com.geccocrawler:gecco-redis (1.1.3), com.github.sadstool:redisson-aspect-lock (0.1.1) potentially affected by CVE-2023-42809 via org.redisson:redisson (2.2.16)

org.redisson:redisson MAVEN version 2.2.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.geccocrawler:gecco-redis 1.1.3 - com.github.sadstool:redisson-aspect-lock 0.1.1 Source cves: CVE-2023-42809 Sour...

com.corundumstudio.socketio:netty-socketio (1.7.12) potentially affected by CVE-2023-42809 via org.redisson:redisson (2.4.0)

org.redisson:redisson MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.corundumstudio.socketio:netty-socketio 1.7.12 Source cves: CVE-2023-42809 Source advisory: OSV:GHSA-4HVC-QWR2-F8R...

com.17jee:e-cache-hibernate-redis (>=3.0.1.9, <=3.0.1.11), com.github.debop:hibernate-redis (2.3.2) +1 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.5.1)

org.redisson:redisson MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.17jee:e-cache-hibernate-redis =3.0.1.9, =3.0.1.11 - com.github.debop:hibernate-redis 2.3.2 -...

org.redisson:redisson-tomcat (2.7.3), org.redisson:redisson-tomcat-6 (2.7.3) +2 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.7.3)

org.redisson:redisson MAVEN version 2.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.redisson:redisson-tomcat 2.7.3 - org.redisson:redisson-tomcat-6 2.7.3 - org.redisson:redisson-tomcat-7 2.7.3 -...

com.yangxiaochen.dlock:dlock-redis (>=0.0.1, <=0.0.3), org.redisson:redisson-tomcat (2.9.3) +3 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.9.3)

org.redisson:redisson MAVEN version 2.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.yangxiaochen.dlock:dlock-redis =0.0.1, =0.0.3 - org.redisson:redisson-tomcat 2.9.3 - org.redisson:redisson-tomcat...

com.corundumstudio.socketio:netty-socketio (1.6.7) potentially affected by CVE-2023-42809 via org.redisson:redisson (1.2.0)

org.redisson:redisson MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.corundumstudio.socketio:netty-socketio 1.6.7 Source cves: CVE-2023-42809 Source advisory: OSV:GHSA-4HVC-QWR2-F8RV...

com.ecfront:ez-service (>=0.3.0, <=0.3.5) potentially affected by CVE-2023-42809 via org.redisson:redisson (1.2.1)

org.redisson:redisson MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.ecfront:ez-service =0.3.0, =0.3.5 Source cves: CVE-2023-42809 Source advisory: OSV:GHSA-4HVC-QWR2-F8RV...

com.github.mikeqian:sales-common (1.1.13), com.github.sadstool:redisson-aspect-lock (0.1.0) +1 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.2.8)

org.redisson:redisson MAVEN version 2.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.github.mikeqian:sales-common 1.1.13 - com.github.sadstool:redisson-aspect-lock 0.1.0 -...

org.redisson:redisson-tomcat (2.7.0), org.redisson:redisson-tomcat-6 (2.7.0) +2 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.7.0)

org.redisson:redisson MAVEN version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.redisson:redisson-tomcat 2.7.0 - org.redisson:redisson-tomcat-6 2.7.0 - org.redisson:redisson-tomcat-7 2.7.0 -...

com.geccocrawler:gecco-redis (>=1.2.8, <=1.3.0), org.redisson:redisson-tomcat (2.8.2) +3 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.8.2)

org.redisson:redisson MAVEN version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.geccocrawler:gecco-redis =1.2.8, =1.3.0 - org.redisson:redisson-tomcat 2.8.2 - org.redisson:redisson-tomcat-6 2.8...

org.redisson:redisson-tomcat (2.9.1), org.redisson:redisson-tomcat-6 (2.9.1) +2 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.9.1)

org.redisson:redisson MAVEN version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.redisson:redisson-tomcat 2.9.1 - org.redisson:redisson-tomcat-6 2.9.1 - org.redisson:redisson-tomcat-7 2.9.1 -...

Redisson vulnerable to Deserialization of Untrusted Data

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious serv...

GHSA-4HVC-QWR2-F8RV Redisson vulnerable to Deserialization of Untrusted Data

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious serv...

org.redisson:redisson-tomcat (2.7.4), org.redisson:redisson-tomcat-6 (2.7.4) +2 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.7.4)

org.redisson:redisson MAVEN version 2.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.redisson:redisson-tomcat 2.7.4 - org.redisson:redisson-tomcat-6 2.7.4 - org.redisson:redisson-tomcat-7 2.7.4 -...

org.redisson:redisson-tomcat (2.9.0), org.redisson:redisson-tomcat-6 (2.9.0) +2 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.9.0)

org.redisson:redisson MAVEN version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.redisson:redisson-tomcat 2.9.0 - org.redisson:redisson-tomcat-6 2.9.0 - org.redisson:redisson-tomcat-7 2.9.0 -...

org.redisson:redisson-tomcat (2.10.1), org.redisson:redisson-tomcat-6 (2.10.1) +2 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.10.1)

org.redisson:redisson MAVEN version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.redisson:redisson-tomcat 2.10.1 - org.redisson:redisson-tomcat-6 2.10.1 - org.redisson:redisson-tomcat-7 2.10.1 ...

org.redisson:redisson-tomcat (2.10.2), org.redisson:redisson-tomcat-6 (2.10.2) +2 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.10.2)

org.redisson:redisson MAVEN version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.redisson:redisson-tomcat 2.10.2 - org.redisson:redisson-tomcat-6 2.10.2 - org.redisson:redisson-tomcat-7 2.10.2 ...

org.redisson:redisson-tomcat (2.10.6), org.redisson:redisson-tomcat-6 (2.10.6) +2 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.10.6)

org.redisson:redisson MAVEN version 2.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.redisson:redisson-tomcat 2.10.6 - org.redisson:redisson-tomcat-6 2.10.6 - org.redisson:redisson-tomcat-7 2.10.6 ...

org.redisson:redisson-tomcat (2.11.2), org.redisson:redisson-tomcat-6 (2.11.2) +2 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.11.2)

org.redisson:redisson MAVEN version 2.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.redisson:redisson-tomcat 2.11.2 - org.redisson:redisson-tomcat-6 2.11.2 - org.redisson:redisson-tomcat-7 2.11.2 ...

com.github.xiaoyuge5201:common-spring-boot-starter (1.1), org.redisson:redisson-tomcat (2.11.5) +3 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.11.5)

org.redisson:redisson MAVEN version 2.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.github.xiaoyuge5201:common-spring-boot-starter 1.1 - org.redisson:redisson-tomcat 2.11.5 -...