9 matches found
com.trigyn:java-web-starter (>=1.6.0, <=2.1), com.wavemaker.runtime:wavemaker-app-runtime-core (>=11.9.0, <=11.9.5.ee) +22 more potentially affected by CVE-2026-41003 via org.springframework.security:spring-security-saml2-service-provider (>=6.3.1, <=6.3.6)
org.springframework.security:spring-security-saml2-service-provider MAVEN version =6.3.1, =1.6.0, =11.9.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.0-m4, =2.0.0-m4, =2.0.0-m4, =2.0.0-m4, =2.0.0-m4, =2.0.0-m4, =2.0.0-m4, =2.0.0 and more Source cves: CVE-2026-41003 Source advisory:...
com.eurodyn.qlack.fuse:qlack-fuse-aaa (3.9.8), com.trigyn:java-web-starter (>=2.2, <=2.13) +5 more potentially affected by CVE-2026-40988 via org.springframework.security:spring-security-saml2-service-provider (>=6.4.2, <=6.4.11)
org.springframework.security:spring-security-saml2-service-provider MAVEN version =6.4.2, =2.2, =11.10.0, =dce37d6e6c310e0d86c4f0d73f8846b8ef2f4432, =9.0-rc1, =1.15.0, =1.15.0, =2.4.0 Source cves: CVE-2026-40988 Source advisory: GHSA-M69X-PW9P-7J3Q...
com.nb6868.onex:common (5.0.3), com.nb6868.onex:file-converter (5.0.3) +14 more potentially affected by CVE-2026-43828 via org.apache.shiro:shiro-web (3.0.0-alpha-1)
org.apache.shiro:shiro-web MAVEN version 3.0.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-web and may be impacted: - com.nb6868.onex:common 5.0.3 - com.nb6868.onex:file-converter 5.0.3 - com.nb6868.onex:job 5.0.3 -...
Spring Framework server Web DoS Vulnerability
In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: Typically, Spring Boot applications need the...
MAL-2023-8605 Malicious code in starling-api-web-starter-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70e22d8859e6bb5960333c0025707f3f3d444ff2f97f492db74c277335efa08e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in starling-api-web-starter-kit
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in starling-api-web-starter-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70e22d8859e6bb5960333c0025707f3f3d444ff2f97f492db74c277335efa08e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
cc.vihackerframework:vihacker-web-starter (1.0.8.r), cloud.piranha.http:piranha-http-undertow (>=22.11.0, <=23.4.0) +345 more potentially affected by CVE-2023-1108 via io.undertow:undertow-core (>=2.3.0.final, <=2.3.4.final)
io.undertow:undertow-core MAVEN version =2.3.0.final, =22.11.0, =22.11.0, =3.0.1.0, =3.0.1.0, =3.0.1.0, =3.0.1.0, =3.0.4.1, =3.0.1.0, =3.0.1.0, =4.0.0-draft.2, =4.0.0-draft.2, =22.10.1, =22.10.1, =23.2.1 and more Source cves: CVE-2023-1108 Source advisory: OSV:GHSA-M4MM-PG93-FV78...
