Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-hfq9-hggm-c56q
  • Maven/com.thoughtworks.xstream:xstream
XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream 07 Nov 2024
  • Fix available
  • Severity - 7.7 (High)
GHSA-f8cc-g7j8-xxpm
  • Maven/com.thoughtworks.xstream:xstream
XStream can cause a Denial of Service by injecting deeply nested objects raising a stack overflow 30 Dec 2022
  • Fix available
  • Severity - 7.5 (High)
GHSA-j563-grx4-pjpv
  • Maven/com.thoughtworks.xstream:xstream
XStream can cause Denial of Service via stack overflow 29 Dec 2022
  • Fix available
  • Severity - 8.2 (High)
GHSA-rmr5-cpv2-vgjf
  • Maven/com.thoughtworks.xstream:xstream
Denial of Service by injecting highly recursive collections or maps in XStream 01 Feb 2022
  • Fix available
  • Severity - 7.5 (High)
GHSA-64xx-cq4q-mf44
  • Maven/com.thoughtworks.xstream:xstream
XStream is vulnerable to an Arbitrary Code Execution attack 25 Aug 2021
  • Fix available
  • Severity - 8.5 (High)
GHSA-6wf9-jmg9-vxcc
  • Maven/com.thoughtworks.xstream:xstream
XStream can cause a Denial of Service 25 Aug 2021
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-g5w6-mrj7-75h2
  • Maven/com.thoughtworks.xstream:xstream
XStream is vulnerable to an Arbitrary Code Execution attack 25 Aug 2021
  • Fix available
  • Severity - 8.5 (High)
GHSA-j9h8-phrw-h4fh
  • Maven/com.thoughtworks.xstream:xstream
XStream is vulnerable to a Remote Command Execution attack 25 Aug 2021
  • Fix available
  • Severity - 8.5 (High)
GHSA-8jrj-525p-826v
  • Maven/com.thoughtworks.xstream:xstream
XStream is vulnerable to an Arbitrary Code Execution attack 25 Aug 2021
  • Fix available
  • Severity - 8.5 (High)
GHSA-p8pq-r894-fm8f
  • Maven/com.thoughtworks.xstream:xstream
XStream is vulnerable to an Arbitrary Code Execution attack 25 Aug 2021
  • Fix available
  • Severity - 8.5 (High)
GHSA-h7v4-7xg3-hxcc
  • Maven/com.thoughtworks.xstream:xstream
XStream is vulnerable to an Arbitrary Code Execution attack 25 Aug 2021
  • Fix available
  • Severity - 8.5 (High)
GHSA-qrx8-8545-4wg2
  • Maven/com.thoughtworks.xstream:xstream
XStream is vulnerable to an Arbitrary Code Execution attack 25 Aug 2021
  • Fix available
  • Severity - 8.5 (High)
GHSA-3ccq-5vw3-2p6x
  • Maven/com.thoughtworks.xstream:xstream
XStream is vulnerable to an Arbitrary Code Execution attack 25 Aug 2021
  • Fix available
  • Severity - 8.5 (High)
GHSA-cxfm-5m4g-x7xp
  • Maven/com.thoughtworks.xstream:xstream
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host 25 Aug 2021
  • Fix available
  • Severity - 8.5 (High)
GHSA-hph2-m3g5-xxv4
  • Maven/com.thoughtworks.xstream:xstream
XStream is vulnerable to an Arbitrary Code Execution attack 25 Aug 2021
  • Fix available
  • Severity - 8.5 (High)
GHSA-xw4p-crpj-vjx2
  • Maven/com.thoughtworks.xstream:xstream
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host 25 Aug 2021
  • Fix available
  • Severity - 8.5 (High)