DoS (Denial of Service) software.amazon.ion:ion-java Dependency in Jira Software Data Center and Server

This High severity software.amazon.ion:ion-java Dependency vulnerability was introduced in versions 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, 9.6.0, 9.7.0, 9.8.0, 9.9.0, 9.10.0, 9.11.0, 9.12.0, 9.13.0, and 9.14.0 of Jira Software Data Center and Server. This software.amazon.ion:ion-java Dependenc...

com.hack23.cia:service.data.impl (2019.3.24), com.hack23.cia:service.impl (2019.3.24) potentially affected by CVE-2024-21634 via software.amazon.ion:ion-java (1.3.1)

software.amazon.ion:ion-java MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on software.amazon.ion:ion-java and may be impacted: - com.hack23.cia:service.data.impl 2019.3.24 - com.hack23.cia:service.impl 2019.3.24 Source cves:...

at.molindo:aws-maven (>=0.0.1, <=1.0.0), br.com.faroltech.vraptor:vraptor-email (0.0.2) +555 more potentially affected by CVE-2024-21634 via software.amazon.ion:ion-java (1.0.1)

software.amazon.ion:ion-java MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on software.amazon.ion:ion-java and may be impacted: - at.molindo:aws-maven =0.0.1, =0.3.14, =0.1.2, =0.0.1, =1.5.0, =1.5.0, =1.5.0, =1.7.0, =1.3.1, =1.3.1,...

com.hack23.cia:service.data.impl (>=2019.7.23, <=2019.9.14), com.hack23.cia:service.impl (>=2019.7.23, <=2019.9.14) potentially affected by CVE-2024-21634 via software.amazon.ion:ion-java (1.5.0)

software.amazon.ion:ion-java MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on software.amazon.ion:ion-java and may be impacted: - com.hack23.cia:service.data.impl =2019.7.23, =2019.7.23, =2019.9.14 Source cves: CVE-2024-21634 Source...

com.500px:kinesis-stream_2.11 (>=0.1.1, <=0.1.7), com.500px:kinesis-stream_2.12 (>=0.0.7-beta4, <=0.1.7) +205 more potentially affected by CVE-2024-21634 via software.amazon.ion:ion-java (1.2.0)

software.amazon.ion:ion-java MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on software.amazon.ion:ion-java and may be impacted: - com.500px:kinesis-stream2.11 =0.1.1, =0.0.7-beta4, =2018.12.15, =2018.12.15, =1.0.2, =1.0.2, =1.0.2,...

co.wrisk.logback:logback-ext-aws-core (1.0.9), co.wrisk.logback:logback-ext-cloudwatch-appender (1.0.9) +103 more potentially affected by CVE-2024-21634 via software.amazon.ion:ion-java (1.0.0)

software.amazon.ion:ion-java MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on software.amazon.ion:ion-java and may be impacted: - co.wrisk.logback:logback-ext-aws-core 1.0.9 - co.wrisk.logback:logback-ext-cloudwatch-appender 1.0.9 -...