CVE-2022-21230

This affects all versions of package org.nanohttpd:nanohttpd. Whenever an HTTP Session is parsing the body of an HTTP request, the body of the request is written to a RandomAccessFile when the it is larger than 1024 bytes. This file is created with insecure permissions that allow its contents to ...

CVE-2022-21230: Undefined Security Weakness

This affects all versions of package org.nanohttpd:nanohttpd. Whenever an HTTP Session is parsing the body of an HTTP request, the body of the request is written to a RandomAccessFile when the it is larger than 1024 bytes. This file is created with insecure permissions that allow its contents to ...

ai.h2o:h2o-clustering (>=3.32.1.1, <=3.44.0.2), ai.h2o:h2o-k8s (>=3.30.0.2, <=3.44.0.2) +3 more potentially affected by CVE-2020-13697 via org.nanohttpd:nanohttpd-nanolets (2.3.1)

org.nanohttpd:nanohttpd-nanolets MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.nanohttpd:nanohttpd-nanolets and may be impacted: - ai.h2o:h2o-clustering =3.32.1.1, =3.30.0.2, =3.34.0.3, =0.3.0, =2.0, =2.5 Source cves:...