EUVD-2023-1848

Malicious code in bioql PyPI...

com.helger.commons:ph-config (10.2.4), com.helger.peppol:peppol-smp-client (>=8.8.5, <=8.8.6) +16 more potentially affected by CVE-2023-34612 via com.helger.commons:ph-json (10.2.4)

com.helger.commons:ph-json MAVEN version 10.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.helger.commons:ph-json and may be impacted: - com.helger.commons:ph-config 10.2.4 - com.helger.peppol:peppol-smp-client =8.8.5, =8.8.6 -...

com.helger.commons:ph-config (10.1.0) potentially affected by CVE-2023-34612 via com.helger.commons:ph-json (10.1.0)

com.helger.commons:ph-json MAVEN version 10.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.helger.commons:ph-json and may be impacted: - com.helger.commons:ph-config 10.1.0 Source cves: CVE-2023-34612 Source advisory: OSV:GHSA-MX27-GG24-H2JC...

com.helger.commons:ph-config (10.1.2), com.helger.dcng:dcng-webapp-phase4-it1-im (0.2.3) +61 more potentially affected by CVE-2023-34612 via com.helger.commons:ph-json (10.1.2)

com.helger.commons:ph-json MAVEN version 10.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.helger.commons:ph-json and may be impacted: - com.helger.commons:ph-config 10.1.2 - com.helger.dcng:dcng-webapp-phase4-it1-im 0.2.3 -...

com.helger.commons:ph-config (10.1.4), com.helger.dcng:dcng-api (0.2.0) +18 more potentially affected by CVE-2023-34612 via com.helger.commons:ph-json (10.1.4)

com.helger.commons:ph-json MAVEN version 10.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.helger.commons:ph-json and may be impacted: - com.helger.commons:ph-config 10.1.4 - com.helger.dcng:dcng-api 0.2.0 - com.helger.dcng:dcng-core 0.2.0 -...

com.helger.commons:ph-config (10.2.3), com.helger.dcng:dcng-api (>=0.2.14, <=0.2.15) +41 more potentially affected by CVE-2023-34612 via com.helger.commons:ph-json (10.2.3)

com.helger.commons:ph-json MAVEN version 10.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.helger.commons:ph-json and may be impacted: - com.helger.commons:ph-config 10.2.3 - com.helger.dcng:dcng-api =0.2.14, =0.2.14, =0.2.14, =0.2.14, =0.2.14...

com.finmatics.et:et-core (>=0.1.0, <=0.1.1), com.helger.commons:ph-config (10.1.3) +18 more potentially affected by CVE-2023-34612 via com.helger.commons:ph-json (10.1.3)

com.helger.commons:ph-json MAVEN version 10.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.helger.commons:ph-json and may be impacted: - com.finmatics.et:et-core =0.1.0, =8.6.3, =8.6.4 - com.helger.phase4:phase4-cef-client 1.3.2 -...

com.helger.commons:ph-config (10.2.5), com.helger.phase4:phase4-cef-client (>=1.4.5, <=1.4.6) +19 more potentially affected by CVE-2023-34612 via com.helger.commons:ph-json (10.2.5)

com.helger.commons:ph-json MAVEN version 10.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.helger.commons:ph-json and may be impacted: - com.helger.commons:ph-config 10.2.5 - com.helger.phase4:phase4-cef-client =1.4.5, =1.4.5, =1.4.5, =1.4.5,...

com.helger.commons:ph-config (10.2.1), com.helger.dcng:dcng-api (0.2.10) +35 more potentially affected by CVE-2023-34612 via com.helger.commons:ph-json (10.2.1)

com.helger.commons:ph-json MAVEN version 10.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.helger.commons:ph-json and may be impacted: - com.helger.commons:ph-config 10.2.1 - com.helger.dcng:dcng-api 0.2.10 - com.helger.dcng:dcng-core 0.2.10 -...

com.helger.commons:ph-config (10.2.0), com.helger.photon:ph-oton-ajax (>=8.4.2, <=8.4.3) +35 more potentially affected by CVE-2023-34612 via com.helger.commons:ph-json (10.2.0)

com.helger.commons:ph-json MAVEN version 10.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.helger.commons:ph-json and may be impacted: - com.helger.commons:ph-config 10.2.0 - com.helger.photon:ph-oton-ajax =8.4.2, =8.4.2, =8.4.2, =8.4.2, =8.4....

ph-json vulnerable to stack exhaustion

An issue was discovered ph-json through 9.5.5 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

com.finmatics.et:et-core (0.2.0), com.helger.commons:ph-config (>=11.0.0, <=11.0.4) +60 more potentially affected by CVE-2023-34612 via com.helger.commons:ph-json (>=11.0.0, <=11.0.4)

com.helger.commons:ph-json MAVEN version =11.0.0, =11.0.0, =9.0.0, =2.1.0, =2.0.0-rc1, =2.0.0-rc1, =2.0.0-rc1, =2.0.0-rc1, =2.0.0-rc1, =2.0.0-rc1, =2.0.0-rc1, =2.0.0-rc1, =2.1.0, =2.0.0-rc1, =2.1.2 and more Source cves: CVE-2023-34612 Source advisory: GHSA-MX27-GG24-H2JC...

com.helger.commons:ph-config (10.2.2), com.helger.dcng:dcng-api (>=0.2.11, <=0.2.13) +63 more potentially affected by CVE-2023-34612 via com.helger.commons:ph-json (10.2.2)

com.helger.commons:ph-json MAVEN version 10.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.helger.commons:ph-json and may be impacted: - com.helger.commons:ph-config 10.2.2 - com.helger.dcng:dcng-api =0.2.11, =0.2.11, =0.2.11, =0.2.11, =0.2.11...

GHSA-MX27-GG24-H2JC ph-json vulnerable to stack exhaustion

An issue was discovered ph-json through 9.5.5 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

com.helger.commons:ph-config (10.1.7), com.helger.peppol:peppol-smp-client (8.7.6) +1 more potentially affected by CVE-2023-34612 via com.helger.commons:ph-json (10.1.7)

com.helger.commons:ph-json MAVEN version 10.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.helger.commons:ph-json and may be impacted: - com.helger.commons:ph-config 10.1.7 - com.helger.peppol:peppol-smp-client 8.7.6 - eu.de4a:de4a-kafka-clien...

com.helger.commons:ph-config (10.1.1), com.helger.peppol:peppol-smp-client (>=8.6.0, <=8.6.1) +14 more potentially affected by CVE-2023-34612 via com.helger.commons:ph-json (10.1.1)

com.helger.commons:ph-json MAVEN version 10.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.helger.commons:ph-json and may be impacted: - com.helger.commons:ph-config 10.1.1 - com.helger.peppol:peppol-smp-client =8.6.0, =8.6.1 -...

com.finmatics.et:et-core (0.2.0), com.helger.commons:ph-config (>=11.0.0, <=11.0.4) +60 more potentially affected by CVE-2023-34612 via com.helger.commons:ph-json (>=11.0.0, <=11.0.4)

com.helger.commons:ph-json MAVEN version =11.0.0, =11.0.0, =9.0.0, =2.1.0, =2.0.0-rc1, =2.0.0-rc1, =2.0.0-rc1, =2.0.0-rc1, =2.0.0-rc1, =2.0.0-rc1, =2.0.0-rc1, =2.0.0-rc1, =2.1.0, =2.0.0-rc1, =2.1.2 and more Source cves: CVE-2023-34612 Source advisory: OSV:GHSA-MX27-GG24-H2JC...

com.helger.commons:ph-config (10.0.0), com.helger.maven:ph-buildinfo-maven-plugin (3.0.2) +48 more potentially affected by CVE-2023-34612 via com.helger.commons:ph-json (10.0.0)

com.helger.commons:ph-json MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.helger.commons:ph-json and may be impacted: - com.helger.commons:ph-config 10.0.0 - com.helger.maven:ph-buildinfo-maven-plugin 3.0.2 -...

CVE-2023-34612

An issue was discovered ph-json thru 9.5.5 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

Code injection

An issue was discovered ph-json thru 9.5.5 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...