Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure in the process handling HTTP requests when Brave Tracing is enabled. An attacker can obtain sensitive exception details from unrelated requests by sending crafted requests to the server. This is only exploitable if...

io.github.mullerhai:storch-mcp_3 (0.1.0), io.projectreactor.netty:reactor-netty (>=1.3.0-m1, <=1.3.0-m4) +1 more potentially affected by CVE-2025-22227 via io.projectreactor.netty:reactor-netty-http (>=1.3.0-m1, <=1.3.0-m4)

io.projectreactor.netty:reactor-netty-http MAVEN version =1.3.0-m1, =1.3.0-m1, =1.3.0-m1, =1.3.0-m4 Source cves: CVE-2025-22227 Source advisory: OSV:GHSA-4Q2V-9P7V-3V22...

io.github.mullerhai:storch-mcp_3 (0.1.0), io.projectreactor.netty:reactor-netty (>=1.3.0-m1, <=1.3.0-m4) +1 more potentially affected by CVE-2025-22227 via io.projectreactor.netty:reactor-netty-http (>=1.3.0-m1, <=1.3.0-m4)

io.projectreactor.netty:reactor-netty-http MAVEN version =1.3.0-m1, =1.3.0-m1, =1.3.0-m1, =1.3.0-m4 Source cves: CVE-2025-22227 Source advisory: GHSA-4Q2V-9P7V-3V22...

io.github.mullerhai:storch-mcp_3 (0.1.0), io.projectreactor.netty:reactor-netty (>=1.3.0-m1, <=1.3.0-m4) +1 more potentially affected by CVE-2025-22227 via io.projectreactor.netty:reactor-netty-http (>=1.3.0-m1, <=1.3.0-m4)

io.projectreactor.netty:reactor-netty-http MAVEN version =1.3.0-m1, =1.3.0-m1, =1.3.0-m1, =1.3.0-m4 Source cves: CVE-2025-22227 Source advisory: MEND:CVE-2025-22227...