Maven - OSV

GHSA-crwc-vw2r-qr6m

Maven/ognl:ognl

OGNL stricter-invocation block list bypass via java.lang.reflect reflection... 2 days ago

Fix available
Severity - 5.6 (Medium)

GHSA-x32g-jvvm-4725

Maven/org.a2aproject.sdk:a2a-java-sdk-transport-rest

A2A Java SDK: Push notification credentials logged in cleartext on protobuf... 3 days ago

Fix available
Severity - 5.7 (Medium)

GHSA-4fpj-g9jf-9rgg

Maven/org.a2aproject.sdk:a2a-java-sdk-http-client-android

A2A Java SDK: Android synchronous POST forwards credentials across authorities... 3 days ago

Fix available
Severity - 7.5 (High)

GHSA-q78c-5jjq-57g8

Maven/org.a2aproject.sdk:a2a-java-sdk-server-common

A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification... 3 days ago

Fix available
Severity - 5.8 (Medium)

GHSA-qw47-mcm5-934w

Maven/org.a2aproject.sdk:a2a-java-sdk-server-common

A2A Java SDK has a fail-open default task authorization 3 days ago

Fix available
Severity - 7.5 (High)

GHSA-9rhm-2h4x-jwmx

Maven/org.a2aproject.sdk:a2a-java-sdk-parent

A2A Java SDK send client credentials under server-controlled HTTP header name,... 3 days ago

Fix available
Severity - 5.7 (Medium)

GHSA-rxjv-24xq-76wc

Maven/org.bytedeco:javacv

JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoS 16 Oct

Fix available
Severity - 7.5 (High)

GHSA-h9h9-2rmf-rvhp

Maven/com.github.junrar:junrar

Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4... 15 Oct

Fix available
Severity - 7.5 (High)

GHSA-6v25-8wq6-xq4j

Maven/com.hazelcast:hazelcast

Hazelcast allows arbitrary member memory access by low-privileged client 08 Oct

Fix available
Severity - 9.3 (Critical)

GHSA-w294-6q5q-53p8

Maven/com.hazelcast:hazelcast

Hazelcast has an authorization bypass in IMap Predicates API 08 Oct

Fix available
Severity - 8.7 (High)

GHSA-2jwh-9rmr-j4xf

Maven/org.asynchttpclient:async-http-client

AsyncHttpClient CookieStore Silently Overrides Caller's Explicit Cookie Header... 08 Oct

Fix available
Severity - 6.8 (Medium)

GHSA-p2jm-6hj6-9rjg

Maven/org.asynchttpclient:async-http-client

AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or... 08 Oct

Fix available
Severity - 6.8 (Medium)

GHSA-x8v2-478q-2hvg

Maven/org.asynchttpclient:async-http-client

AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a... 08 Oct

Fix available
Severity - 7.5 (High)

GHSA-v2j5-22fr-j62r

Maven/org.asynchttpclient:async-http-client

AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate... 08 Oct

Fix available
Severity - 7.4 (High)

GHSA-mfj3-87qq-382v

Maven/org.asynchttpclient:async-http-client

AsyncHttpClient: Digest authentication cnonce generated with a... 08 Oct

Fix available
Severity - 3.7 (Low)

GHSA-3wp9-xfwm-rjjf

Maven/org.asynchttpclient:async-http-client

AsyncHttpClient: WebSocket proxy credentials sent to the origin server over a... 08 Oct

Fix available
Severity - 5.9 (Medium)

Vulnerabilities