io.brooklyn.example:brooklyn-example-global-web-fabric (0.4.0), io.brooklyn.example:brooklyn-example-hadoop-and-whirr (0.4.0) +59 more potentially affected by CVE-2021-34428 via org.eclipse.jetty:jetty-server (7.4.4.v20110707)

org.eclipse.jetty:jetty-server MAVEN version 7.4.4.v20110707 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - io.brooklyn.example:brooklyn-example-global-web-fabric 0.4.0 -...

Cross-Site Scripting (XSS)

uima-ducc-web is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a victim's browser via multiple parameters due to the lack of output encoding...