gradle.plugin.io.quarkus:quarkus-gradle-plugin (1.3.0.cr1), io.quarkus:io.quarkus.gradle.plugin (1.3.0.cr1) +243 more potentially affected by CVE-2024-2700 via io.quarkus:quarkus-core (1.3.0.cr1)

io.quarkus:quarkus-core MAVEN version 1.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - gradle.plugin.io.quarkus:quarkus-gradle-plugin 1.3.0.cr1 - io.quarkus:io.quarkus.gradle.plugin 1.3.0.cr1 -...

gradle.plugin.io.quarkus:quarkus-gradle-plugin (1.1.0.final), io.quarkus:io.quarkus.gradle.plugin (1.1.0.final) +415 more potentially affected by CVE-2024-2700 via io.quarkus:quarkus-core (1.1.0.final)

io.quarkus:quarkus-core MAVEN version 1.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - gradle.plugin.io.quarkus:quarkus-gradle-plugin 1.1.0.final - io.quarkus:io.quarkus.gradle.plugin 1.1.0.fina...

gradle.plugin.io.quarkus:quarkus-gradle-plugin (1.7.0.cr2), io.quarkus:io.quarkus.gradle.plugin (1.7.0.cr2) +326 more potentially affected by CVE-2024-2700 via io.quarkus:quarkus-core (1.7.0.cr2)

io.quarkus:quarkus-core MAVEN version 1.7.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - gradle.plugin.io.quarkus:quarkus-gradle-plugin 1.7.0.cr2 - io.quarkus:io.quarkus.gradle.plugin 1.7.0.cr2 -...

gradle.plugin.io.quarkus:quarkus-gradle-plugin (1.5.0.cr1), io.quarkus.extensions:quarkus-extension-catalog (>=1.0.0.alpha5, <=1.0.0.alpha12) +316 more potentially affected by CVE-2024-2700 via io.quarkus:quarkus-core (1.5.0.cr1)

io.quarkus:quarkus-core MAVEN version 1.5.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - gradle.plugin.io.quarkus:quarkus-gradle-plugin 1.5.0.cr1 - io.quarkus.extensions:quarkus-extension-catalog...

gradle.plugin.io.quarkus:quarkus-gradle-plugin (0.28.0), io.quarkus:io.quarkus.gradle.plugin (0.28.0) +184 more potentially affected by CVE-2024-2700 via io.quarkus:quarkus-core (0.28.0)

io.quarkus:quarkus-core MAVEN version 0.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - gradle.plugin.io.quarkus:quarkus-gradle-plugin 0.28.0 - io.quarkus:io.quarkus.gradle.plugin 0.28.0 -...

gradle.plugin.io.quarkus:quarkus-gradle-plugin (1.3.4.final), io.quarkus:io.quarkus.gradle.plugin (1.3.4.final) +245 more potentially affected by CVE-2024-2700 via io.quarkus:quarkus-core (1.3.4.final)

io.quarkus:quarkus-core MAVEN version 1.3.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - gradle.plugin.io.quarkus:quarkus-gradle-plugin 1.3.4.final - io.quarkus:io.quarkus.gradle.plugin 1.3.4.fina...

com.github.mcollovati:quarkus-hilla (>=1.0.0, <=1.0.1), com.github.mcollovati:quarkus-hilla-deployment (>=1.0.0, <=1.0.1) +766 more potentially affected by CVE-2024-2700 via io.quarkus:quarkus-core (2.16.10.final)

io.quarkus:quarkus-core MAVEN version 2.16.10.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - com.github.mcollovati:quarkus-hilla =1.0.0, =1.0.0, =1.0.1 -...

io.quarkiverse.jdbc:quarkus-jdbc-sqlite (1.0.1), io.quarkiverse.jdbc:quarkus-jdbc-sqlite-deployment (1.0.1) +505 more potentially affected by CVE-2024-2700 via io.quarkus:quarkus-core (2.10.0.cr1)

io.quarkus:quarkus-core MAVEN version 2.10.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - io.quarkiverse.jdbc:quarkus-jdbc-sqlite 1.0.1 - io.quarkiverse.jdbc:quarkus-jdbc-sqlite-deployment 1.0.1 -...

CVE-2024-29186

Bref is an open-source project that helps users go serverless on Amazon Web Services with PHP. When Bref prior to version 2.1.17 is used with the Event-Driven Function runtime and the handler is a RequestHandlerInterface, then the Lambda event is converted to a PSR7 object. During the conversion...

CVE-2024-29186 Slow String Operations via MultiPart Requests in Event-Driven Functions

Bref is an open-source project that helps users go serverless on Amazon Web Services with PHP. When Bref prior to version 2.1.17 is used with the Event-Driven Function runtime and the handler is a RequestHandlerInterface, then the Lambda event is converted to a PSR7 object. During the conversion...

GHSA-J4HQ-F63X-F39R Slow String Operations via MultiPart Requests in Event-Driven Functions

Impacted Resources bref/src/Event/Http/Psr7Bridge.php:94-125 multipart-parser/src/StreamedPart.php:383-418 Description When Bref is used with the Event-Driven Function runtime and the handler is a RequestHandlerInterface, then the Lambda event is converted to a PSR7 object. During the conversion...

Slow String Operations via MultiPart Requests in Event-Driven Functions

Impacted Resources bref/src/Event/Http/Psr7Bridge.php:94-125 multipart-parser/src/StreamedPart.php:383-418 Description When Bref is used with the Event-Driven Function runtime and the handler is a RequestHandlerInterface, then the Lambda event is converted to a PSR7 object. During the conversion...

GHSA-M3F4-957X-M785 lambda-middleware Inefficient Regular Expression Complexity vulnerability

A vulnerability, which was classified as problematic, has been found in dbartholomae lambda-middleware frameguard up to 1.0.4. Affected by this issue is some unknown functionality of the file packages/json-deserializer/src/JsonDeserializer.ts of the component JSON Mime-Type Handler. The...

lambda-middleware Inefficient Regular Expression Complexity vulnerability

A vulnerability, which was classified as problematic, has been found in dbartholomae lambda-middleware frameguard up to 1.0.4. Affected by this issue is some unknown functionality of the file packages/json-deserializer/src/JsonDeserializer.ts of the component JSON Mime-Type Handler. The...

CVE-2021-4437

A vulnerability, which was classified as problematic, has been found in dbartholomae lambda-middleware frameguard up to 1.0.4. Affected by this issue is some unknown functionality of the file packages/json-deserializer/src/JsonDeserializer.ts of the component JSON Mime-Type Handler. The...

CVE-2021-4437

A vulnerability, which was classified as problematic, has been found in dbartholomae lambda-middleware frameguard up to 1.0.4. Affected by this issue is some unknown functionality of the file packages/json-deserializer/src/JsonDeserializer.ts of the component JSON Mime-Type Handler. The...

Information disclosure

A vulnerability, which was classified as problematic, has been found in dbartholomae lambda-middleware frameguard up to 1.0.4. Affected by this issue is some unknown functionality of the file packages/json-deserializer/src/JsonDeserializer.ts of the component JSON Mime-Type Handler. The...

CVE-2021-4437 dbartholomae lambda-middleware frameguard JSON Mime-Type JsonDeserializer.ts redos

A vulnerability, which was classified as problematic, has been found in dbartholomae lambda-middleware frameguard up to 1.0.4. Affected by this issue is some unknown functionality of the file packages/json-deserializer/src/JsonDeserializer.ts of the component JSON Mime-Type Handler. The...

CVE-2021-4437 dbartholomae lambda-middleware frameguard JSON Mime-Type JsonDeserializer.ts redos

A vulnerability, which was classified as problematic, has been found in dbartholomae lambda-middleware frameguard up to 1.0.4. Affected by this issue is some unknown functionality of the file packages/json-deserializer/src/JsonDeserializer.ts of the component JSON Mime-Type Handler. The...

CVE-2021-4437

A vulnerability, which was classified as problematic, has been found in dbartholomae lambda-middleware frameguard up to 1.0.4. Affected by this issue is some unknown functionality of the file packages/json-deserializer/src/JsonDeserializer.ts of the component JSON Mime-Type Handler. The...