6 matches found
ch.artaios:openchemlib-vaadin (>=2.0.0, <=2.4.1), ch.martinelli.oss:vaadin-jooq (2.1.1) +471 more potentially affected by CVE-2026-41715 via io.projectreactor.netty:reactor-netty (>=1.1.0, <=1.1.31)
io.projectreactor.netty:reactor-netty MAVEN version =1.1.0, =2.0.0, =3.1.0.5, =3.3.0.0, =5.0.0, =5.0.0, =1.1.5, =2.0.0, =4.2.0, =4.2.0, =4.9.0-beta.1, =4.9.0-beta.1, =4.9.0-beta.1, =3.0.0, =3.0.1 and more Source cves: CVE-2026-41715 Source advisory: GHSA-PFC9-2CQG-9WQ6...
app.cash.backfila:client-misk (>=0.1.4-20221221.1702-8b7db03, <=2024.05.13.200245-a6430b2), app.cash.backfila:client-misk-hibernate (>=0.1.4-20221221.1702-8b7db03, <=2024.05.13.200245-a6430b2) +178 more potentially affected by CVE-2024-6762 via org.eclipse.jetty:jetty-servlets (>=10.0.0, <=10.0.17)
org.eclipse.jetty:jetty-servlets MAVEN version =10.0.0, =0.1.4-20221221.1702-8b7db03, =0.1.4-20221221.1702-8b7db03, =2023.06.07.114626-93b9d6f, =0.1.4-20221221.1702-8b7db03, =0.1.4-20221221.1702-8b7db03, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =100.300.3168, =3.0.0, =3.0.6 -...
be.tomcools:dropwizard-websocket-jsr356-bundle (>=4.0.0-beta.1, <=4.0.0), co.ntbl.dropwizard:dropwizard-jooq (>=100.400.3168, <=100.400.3183) +227 more potentially affected by CVE-2023-36479 via org.eclipse.jetty:jetty-servlets (>=11.0.0, <=11.0.15)
org.eclipse.jetty:jetty-servlets MAVEN version =11.0.0, =4.0.0-beta.1, =100.400.3168, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =7.0.5, =7.0.0, =2.2.1, =2.2.1, =2.2.1, =2.2.2 and more Source cves: CVE-2023-36479 Source advisory: OSV:GHSA-3GH6-V5V9-6V9J...
This Week in Spring - March 14th, 2023
Hi, Spring fans! Happy Pi π day! And, welcome to another installment of This Week in Spring! It's pouring cats and dogs here in San Francisco! The news is talking about atmospheric rivers; I don't know what that means but I don't know that I want to find out. Anyway, all that to say: I'm glad as...
XML External Entity (XXE)
jooq is vulnerable to XML external entity attacks. It is possible because XMLasDOMBinding does not prevent the resolution of external entity references, allowing the attackers to submit malicious XML to the XML parser and gain access to information about an internal network, local file system, or...