Path Traversal

uimaj-core is vulnerable to path traversal. The vulnerability is due to FileUtil.java, which allows an attacker to create files outside the designated target directory using carefully crafted zip file names...

com.digitalpebble.behemoth:behemoth-uima (>=1.0, <=1.1), com.sproutigy.libs.luceneplus:luceneplus-full (>=1.0.0, <=1.1.0) +47 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (2.3.1)

org.apache.uima:uimaj-core MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.uima:uimaj-core and may be impacted: - com.digitalpebble.behemoth:behemoth-uima =1.0, =1.0.0, =1.6.0, =2.1.0, =2.0.0, =2.2.0, =1.0.0,...

com.github.lafa.tikanoexternal:tika-parsers (>=1.0.0, <=1.0.18), de.tudarmstadt.ukp.dkpro.core:de.tudarmstadt.ukp.dkpro.core.api.anomaly-asl (1.4.0) +140 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (2.4.0)

org.apache.uima:uimaj-core MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.uima:uimaj-core and may be impacted: - com.github.lafa.tikanoexternal:tika-parsers =1.0.0, =1.0.18 -...

com.github.document-analysis:dap-dkpro_1_8 (0.1.1), com.github.document-analysis:dap-uimafit (0.1.1) +49 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (2.10.0)

org.apache.uima:uimaj-core MAVEN version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.uima:uimaj-core and may be impacted: - com.github.document-analysis:dap-dkpro18 0.1.1 - com.github.document-analysis:dap-uimafit 0.1.1 -...

de.averbis.textanalysis:adverse-event-typesystem (>=0.16.0, <=1.9.0), de.averbis.textanalysis:anatomy-typesystem (2.38.0) +249 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (2.10.3)

org.apache.uima:uimaj-core MAVEN version 2.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.uima:uimaj-core and may be impacted: - de.averbis.textanalysis:adverse-event-typesystem =0.16.0, =2.25.0, =3.21.0, =2.25.0, =2.25.0, =2.25.0,...

com.dictanova.jcasgen:com.dictanova.jcasgen.gradle.plugin (>=0.3, <=0.4), gradle.plugin.com.dictanova.jcasgen.gradle:gradle-jcasgen-plugin (>=0.3, <=0.4) +19 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (2.7.0)

org.apache.uima:uimaj-core MAVEN version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.uima:uimaj-core and may be impacted: - com.dictanova.jcasgen:com.dictanova.jcasgen.gradle.plugin =0.3, =0.3, =0.4 -...

com.github.heideltime:heideltime (>=2.0.1, <=2.2.1), com.github.jenshaase.uimascala:arktweetpostagger_2.11 (0.6.1) +197 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (2.8.1)

org.apache.uima:uimaj-core MAVEN version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.uima:uimaj-core and may be impacted: - com.github.heideltime:heideltime =2.0.1, =2.2.1 - com.github.jenshaase.uimascala:arktweetpostagger2.11 0.6....

org.apache.uima:jcasgen-maven-plugin (2.10.1), org.apache.uima:pearpackagingmavenplugin (2.10.1) +12 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (2.10.1)

org.apache.uima:uimaj-core MAVEN version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.uima:uimaj-core and may be impacted: - org.apache.uima:jcasgen-maven-plugin 2.10.1 - org.apache.uima:pearpackagingmavenplugin 2.10.1 -...

de.julielab:jcore-ace-reader (>=2.3.0, <=2.3.10), de.julielab:jcore-acronym-ae (>=2.3.0, <=2.3.10) +341 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (2.10.2)

org.apache.uima:uimaj-core MAVEN version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.uima:uimaj-core and may be impacted: - de.julielab:jcore-ace-reader =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3....

cloud.testload:jmeter-clickhouse-listener (2.00), com.bobpaulin.jmeter:aws-include-controller-plugin (0.0.1) +297 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (>=3.0.0-alpha, <=3.3.0)

org.apache.uima:uimaj-core MAVEN version =3.0.0-alpha, =3.11.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =0.0.1, =1.1.1, =0.0.1, =1.1.6 and more Source cves: CVE-2022-32287 Source advisory: OSV:GHSA-XGQR-5WQW-9FPV...

de.unistuttgart.ims:cleartk-util (>=0.1.0, <=0.2.0), org.apache.uima:jcasgen-maven-plugin (2.5.0) +56 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (2.5.0)

org.apache.uima:uimaj-core MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.uima:uimaj-core and may be impacted: - de.unistuttgart.ims:cleartk-util =0.1.0, =0.2.0 - org.apache.uima:jcasgen-maven-plugin 2.5.0 -...

cloud.testload:jmeter-clickhouse-listener (2.00), com.bobpaulin.jmeter:aws-include-controller-plugin (0.0.1) +297 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (>=3.0.0-alpha, <=3.3.0)

org.apache.uima:uimaj-core MAVEN version =3.0.0-alpha, =3.11.1, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =0.0.1, =1.1.1, =0.0.1, =1.1.6 and more Source cves: CVE-2022-32287 Source advisory: GHSA-XGQR-5WQW-9FPV...

org.apache.uima:jcasgen-maven-plugin (2.4.1), org.apache.uima:pearpackagingmavenplugin (2.4.1) +9 more potentially affected by CVE-2022-32287 via org.apache.uima:uimaj-core (2.4.1)

org.apache.uima:uimaj-core MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.uima:uimaj-core and may be impacted: - org.apache.uima:jcasgen-maven-plugin 2.4.1 - org.apache.uima:pearpackagingmavenplugin 2.4.1 -...

ch.epfl.bbp.nlp:bluima_abbreviations (>=1.0.0, <=1.0.1), ch.epfl.bbp.nlp:bluima_corpora (>=1.0.0, <=1.0.1) +612 more potentially affected by CVE-2017-15691 via org.apache.uima:uimaj-core (>=2.3.1, <=2.10.1)

org.apache.uima:uimaj-core MAVEN version =2.3.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 - ch.epfl.bbp.nlp:bluimatypesystem 1.0.1 and more Source cves: CVE-2017-15691 Source advisory: OSV:GHSA-WP2F-HRG2-3R5M...

ch.epfl.bbp.nlp:bluima_abbreviations (>=1.0.0, <=1.0.1), ch.epfl.bbp.nlp:bluima_corpora (>=1.0.0, <=1.0.1) +612 more potentially affected by CVE-2017-15691 via org.apache.uima:uimaj-core (>=2.3.1, <=2.10.1)

org.apache.uima:uimaj-core MAVEN version =2.3.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 - ch.epfl.bbp.nlp:bluimatypesystem 1.0.1 and more Source cves: CVE-2017-15691 Source advisory: GHSA-WP2F-HRG2-3R5M...

ch.epfl.bbp.nlp:bluima_abbreviations (>=1.0.0, <=1.0.1), ch.epfl.bbp.nlp:bluima_corpora (>=1.0.0, <=1.0.1) +612 more potentially affected by CVE-2017-15691 via org.apache.uima:uimaj-core (>=2.3.1, <=2.10.1)

org.apache.uima:uimaj-core MAVEN version =2.3.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 - ch.epfl.bbp.nlp:bluimatypesystem 1.0.1 and more Source cves: CVE-2017-15691 Source advisory: MEND:CVE-2017-15691...

org.apache.uima:jcasgen-maven-plugin (>=3.0.0-alpha, <=3.0.0-alpha02), org.apache.uima:pearpackagingmavenplugin (>=3.0.0-alpha, <=3.0.0-alpha02) +13 more potentially affected by CVE-2017-15691 via org.apache.uima:uimaj-core (>=3.0.0-alpha, <=3.0.0-alpha02)

org.apache.uima:uimaj-core MAVEN version =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha, =3.0.0-alpha02 Source cves:...