io.micronaut:micronaut-function-web (1.2.7), io.micronaut:micronaut-http-server-netty (1.2.7) +1 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.2.7)

io.micronaut:micronaut-http-server MAVEN version 1.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut:micronaut-function-web 1.2.7 - io.micronaut:micronaut-http-server-netty 1.2.7 ...

io.micronaut.configuration:micronaut-security-ldap (1.2.3), io.micronaut.configuration:micronaut-security-oauth2 (1.2.3) +6 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.2.8)

io.micronaut:micronaut-http-server MAVEN version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-security-ldap 1.2.3 -...

io.micronaut.aws:micronaut-function-aws-api-proxy (>=1.4.0.m2, <=1.4.1), io.micronaut.aws:micronaut-function-aws-custom-runtime (>=1.4.0.m2, <=1.4.1) +3 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.2.10)

io.micronaut:micronaut-http-server MAVEN version 1.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.aws:micronaut-function-aws-api-proxy =1.4.0.m2, =1.4.0.m2, =1.4.1 -...

io.micronaut:micronaut-function-web (1.2.11), io.micronaut:micronaut-http-server-netty (1.2.11) +1 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.2.11)

io.micronaut:micronaut-http-server MAVEN version 1.2.11 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut:micronaut-function-web 1.2.11 - io.micronaut:micronaut-http-server-netty 1.2....

io.micronaut:micronaut-function-web (1.3.0.m1), io.micronaut:micronaut-http-server-netty (1.3.0.m1) +1 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.3.0.m1)

io.micronaut:micronaut-http-server MAVEN version 1.3.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut:micronaut-function-web 1.3.0.m1 - io.micronaut:micronaut-http-server-netty...

io.micronaut:micronaut-function-web (1.3.1), io.micronaut:micronaut-http-server-netty (1.3.1) +1 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.3.1)

io.micronaut:micronaut-http-server MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut:micronaut-function-web 1.3.1 - io.micronaut:micronaut-http-server-netty 1.3.1 ...

com.agorapulse:gru-micronaut (>=0.9.1, <=1.3.1), com.agorapulse:micronaut-slack-http (>=1.0.0-micronaut-1.0, <=1.0.4-micronaut-1.0) +3 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.3.7)

io.micronaut:micronaut-http-server MAVEN version 1.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - com.agorapulse:gru-micronaut =0.9.1, =1.0.0-micronaut-1.0, =1.0.4-micronaut-1.0 -...

io.micronaut.aws:micronaut-aws-alexa-httpserver (>=2.0.0.m1, <=2.0.0.m3), io.micronaut.aws:micronaut-function-aws-api-proxy (>=2.0.0.m1, <=2.0.0.m3) +3 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.0.0.m2)

io.micronaut:micronaut-http-server MAVEN version 2.0.0.m2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.aws:micronaut-aws-alexa-httpserver =2.0.0.m1, =2.0.0.m1, =2.0.0.m3 -...

io.micronaut:micronaut-function-web (2.0.0.rc2), io.micronaut:micronaut-http-server-netty (2.0.0.rc2) +1 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.0.0.rc2)

io.micronaut:micronaut-http-server MAVEN version 2.0.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut:micronaut-function-web 2.0.0.rc2 - io.micronaut:micronaut-http-server-nett...

io.micronaut:micronaut-benchmarks (2.0.1), io.micronaut:micronaut-function-web (2.0.1) +3 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.0.1)

io.micronaut:micronaut-http-server MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut:micronaut-benchmarks 2.0.1 - io.micronaut:micronaut-function-web 2.0.1 -...

io.micronaut:micronaut-function-web (2.0.3), io.micronaut:micronaut-http-server-netty (2.0.3) +1 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.0.3)

io.micronaut:micronaut-http-server MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut:micronaut-function-web 2.0.3 - io.micronaut:micronaut-http-server-netty 2.0.3 ...

io.micronaut:micronaut-function-web (2.1.1), io.micronaut:micronaut-http-server-netty (2.1.1) +1 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.1.1)

io.micronaut:micronaut-http-server MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut:micronaut-function-web 2.1.1 - io.micronaut:micronaut-http-server-netty 2.1.1 ...

com.slack.api:bolt-micronaut (>=1.3.0-rc1, <=1.3.3), io.micronaut.aws:micronaut-aws-alexa-httpserver (2.2.2) +5 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.1.2)

io.micronaut:micronaut-http-server MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - com.slack.api:bolt-micronaut =1.3.0-rc1, =1.3.3 -...

io.micronaut.acme:micronaut-acme (2.1.0), io.micronaut.groovy:micronaut-multitenancy-gorm (2.2.0) +12 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.1.4)

io.micronaut:micronaut-http-server MAVEN version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.acme:micronaut-acme 2.1.0 - io.micronaut.groovy:micronaut-multitenancy-gorm...

com.slack.api:bolt-micronaut (>=1.4.1, <=1.4.2), io.micronaut:micronaut-function-web (2.2.1) +2 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.2.1)

io.micronaut:micronaut-http-server MAVEN version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - com.slack.api:bolt-micronaut =1.4.1, =1.4.2 - io.micronaut:micronaut-function-web 2.2.1 -...

com.slack.api:bolt-micronaut (1.5.0-m2), fr.cnieg.demo:demo (>=4.0.1, <=4.0.3) +3 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.2.2)

io.micronaut:micronaut-http-server MAVEN version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - com.slack.api:bolt-micronaut 1.5.0-m2 - fr.cnieg.demo:demo =4.0.1, =4.0.3 -...

Oracle DB Broken PDB Isolation / Metadata Exposure

Title: CVE-2021-2173 – PDB Isolation is broken through metadata exposure Product: Database Manufacturer: Oracle Affected Versions: 12.1.0.2, 12.2.0.1, 18c, 19c Tested Versions: 19c Risk Level: Medium Solution Status: Fixed CVE Reference: CVE-2021-2173 Author of Advisory: Emad Al-Mousa Overview:...

Oracle DB Broken PDB Isolation / Metadata Exposure Vulnerability

Proof of concept details for Oracle database versions 12.1.0.2, 12.2.0.1, 18c, and 19c that had a PDB isolation vulnerability allowing viewing of metadata for a different database within the same container. Title: CVE-2021-2173 – PDB Isolation is broken through metadata exposure Product: Database...

Improper kubeconfig validation allows arbitrary code execution

Flux2 can reconcile the state of a remote cluster when provided with a kubeconfig with the correct access rights. Kubeconfig files can define commands to be executed to generate on-demand authentication tokens. A malicious user with write access to a Flux source or direct access to the target...

PT-2022-16897

Name of the Vulnerable Software and Affected Versions Flux2 versions 0.1.0 through 0.29.0 helm-controller versions 0.1.0 through 0.19.0 kustomize-controller versions 0.1.0 through 0.23.0 Description The issue concerns code injection via malicious Kubeconfig files, potentially leading to privilege...