Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-6v25-8wq6-xq4j
  • Maven/com.hazelcast:hazelcast
Hazelcast allows arbitrary member memory access by low-privileged client 4 days ago
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-w294-6q5q-53p8
  • Maven/com.hazelcast:hazelcast
Hazelcast has an authorization bypass in IMap Predicates API 4 days ago
  • Fix available
  • Severity - 8.7 (High)
GHSA-2jwh-9rmr-j4xf
  • Maven/org.asynchttpclient:async-http-client
AsyncHttpClient CookieStore Silently Overrides Caller's Explicit Cookie Header... 5 days ago
  • Fix available
  • Severity - 6.8 (Medium)
GHSA-p2jm-6hj6-9rjg
  • Maven/org.asynchttpclient:async-http-client
AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or... 5 days ago
  • Fix available
  • Severity - 6.8 (Medium)
GHSA-x8v2-478q-2hvg
  • Maven/org.asynchttpclient:async-http-client
AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a... 5 days ago
  • Fix available
  • Severity - 7.5 (High)
GHSA-v2j5-22fr-j62r
  • Maven/org.asynchttpclient:async-http-client
AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate... 5 days ago
  • Fix available
  • Severity - 7.4 (High)
GHSA-mfj3-87qq-382v
  • Maven/org.asynchttpclient:async-http-client
AsyncHttpClient: Digest authentication cnonce generated with a... 5 days ago
  • Fix available
  • Severity - 3.7 (Low)
GHSA-3wp9-xfwm-rjjf
  • Maven/org.asynchttpclient:async-http-client
AsyncHttpClient: WebSocket proxy credentials sent to the origin server over a... 5 days ago
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-f9m8-cv68-674w
  • Maven/org.asynchttpclient:async-http-client
AsyncHttpClient: Cookie Domain attribute is not checked against the public... 5 days ago
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-jmqq-x5g9-9p2w
  • Maven/org.asynchttpclient:async-http-client
AsyncHttpClient: Replay to a different host sends the original host request and... 5 days ago
  • Fix available
  • Severity - 9.4 (Critical)
GHSA-rqf5-2wxv-rjf4
  • Maven/org.asynchttpclient:async-http-client
AsyncHttpClient: Digest challenge without a usable nonce downgrades to Basic... 5 days ago
  • Fix available
  • Severity - 8.7 (High)
GHSA-cqgh-8p3p-mx4m
  • Maven/com.rabbitmq:amqp-client
RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on... 6 days ago
  • Fix available
  • Severity - 4.9 (Medium)
GHSA-mcr4-qmvw-px4g
  • Maven/at.yawk.lz4:lz4-java
  • Maven/org.lz4:lz4-java
yawkat LZ4 Java: Native library extraction to a shared temporary directory is... 6 days ago
  • Fix available
  • Severity - 7.3 (High)
GHSA-343h-94h5-c4wr
  • Maven/at.yawk.lz4:lz4-java
  • Maven/org.lz4:lz4-java
yawkat LZ4 Java: LZ4BlockInputStream with stopOnEmptyBlock=false recurses once... 6 days ago
  • Fix available
  • Severity - 3.7 (Low)
GHSA-gm45-99xc-r7wv
  • Maven/at.yawk.lz4:lz4-java
  • Maven/org.lz4:lz4-java
yawkat LZ4 Java: LZ4FrameInputStream reallocates block buffers for every frame,... 6 days ago
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-7822-rcf6-97fx
  • Maven/com.rabbitmq:amqp-client
RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC... 6 days ago
  • Fix available
  • Severity - 6.0 (Medium)