com.fluxcorp.plugins:webservice-trigger (1.0.2), com.github.cwilper.fcrepo-cloudsync:fcrepo-cloudsync-service (>=1.0.0-beta-1, <=1.0.0) +53 more potentially affected by CVE-2018-8039 via org.apache.cxf:cxf-rt-transports-http (2.4.0)

org.apache.cxf:cxf-rt-transports-http MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-http and may be impacted: - com.fluxcorp.plugins:webservice-trigger 1.0.2 -...

org.apache.cxf.systests:cxf-systests-databinding (2.1.10), org.apache.cxf.systests:cxf-systests-jaxrs (2.1.10) +32 more potentially affected by CVE-2018-8039 via org.apache.cxf:cxf-rt-transports-http (2.1.10)

org.apache.cxf:cxf-rt-transports-http MAVEN version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-http and may be impacted: - org.apache.cxf.systests:cxf-systests-databinding 2.1.10 -...

org.apache.cxf.systests:cxf-systests-ci-webapp (2.4.9), org.apache.cxf.systests:cxf-systests-databinding (2.4.9) +22 more potentially affected by CVE-2018-8039 via org.apache.cxf:cxf-rt-transports-http (2.4.9)

org.apache.cxf:cxf-rt-transports-http MAVEN version 2.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-http and may be impacted: - org.apache.cxf.systests:cxf-systests-ci-webapp 2.4.9 -...

com.treelogic-swe:aws-mock (1.0), com.treelogic-swe:cxf-stub (>=ec2-2013-02-01, <=1.0) +1 more potentially affected by CVE-2015-5253 via org.apache.cxf:cxf-rt-rs-security-sso-saml (>=2.7.3, <=2.7.17)

org.apache.cxf:cxf-rt-rs-security-sso-saml MAVEN version =2.7.3, =ec2-2013-02-01, =2.7.3, =2.7.17 Source cves: CVE-2015-5253 Source advisory: MEND:CVE-2015-5253...