com.alibaba:dubbo (>=2.5.4, <=2.6.0), com.alibaba:dubbo-rpc-webservice (>=2.6.1, <=2.6.2) +119 more potentially affected by CVE-2026-49875 via org.apache.cxf:cxf-core (3.0.14)

org.apache.cxf:cxf-core MAVEN version 3.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-core and may be impacted: - com.alibaba:dubbo =2.5.4, =2.6.1, =5.4.2, =5.3.0, =5.4.0 - com.custardsource.parfait:parfait-cxf 0.3.11 -...

com.alipay.sofa:sofa-boot-jacoco-report (3.19.1) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.19.1)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.19.1 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.22.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.22.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.22.0 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.18.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.18.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.18.0 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.25.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.25.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.25.0 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.21.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.21.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.21.0 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.20.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.20.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.20.0 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.23.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.23.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.23.0 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.24.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.24.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.24.0 Source cves: CVE-2024-23636 Source...

com.alibaba:dubbo-registry-nacos (0.0.1), com.alipay.sofa:rpc-sofa-boot-core (>=5.5.0, <=6.0.1) +2 more potentially affected by CVE-2021-43116 via com.alibaba.nacos:nacos-client (0.6.0)

com.alibaba.nacos:nacos-client MAVEN version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-client and may be impacted: - com.alibaba:dubbo-registry-nacos 0.0.1 - com.alipay.sofa:rpc-sofa-boot-core =5.5.0, =5.5.0, =5.5.0,...