jooby:jooby-assets (1.0.3) +74 more potentially affected by CVE-2020-7647 via org.jooby:jooby (1.0.3)

org.jooby:jooby MAVEN version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:jooby-akka 1.0.3 - org.jooby:jooby-assets 1.0.3 - org.jooby:jooby-assets-autoprefixer 1.0.3 -...

gradle.plugin.io.jooby:jooby-gradle-plugin (>=2.7.0, <=2.8.1), io.jooby.openapi:io.jooby.openapi.gradle.plugin (>=2.7.0, <=2.8.1) +33 more potentially affected by CVE-2020-7647 via io.jooby:jooby (>=2.0.0.m1, <=2.8.1)

io.jooby:jooby MAVEN version =2.0.0.m1, =2.7.0, =2.7.0, =2.7.0, =2.1.0, =2.6.0, =2.0.6, =2.6.1, =2.0.0, =2.0.0.m1, =2.4.0, =2.4.0, =2.4.0, =2.7.2, =2.0.0.m2, =2.0.0.m1, =2.8.1 and more Source cves: CVE-2020-7647 Source advisory: OSV:GHSA-PX9H-X66R-8MPC...