DoS (Denial of Service) software.amazon.ion:ion-java Dependency in Jira Software Data Center and Server

This High severity software.amazon.ion:ion-java Dependency vulnerability was introduced in versions 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, 9.6.0, 9.7.0, 9.8.0, 9.9.0, 9.10.0, 9.11.0, 9.12.0, 9.13.0, and 9.14.0 of Jira Software Data Center and Server. This software.amazon.ion:ion-java Dependenc...

co.wrisk.logback:logback-ext-aws-core (1.0.9), co.wrisk.logback:logback-ext-cloudwatch-appender (1.0.9) +103 more potentially affected by CVE-2024-21634 via software.amazon.ion:ion-java (1.0.0)

software.amazon.ion:ion-java MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on software.amazon.ion:ion-java and may be impacted: - co.wrisk.logback:logback-ext-aws-core 1.0.9 - co.wrisk.logback:logback-ext-cloudwatch-appender 1.0.9 -...

ai.faculty:dynamic-configuration_2.11 (>=0.3.2, <=0.3.3), ai.faculty:dynamic-configuration_2.13 (0.4.0) +5415 more potentially affected by CVE-2024-21634 via software.amazon.ion:ion-java (1.0.2)

software.amazon.ion:ion-java MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on software.amazon.ion:ion-java and may be impacted: - ai.faculty:dynamic-configuration2.11 =0.3.2, =3.32.1.6, =3.32.1.6-1-2.1, =3.32.1.6-1-3.0,...

com.500px:kinesis-stream_2.11 (>=0.1.1, <=0.1.7), com.500px:kinesis-stream_2.12 (>=0.0.7-beta4, <=0.1.7) +205 more potentially affected by CVE-2024-21634 via software.amazon.ion:ion-java (1.2.0)

software.amazon.ion:ion-java MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on software.amazon.ion:ion-java and may be impacted: - com.500px:kinesis-stream2.11 =0.1.1, =0.0.7-beta4, =2018.12.15, =2018.12.15, =1.0.2, =1.0.2, =1.0.2,...

at.molindo:aws-maven (>=0.0.1, <=1.0.0), br.com.faroltech.vraptor:vraptor-email (0.0.2) +555 more potentially affected by CVE-2024-21634 via software.amazon.ion:ion-java (1.0.1)

software.amazon.ion:ion-java MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on software.amazon.ion:ion-java and may be impacted: - at.molindo:aws-maven =0.0.1, =0.3.14, =0.1.2, =0.0.1, =1.5.0, =1.5.0, =1.5.0, =1.7.0, =1.3.1, =1.3.1,...

ai.faculty:dynamic-configuration_2.11 (>=0.3.2, <=0.3.3), ai.faculty:dynamic-configuration_2.13 (0.4.0) +5670 more potentially affected by CVE-2024-21634 via software.amazon.ion:ion-java (>=1.0.0, <=1.5.1)

software.amazon.ion:ion-java MAVEN version =1.0.0, =0.3.2, =3.32.1.6, =3.32.1.6-1-2.1, =3.32.1.6-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =0.5.0, =1.11.0, =1.11.0, =1.11.0, =1.13.8 and more Source cves: CVE-2024-21634 Source...

com.hack23.cia:service.data.impl (2019.3.24), com.hack23.cia:service.impl (2019.3.24) potentially affected by CVE-2024-21634 via software.amazon.ion:ion-java (1.3.1)

software.amazon.ion:ion-java MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on software.amazon.ion:ion-java and may be impacted: - com.hack23.cia:service.data.impl 2019.3.24 - com.hack23.cia:service.impl 2019.3.24 Source cves:...

com.hack23.cia:service.data.impl (>=2019.6.13, <=2019.6.23), com.hack23.cia:service.impl (>=2019.6.13, <=2019.6.23) potentially affected by CVE-2024-21634 via software.amazon.ion:ion-java (1.4.0)

software.amazon.ion:ion-java MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on software.amazon.ion:ion-java and may be impacted: - com.hack23.cia:service.data.impl =2019.6.13, =2019.6.13, =2019.6.23 Source cves: CVE-2024-21634 Source...

com.hack23.cia:service.data.impl (>=2019.7.23, <=2019.9.14), com.hack23.cia:service.impl (>=2019.7.23, <=2019.9.14) potentially affected by CVE-2024-21634 via software.amazon.ion:ion-java (1.5.0)

software.amazon.ion:ion-java MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on software.amazon.ion:ion-java and may be impacted: - com.hack23.cia:service.data.impl =2019.7.23, =2019.7.23, =2019.9.14 Source cves: CVE-2024-21634 Source...