Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
Vulnerabilities
search
All ecosystems
2483182
AlmaLinux
6060
Alpaquita
16485
Alpine
4658
Android
3704
Azure Linux
18622
BellSoft Hardened Containers
799
Bitnami
9678
Chainguard
1223676
CleanStart
6491
CRAN
14
crates.io
2789
Debian
69890
Echo
8285
GHC
3
GIT
111549
GitHub Actions
55
Go
9442
Hackage
33
Hex
375
Julia
1713
Linux
30194
Mageia
6270
Maven
7077
MinimOS
172640
npm
229607
NuGet
1921
opam
29
openEuler
8900
openSUSE
14723
OSS-Fuzz
4021
Packagist
7140
Pub
11
PyPI
25610
Red Hat
23683
Rocky Linux
4419
Root
19589
RubyGems
5395
SUSE
23689
SwiftURL
61
TuxCare
10372
Ubuntu
66577
VSCode
21
Wolfi
326912
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-6v25-8wq6-xq4j
Maven/com.hazelcast:hazelcast
Hazelcast allows arbitrary member memory access by low-privileged client
4 days ago
Fix available
Severity - 9.3 (Critical)
GHSA-w294-6q5q-53p8
Maven/com.hazelcast:hazelcast
Hazelcast has an authorization bypass in IMap Predicates API
4 days ago
Fix available
Severity - 8.7 (High)
GHSA-2jwh-9rmr-j4xf
Maven/org.asynchttpclient:async-http-client
AsyncHttpClient CookieStore Silently Overrides Caller's Explicit Cookie Header...
5 days ago
Fix available
Severity - 6.8 (Medium)
GHSA-p2jm-6hj6-9rjg
Maven/org.asynchttpclient:async-http-client
AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or...
5 days ago
Fix available
Severity - 6.8 (Medium)
GHSA-x8v2-478q-2hvg
Maven/org.asynchttpclient:async-http-client
AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a...
5 days ago
Fix available
Severity - 7.5 (High)
GHSA-v2j5-22fr-j62r
Maven/org.asynchttpclient:async-http-client
AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate...
5 days ago
Fix available
Severity - 7.4 (High)
GHSA-mfj3-87qq-382v
Maven/org.asynchttpclient:async-http-client
AsyncHttpClient: Digest authentication cnonce generated with a...
5 days ago
Fix available
Severity - 3.7 (Low)
GHSA-3wp9-xfwm-rjjf
Maven/org.asynchttpclient:async-http-client
AsyncHttpClient: WebSocket proxy credentials sent to the origin server over a...
5 days ago
Fix available
Severity - 5.9 (Medium)
GHSA-f9m8-cv68-674w
Maven/org.asynchttpclient:async-http-client
AsyncHttpClient: Cookie Domain attribute is not checked against the public...
5 days ago
Fix available
Severity - 6.9 (Medium)
GHSA-jmqq-x5g9-9p2w
Maven/org.asynchttpclient:async-http-client
AsyncHttpClient: Replay to a different host sends the original host request and...
5 days ago
Fix available
Severity - 9.4 (Critical)
GHSA-rqf5-2wxv-rjf4
Maven/org.asynchttpclient:async-http-client
AsyncHttpClient: Digest challenge without a usable nonce downgrades to Basic...
5 days ago
Fix available
Severity - 8.7 (High)
GHSA-cqgh-8p3p-mx4m
Maven/com.rabbitmq:amqp-client
RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on...
6 days ago
Fix available
Severity - 4.9 (Medium)
GHSA-mcr4-qmvw-px4g
Maven/at.yawk.lz4:lz4-java
Maven/org.lz4:lz4-java
yawkat LZ4 Java: Native library extraction to a shared temporary directory is...
6 days ago
Fix available
Severity - 7.3 (High)
GHSA-343h-94h5-c4wr
Maven/at.yawk.lz4:lz4-java
Maven/org.lz4:lz4-java
yawkat LZ4 Java: LZ4BlockInputStream with stopOnEmptyBlock=false recurses once...
6 days ago
Fix available
Severity - 3.7 (Low)
GHSA-gm45-99xc-r7wv
Maven/at.yawk.lz4:lz4-java
Maven/org.lz4:lz4-java
yawkat LZ4 Java: LZ4FrameInputStream reallocates block buffers for every frame,...
6 days ago
Fix available
Severity - 5.3 (Medium)
GHSA-7822-rcf6-97fx
Maven/com.rabbitmq:amqp-client
RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC...
6 days ago
Fix available
Severity - 6.0 (Medium)
Load more...
Maven - OSV